c0f49c6e401ee3ed8e0f799bd342bda1bc97ef92d43e9fba95ed2cc42795904e

Sharing

Copy URL Twitter E-mail

General

Target
TcNo.Account.Switcher.-.Installer_2025-11-20_03.exe
Size 44.1MB
Sample260809-r97hhazfqf
SHA256 c0f49c6e401ee3ed8e0f799bd342bda1bc97ef92d43e9fba95ed2cc42795904e
MD5 c8e8221e0772649e8e4de78247343515
SHA1 e0678f6a1bef3d5cb39b6b66ce12e11aeeb0b158
SHA512 9b5e285b1038e5d6c05adb75d5998d2706068dc820524e8ea233d6d7aa9eb541fff14e36a73d521663101802694b90baee45e467b313367e528419c0e7a6291b
SSDEEP 786432:HE4AzUDhSosfbOlnyb0DKoR9/KqOdeMfROpMto96JI/ET0EmKvSS0qG/iKr:HqOhSow0eoRUq/MJOpMto+IcT0g0qG/b
TLSH
T11CA733B2C214F7DBC48F92B54B3ADAEE844634FA7B77074A623A750DE4743724C620A5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  TcNo.Account.Switcher.-.Installer_2025-11-20_03.exe
- Size 44.1MB
- SHA256 c0f49c6e401ee3ed8e0f799bd342bda1bc97ef92d43e9fba95ed2cc42795904e
- MD5 c8e8221e0772649e8e4de78247343515
- SHA1 e0678f6a1bef3d5cb39b6b66ce12e11aeeb0b158
- SHA512 9b5e285b1038e5d6c05adb75d5998d2706068dc820524e8ea233d6d7aa9eb541fff14e36a73d521663101802694b90baee45e467b313367e528419c0e7a6291b
- SSDEEP 786432:HE4AzUDhSosfbOlnyb0DKoR9/KqOdeMfROpMto96JI/ET0EmKvSS0qG/iKr:HqOhSow0eoRUq/MJOpMto+IcT0g0qG/b
- TLSH
  T11CA733B2C214F7DBC48F92B54B3ADAEE844634FA7B77074A623A750DE4743724C620A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH
  T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH
  T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  SevenZipExtractor.dll
- Size 31KB
- SHA256 2ed464c667095f3ed53c76b7955995cfc9aa52eb967ddce4e427a7bdc10a29d5
- MD5 3d7c1280e8eb831eaae6cbd6cfe664d9
- SHA1 95bcf83991b11cfe77695397036095610e8093f5
- SHA512 6fedae84da112f56ed84181aa4eb04186ac60fc9d5cf3ac9bfecbb4b82d4888d7e1ab4486a0dc4f9369a2033e5c3d5369d3f245a404cfc8e7686d4040ebdca1f
- SSDEEP 384:BQjbuEH7f3sFKIQ8FElhXe5VMXH2AgFwr7P1eTzUwfoaHZplZu/krYcEemduQjJI:ejbu6MvElhXeCH2AV7P+zoQQB4
- TLSH
  T1C9E20919E7AD8532C5BE877DD8F962130970D5823052EECA5F9463A62E03F366181F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  SevenZipSharp.dll
- Size 1.7MB
- SHA256 6024d559295ceda675cf7debda0dc2b3bf26ff783c32ce97192206b106e6f591
- MD5 02881e8568402d0b95de1b1361ebe5f1
- SHA1 c4616f1997c151dde30ff7e5ef2ccff8f5282573
- SHA512 6ce27cb40cb3659458f2453558329489cb2c0bfce9719cf3cb0a7e0f0e0eaa299c965d8a85b46668ca1d69e793616ddb646fbd4e10be093d3b86c670ad406ea4
- SSDEEP 49152:Mviq8hl4bWXSVKG9M0LRhVc0fuinUr9p8pLF4fi6:MviHhKbWiVbMqhVvu8o9pcLFwi
- TLSH
  T119858C1237F484FAD1A68131CE916BE6D3F1F9650A21870F27944B9E2F37790ED1A362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  SharpScss.dll
- Size 40KB
- SHA256 fdabb9c513b81a6dc41a0ea892c3095343cdd22a41e444a5d0c289960c31048a
- MD5 a7d784ec5dd39eac74c7ebe99aa82024
- SHA1 925c8d85bd310337920bf7254ce17b10aeb02176
- SHA512 f019022abaa689bbfeb41cd558f62880fac179d98950ffa1022ff3d19f1c0af3a7184e3e0b88e455e0b190f4aac624e32bc2add5b3f6f8604e45c7ad3073bdc7
- SSDEEP 768:+aSpHkNSx1R0gEEUYfa9ZclGdmp+3fOcOd642ixACTXxTAdfd5N7fZ:fQHkqUrcI+7c/L93Z
- TLSH
  T16A03F86D7B448E1AC6D809B234461B52CBF4F2CDA5224B7F57B97DAC1CB37090A12BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  ShimSkiaSharp.dll
- Size 161KB
- SHA256 1fa86454bb4d771889928ba3c1b49142249497c028993dd6ccd6c8eee14171d0
- MD5 b71bd7ad6653f84dcbe39b3bc49b5426
- SHA1 1d036d6c70469dc9df2701ceac0ca77e3c314d24
- SHA512 fea82956130457c3eb8bb1726a49292d5fec4dbf7cecb97277967376651c1b3c93ea1bead67c7a8f6180b5fbcf3f93b902e1d836a34b340644a2d37cc001ea63
- SSDEEP 3072:nW3bhjLRZFfdHqeY59+jI3Jx0SJNr8Gt0hrDL68zMEjoQ2SJp:nI13RZhdKejjQ3Xr8GtuoQ3J
- TLSH
  T1C5F3C52027BF861ED6EEC57CF0105928C76AE7493167E7BE9E94B4E6E5533424200EB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  originalwwwroot/css/open-iconic/font/fonts/open-iconic.svg
- Size 53KB
- SHA256 a14a4b752f92a0b245c1fe1bcc0de2283ed30a6ebaa0b913a40425549dacd707
- MD5 eca2c26759a009a4a9361151efe99e74
- SHA1 b75966515796b2c32ff1be13337c5d0c7e0f6bca
- SHA512 4f250e0d6bad3c7bff2104459d77dc701b94430c22de87f1b45adc489ff3ea49a344f313014ec0c20c8110b92b06671a1c2d5847f92edeee611ce420a3c5d76a
- SSDEEP 1536:lqBfWFIKo1XuANkb+C7CK/k1Kz69C7OpQa/dqTQD77D/4kId4Ozia5BUN/KUt5:EfWFRopuukb+C7CK/vz69C7OpQa1qTQ7
- TLSH
  T121338A4CC49A9C687EFE428769B87F54402CA5CF322D34E8BE6DF6308E15A258F9D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  originalwwwroot/img/TcNo_Logo_Flat.svg
- Size 570B
- SHA256 a27b3293e2c4d07f1c4d03a714952f7e7c9078eacf79109d8e89dea4a5a594e4
- MD5 7c07deac89d8a4291be58ee21d1c9836
- SHA1 ccc810c217f0f6c0fc4834ecc830d0bca1089129
- SHA512 1570429ccd632cbb1814fc50007fba693d6a7db9ef00dc24dde687fbcfa541e33dcdf79ebe0c57b7a6e2491684cf744144e6cb0978ad4465cec804c53c2c2166
- TLSH
  T1DFF0E1D8F334EFB9DE4A052FA1542A39045161369EB54061C3B41E2052455AE54CFBD5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10
- Target
  originalwwwroot/img/icons/ico_BattleNetDamageIcon.svg
- Size 537B
- SHA256 196a54750def0fb8e84a2ba60876fd36290b553a0a7b1e9a5a48381f56b68401
- MD5 2fbca957d0dc426b7c9cd13c7f919098
- SHA1 31536cb6aa1f8a43e4509b8c89a03f5b2302112c
- SHA512 72e1193540324549ddb50da2b6a16362c0c76dd1a71941f91f551bf4239be600e2e57aa6e05fa39abf4a6870173e886fef44072ef5615c98b6bb5081cb0b619a
- TLSH
  T139F0BBD5162E6AB46A8E970E5778CF42223570747B8010708360A34441B98F5BBF6A7A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11
- Target
  originalwwwroot/img/icons/ico_BattleNetSupportIcon.svg
- Size 549B
- SHA256 440e56c2e1e3c0a725d4a35756718f67e0c794280e098c8580a7f530b4d57cbf
- MD5 af0ab4a45230ef0bea5cb3dd9c2039ae
- SHA1 7412d7ea869f26a90da7f92e219acd020428c57f
- SHA512 46772050ad4918963e017f475efc8fc2bc611261188ebd2d8bfaeb80fd20988a63ca1fca2a4017140fdf165e405a67a6f99b1cd5f765fd231078ddafbda952d7
- TLSH
  T19EF0F0664E172C30A1278655EAA56199EDEE3DBB81804008F60017B0CF50485EA4FAEF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral12
- Target
  originalwwwroot/img/icons/ico_BattleNetTankIcon.svg
- Size 327B
- SHA256 25e57765523911c766eb37d52e43587e343e01d1f5ef673a84431e2d741d016e
- MD5 1ca223e3d521c77435d8cc844d76abd4
- SHA1 0477520579b340ca0bfc1809937779e8799781c6
- SHA512 b13927ee79ae4fdddf1ed32fa4e24a7d29c3c10707db53ebbf262da15ee714d0cabc23b89a152b0ed3a0c287fdca97f2cac091deda27b371546cbb6dd562e8d2
- TLSH
  T14AE0261993AE68269C1C87016F969A44860C602404A3D158CCA483D09218CEDF9FDDEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13
- Target
  originalwwwroot/img/icons/ico_discord.svg
- Size 1KB
- SHA256 7756b14f9c224c35e851c02a20523cdd9883a578be8b7dadbf237a56bcc7da39
- MD5 60ad0b94f64d32787f19053c648b21c6
- SHA1 9210acbbd423d550aa25de9d86cd156b8e910c9f
- SHA512 21c12606657c3cef9d400c1d59885cc9c55a098fed79d79b1dd4d42854317d5d66a2933bf4e23790fedc0f2559dceeee2d1c06f387425b6b9098305788b2d8b2
- TLSH
  T1C42198D20314959C21CEDD18BE5969AC6B0A4073F73F69C1C7AA8738E84E992EC4CCA0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral14
- Target
  originalwwwroot/img/icons/ico_doc.svg
- Size 528B
- SHA256 2b363c19e9827b183de0df52a71eed27bc4e05cc3f6d77f770907f527883adbd
- MD5 547dd2b5c6a54b32b6f2ebb583dc618c
- SHA1 976cd659f052c8dac3f97059241967d35f31fb48
- SHA512 1c8c2cad14472544a3cca1e6b0e77cc4df8394ec974cce14d5b6815510423f4998ef3d3bb0ade49e704400bc5fa178251aa1c86b29c9c30fe474377e7c6e09f7
- TLSH
  T187F084DAC3109DB6FE650B2EAF915DD0238540F67A746C7AD1140964A50C9CCE09FDDA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15
- Target
  originalwwwroot/img/icons/ico_github.svg
- Size 963B
- SHA256 4d0b2716419d1d9646323258adec1e75bc257cb3d5bc289481dfb308a6b622ec
- MD5 5fc8147a6e89003af839fb16f69d6a52
- SHA1 6eb268d7a994ccd46efea0a7f1b1d504e1498a59
- SHA512 7496f243b2574d012d70a39b7c0c830ee61e0b6eebd19277a166fbe72baf564920fd17dfde1c23a7f302bf4fb40717f0f606ca5db4e26d5b8cfd5eac7eb56054
- TLSH
  T19411BDE76F107B9C4AD4C53DEB79AB44534F303E74A441E6859E9BF4040B828F60B924
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral16
- Target
  originalwwwroot/img/icons/ico_kofi.svg
- Size 1KB
- SHA256 ea53eaa091bb85b2529fb1ad01f8191267f53ffb29e8611b54d29ecff241fb46
- MD5 a0b9377dc96cc3b9227e186a775daa0d
- SHA1 2ed7d0e5dc37430779ee2b0b9ad11faaf17d5555
- SHA512 4035c9b780b1949e17ed099a8ae4ee2fa474b4cb849c4942dabd5d6d5fa2afaefbab3ffe2a3d5f4d6d06651e9ee19086306a1d9a766e124e7a60d32253d0fc8a
- TLSH
  T1713144DB43B4538855DEC69F7F37ED69621E783AD679018186AB895D8047DC1E109840
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral17
- Target
  originalwwwroot/img/icons/ico_networking.svg
- Size 4KB
- SHA256 f54472e7e2148bd366dd6be640a29511024175717a84b2326b0359b1a61ece00
- MD5 5f33ab61953b80dc000c67bf1deefd54
- SHA1 ecccf842c2cb5e5143390beb006be940992efecb
- SHA512 a2e31a2b01e065d40e00451306fc9523e71d07fc2a5cc8e95af6c136b92e233d182d5838bca33e56f9cbd2a3072a1865efd3d244ba29dd684e4b57ecd879a7d1
- SSDEEP 96:eAqiW5zUGGESfDzF4UZ9yrxockA/NlBTJwwV6+2BRM:fqiI5GESf3FrOFoS/NllmXZBG
- TLSH
  T1529130CB52709389E9CCD55E5BB9FDD0005A64DEE4B2A8868ADF4B4C944F988FF18428
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  originalwwwroot/img/icons/ico_patreon.svg
- Size 322B
- SHA256 0882dbf6702b2016b62ed26f3fff4f15ad5dcc9a17f848cfd3c2fcda0e25879c
- MD5 20fdf2cb4d0c4126b653e06313d2773f
- SHA1 b8b024d8d8486487940db3d953fd3e46a2bcf8d3
- SHA512 e423b66b21c5c386c6e8e4e8ef291e7ccad2fa4b8d1dac4459633757576e50c93ec9b05716a5d452861efd64d1f1e885492bdee08557f0803b324e67deb54c01
- TLSH
  T1A0E07DDC83BC1828B87F0970C75A2732055D2002705457A8D4BF3431510E4C4F047829
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19
- Target
  originalwwwroot/img/platform/Albion Online.svg
- Size 1KB
- SHA256 4dbf07207412b02b92e736ee24bac576c707238207b06fcc7c42661b9b0bb701
- MD5 54ceff702aa4b960730e12b759b59a70
- SHA1 e01814b2f6e70f2cd178bb2b966d045c7fab1bc6
- SHA512 05f30820692366eaca28ab31daa128c05e9e577d7161f2d74f4475952a26d5b1e50ec112715f3af5c3432ec75e4ab5e85c35d6cc04bb6c8ab11ceba6f2e75850
- TLSH
  T14C31766FC79206F47968027CE1B0398861B69045A836CE08C33DBA15E452F4BB2340CF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral20
- Target
  originalwwwroot/img/platform/Arena Breakout Infinite.svg
- Size 751B
- SHA256 731ddde4238387d85294971610f160dc9930c1fbfd1d63e45b3374303ee6331f
- MD5 0b2b8f61d701c3cb626df30e30d733e9
- SHA1 4b12813dfb1287aca255746f677ecbd808f2fe15
- SHA512 6a067b9009bac64d71ce80092a78cadb45ec94b9af95a280e577a6e10ed5132964a7f10e303a568e250eb22139cd47a15b47343e33e44698da4110790d4a0374
- TLSH
  T12201659DD270DE3CFCC1983F03689ADD3543449EA4F31278CC6A8606AAC949DF1144BB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21
- Target
  originalwwwroot/img/platform/BattleNet.svg
- Size 2KB
- SHA256 4623db07219c2c4b4f0adef75d8f583c006af80819acd93ac78e5b580b07cdb5
- MD5 00bb80f8f937299a0e5ad9c6aa74032e
- SHA1 5110a9f00952aebb8e9d74269336ffc4f8ef1643
- SHA512 9887d4073df5c844b956a3d96d3f253358a7b0bb6c52238fa043d2d484c04d0ac6668daec53626581878abe46b16bcd408876cde41a1207961f299e1860550bd
- TLSH
  T12D5177C0FFB9A1F8D8C0E35DE3249DAD7CA654AE33338A2CC2790E9055C795DD548892
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral22
- Target
  originalwwwroot/img/platform/Delta Force Hawk Ops.svg
- Size 392B
- SHA256 88efc4c7f0ad4b2fe4916aed765f7187678af5cb023207b073dc46ed351b67dc
- MD5 f3fdfec6b9cf8763d36f28450314088b
- SHA1 5dc981b830d7b74441fe3d9cfe7151d31444303a
- SHA512 61de45ed285ce60fd00a367b9d2971ce2d8d1833ed8e912aa9453e9e951295b736863ec434366c8c076b26f45faf12fb90dd087ebaf0d697c6eae903f535dec9
- TLSH
  T189E0618643B8CD1AF99443FEF374E265586364DFC4901FB5E899301820050DA7C3D95C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23
- Target
  originalwwwroot/img/platform/Discord PTB.svg
- Size 1KB
- SHA256 b87ff78cddd9a26876e4e996c2188ebb8c37e49b40b781cac598b349fdbdd9d6
- MD5 2c088e01f11a011b49cb4294fe6d769c
- SHA1 eaf9649e09be673bce91f44bd0d83d954a937ec7
- SHA512 7ac1196598a79fc40ced617c5311aa959ee7cbfc2a18153088a8ae000eebe7c949ddcaf380ad48108d16dd9075bf74256920dc9c4e38be647414e23ccba95993
- TLSH
  T1C331E0CCAEEC3BF880DC5367BA51AD7D75C10629BC20471287AE0A9CAC83C14EB34606
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral24
- Target
  originalwwwroot/img/platform/Epic Games.svg
- Size 2KB
- SHA256 2d5e59bfe2262581cfde59b8ace5fb3ec46095d00e8b9133073ba979fd3c63fc
- MD5 df266aec5778ce3adc71f0f08ca2f4bb
- SHA1 bd3f29b89e9f24b1c0860af7e033f1443dd0c011
- SHA512 065d05f560db94815922e4f54be048a1073ff1dea670f8d696af4e795aa983e5c836f4970ff2cd3ff827a420f02df8fc7036cd18e9596c00b450dc3ae154660e
- TLSH
  T1815163C8FF34D37C38C453AF933C89D8BEA759B9193506A0C67F1694425396CA649CA1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25
- Target
  originalwwwroot/img/platform/Escape from Tarkov.svg
- Size 451B
- SHA256 f0ded7b77205609785d39d262b81071d54ce7e3179744cd9f2272f2a0b8b0465
- MD5 055cb267ab5bfe7ec8df5fd75781cdbd
- SHA1 c1e23fff9cbc3f07ba0a93b2c81ae149f2ef5977
- SHA512 23c8933cc3ef500ea7207af1af8ee3904d312d01ec689273c1ee01d7d5589aa846296ee375ebbed8189855ae43b7fde86c9cc04e94705c8ba342b88e681e33a5
- TLSH
  T11FF0A3C8C640FCDCFCE50D15E3D42548BC0F096535950EB2D4A30E308573419DF5946D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral26
- Target
  originalwwwroot/img/platform/GOG Galaxy.svg
- Size 1KB
- SHA256 11847356ad76a4ca5c3f2bb4bcd704b650af6c1698757b609cf0bf7e1f8742cc
- MD5 2e00985bcd0469b0c039e2878971cefc
- SHA1 8d43867544e54ba2d24890906c951076716b91bd
- SHA512 b6c51ce088b1f04e0c19317804020f9113793df93d78c9a9db40adfe83b211a51f0ea04532d31f2db672f0c49c49a76c09be807e55fc082c5e2cfa096eaae8be
- TLSH
  T1C1412EE5F37812B85D5917ACEB3385A482EE6C6E3713C32022BE8DD86643A5CD71A520
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27
- Target
  originalwwwroot/img/platform/GeForce Now.svg
- Size 1KB
- SHA256 d87fb88903f57721f1ede2145c41b63416ca949341ff9dc96b0009b9c9740951
- MD5 0cb4802ba47b397df7d28ce4d2be702b
- SHA1 8865cd1801f9f0c5aaa59a87940eb3b72b02986d
- SHA512 1132ca04d86bf0ffbf2a8f75f39081793a51e4e34f2dd65f49cd8dc5e672c461253b8ba1845030016455d1d7ccb090f664351991c1602c6e422e445a2d6bdd45
- TLSH
  T1082123C4DA3044F8D4C033DFAF145F5C6D9E096F683A4578866A0FA96E458EF9808C59
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral28
- Target
  originalwwwroot/img/platform/Genshin Impact.svg
- Size 3KB
- SHA256 736818e0bd46ca7841bf3ed4db96322c8d6f69d9c85f492a717707672f6517a7
- MD5 f65631517db5dc6b2402590af2acd3cd
- SHA1 00926ffdc736935a9a8e77d5e6b87167d0d1a6f8
- SHA512 c05bb10230e876aaafbb2e0ff3453151fd3747e72d5921d1fd68d8bf30baab348a8d3413908fb621ec1eea864bfa7934822e2ced3920cd96c23ef2f416dca3ef
- TLSH
  T1AF71D7D69FB0F3F4D8CA2B9DDF20ACED365B94BE2DB34185813AD94459C7684C109C80
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29
- Target
  Uninstall TcNo Account Switcher.exe
- Size 107KB
- SHA256 00550fce3178455f6b30b44b6e6deeb10a8e4157a3daacf068a78feec4ef1971
- MD5 1fa68fcb70c377b10bc3eeca0491b715
- SHA1 64a8a2ea31e0989d1bc9f7ca40982690f634201f
- SHA512 84adf059dab8e2263de192410499713d10606e4f9997a782124491f822bd53aefc4004f64008514d6978b36def3605070e34069e7c9f4addfd3f415e067bae12
- SSDEEP 3072:zbG7N2kDTHUpouP+7LCcCslY0W4aJem2F:zbE/HUn+KzlJ9g
- TLSH
  T1D6B3AE20BBD9C4B6E7E30070143A1FB9C5A5DC6E5513041BEBDE396E7BB5985AA0F302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Deletes itself

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30