Overview
overview
7Static
static
3CyberSniff.exe
windows10-2004-x64
1CyberSniff.exe
windows11-ltsc_2024-x64
1CyberSniff.exe
windows10-2004-x64
7CyberSniff.exe
windows11-ltsc_2024-x64
1DiscordRPC.dll
windows10-2004-x64
1DiscordRPC.dll
windows11-ltsc_2024-x64
1MaterialDe...rs.dll
windows10-2004-x64
1MaterialDe...rs.dll
windows11-ltsc_2024-x64
1MaterialDe...pf.dll
windows10-2004-x64
1MaterialDe...pf.dll
windows11-ltsc_2024-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows11-ltsc_2024-x64
1PacketDotNet.dll
windows10-2004-x64
1PacketDotNet.dll
windows11-ltsc_2024-x64
1SharpCompress.dll
windows10-2004-x64
1SharpCompress.dll
windows11-ltsc_2024-x64
1SharpPcap.dll
windows10-2004-x64
1SharpPcap.dll
windows11-ltsc_2024-x64
1SimpleInjector.dll
windows10-2004-x64
1SimpleInjector.dll
windows11-ltsc_2024-x64
1System.Management.dll
windows10-2004-x64
1System.Management.dll
windows11-ltsc_2024-x64
1WpfAnimatedGif.dll
windows10-2004-x64
1WpfAnimatedGif.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 17:20
Static task
static1
Behavioral task
behavioral1
Sample
CyberSniff.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
CyberSniff.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
CyberSniff.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
CyberSniff.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
DiscordRPC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
DiscordRPC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
MaterialDesignColors.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
MaterialDesignColors.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
MaterialDesignThemes.Wpf.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
MaterialDesignThemes.Wpf.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
PacketDotNet.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
PacketDotNet.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
SharpCompress.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
SharpCompress.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
SharpPcap.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
SharpPcap.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
SimpleInjector.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
SimpleInjector.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
System.Management.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
System.Management.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
WpfAnimatedGif.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
WpfAnimatedGif.dll
Resource
win11ltsc2024-20260709-en
General
- Target CyberSniff.exe
- Size 161KB
- Sample260809-vww2dsv1ct
- SHA256 895fef1d7338661aa3cd4f40fd226262c642310169835c270994904e81380d26
- MD5 8d130996fc33ba685a1c95c06db984cb
- SHA1 a2dfe8044ee494582cad82a099c14b1819b79d0b
- SHA512 ff895da3f850adbe3e5e18391480339e521c018b18245254c9c36697481af9c10e4628ece4abfc6091ffde0a19482a7f4e0a692912db5aa4375f08c068cc5557
- SSDEEP 3072:mguAgTsGLYEZl70PsLko1Gs2T/0oim/JbRZzlZ2pfqZ1:m5twsLko1Gs2T/pPlZ2xq
- TLSH T17CF36C0B72AD01FCE0ABE27889925A46F3767816433697CF0390467A0F77BD49E79721
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000\Control Panel\International\Geo\Nation CyberSniff.exe