1472e257d37069a6f2e52b8850655ac480ee52455cbe9ab161df7e89cb3ad3d5 | Triage™

Login
Reports

Overview

overview

7

Static

static

5

fb56setup.exe

windows10-2004-x64

7

fb56setup.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$TEMP/fast...or.exe

windows10-2004-x64

3

$TEMP/fast...or.exe

windows11-ltsc_2024-x64

3

$TEMP/fast...BC.exe

windows10-2004-x64

7

$TEMP/fast...BC.exe

windows11-ltsc_2024-x64

7

$TEMP/fast....6.exe

windows10-2004-x64

7

$TEMP/fast....6.exe

windows11-ltsc_2024-x64

7

$TEMP/fast...nt.dll

windows10-2004-x64

3

$TEMP/fast...nt.dll

windows11-ltsc_2024-x64

3

$TEMP/fast...ta.exe

windows10-2004-x64

7

$TEMP/fast...ta.exe

windows11-ltsc_2024-x64

7

$TEMP/fast...ql.vbs

windows10-2004-x64

5

$TEMP/fast...ql.vbs

windows11-ltsc_2024-x64

5

ODBC/FBODBC.exe

windows10-2004-x64

7

ODBC/FBODBC.exe

windows11-ltsc_2024-x64

7

Plugins/Co...nt.dll

windows10-2004-x64

3

Plugins/Co...nt.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
fb56setup.exe
Size 22.7MB
Sample260810-wv39razwa1
SHA256 1472e257d37069a6f2e52b8850655ac480ee52455cbe9ab161df7e89cb3ad3d5
MD5 0c85f19c26df1e687a156d24e567a418
SHA1 4478169b5b1c2df776f08fb1a151eafd52f91859
SHA512 94ccecee9c77353d2a28f004d133c94af99b49a537ed51cd25773c0409aa9a82f925206b2c764e4c0816555e8f37dd0d952640d04777f19696b75d966214258a
SSDEEP 393216:3Aqon6D54HLdDrJJjWvukDOC40FM1TbS/NywZN81pFANchdV5mRF8yMHWsv2wKIL:Q/6D5wLd/J8J740FMeyuqKY/gv1M24Ew
TLSH
T1A9373307B0B1A573C1018BB345B13B2C9A39D6BC9A35E7BFBB156885CFC6D1785023A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution installer link pdf upx

Static task

static1

5 signatures

pdf link installer upx

Behavioral task

behavioral1

Sample

fb56setup.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

fb56setup.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/AdvSplash.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/AdvSplash.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/inetc.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/inetc.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$TEMP/fastbook/DemoDataInjector.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

$TEMP/fastbook/DemoDataInjector.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

$TEMP/fastbook/FBODBC.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

discovery installer

Behavioral task

behavioral20

Sample

$TEMP/fastbook/FBODBC.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

discovery installer

Behavioral task

behavioral21

Sample

$TEMP/fastbook/Firebird1.5.6.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

$TEMP/fastbook/Firebird1.5.6.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

$TEMP/fastbook/fbclient.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

$TEMP/fastbook/fbclient.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

$TEMP/fastbook/makedemodata.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

$TEMP/fastbook/makedemodata.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

$TEMP/fastbook/rawsql.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

$TEMP/fastbook/rawsql.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

ODBC/FBODBC.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

discovery installer

Behavioral task

behavioral30

Sample

ODBC/FBODBC.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

discovery installer

Behavioral task

behavioral31

Sample

Plugins/ContactManagement.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

Plugins/ContactManagement.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  fb56setup.exe
- Size 22.7MB
- SHA256 1472e257d37069a6f2e52b8850655ac480ee52455cbe9ab161df7e89cb3ad3d5
- MD5 0c85f19c26df1e687a156d24e567a418
- SHA1 4478169b5b1c2df776f08fb1a151eafd52f91859
- SHA512 94ccecee9c77353d2a28f004d133c94af99b49a537ed51cd25773c0409aa9a82f925206b2c764e4c0816555e8f37dd0d952640d04777f19696b75d966214258a
- SSDEEP 393216:3Aqon6D54HLdDrJJjWvukDOC40FM1TbS/NywZN81pFANchdV5mRF8yMHWsv2wKIL:Q/6D5wLd/J8J740FMeyuqKY/gv1M24Ew
- TLSH
  T1A9373307B0B1A573C1018BB345B13B2C9A39D6BC9A35E7BFBB156885CFC6D1785023A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AdvSplash.dll
- Size 6KB
- SHA256 eb1ca2b3a6e564c32677d0cdc388e26b74ef686e071d7dbca44d0bfa10488feb
- MD5 13cc92f90a299f5b2b2f795d0d2e47dc
- SHA1 aa69ead8520876d232c6ed96021a4825e79f542f
- SHA512 ff4e6e6e7104568fc85ef3a3f0494a5c7822a4ceaf65c584ad534f08f9a472a8d86f0a62f1f86343c61e2540b2254714b7ea43e4b312ff13d8271ff069386fa3
- SSDEEP 96:6hNSXIcmYjkvTS6MnBNZ1BMjDfhkkEkkXstWpPwoS:JXIpzTSd1BSk/kJtWpP
- TLSH
  T137C1B837B7C216F7C35600F12916375387E9943263A1946909B3EBCAA6A185BDD34703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH
  T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 7755ff2707ca19344d489a5acec02d9e310425fa6e100d2f13025761676b875b
- MD5 a4173b381625f9f12aadb4e1cdaefdb8
- SHA1 cf1680c2bc970d5675adbf5e89292a97e6724713
- SHA512 fcac79d42862da6bdd3ecad9d887a975cdff2301a8322f321be58f754a26b27077b452faa4751bbd09cd3371b4afce65255fbbb443e2c93dd2cba0ba652f4a82
- SSDEEP 96:2fiqP7bO2qHkAC40KhvSE+6nrxtMn0iGd88qRLqtJ1tbRhElfRx2:siqP7OHX1Q4xtcf8qo/ttgfRx2
- TLSH
  T102F1E8BAF7C109B2CA4B5A302C177B178F66E621032561B3CA6356CAB5C15F3ED25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH
  T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/inetc.dll
- Size 21KB
- SHA256 67eff17c53a78c8ec9a28f392b9bb93df3e74f96f6ecd87a333a482c36546b3e
- MD5 d7a3fa6a6c738b4a3c40d5602af20b08
- SHA1 34fc75d97f640609cb6cadb001da2cb2c0b3538a
- SHA512 75cf123448567806be5f852ebf70f398da881e89994b82442a1f4bc6799894e799f979f5ab1cc9ba12617e48620e6c34f71e23259da498da37354e5fd3c0f934
- SSDEEP 384:oW4gLK82JvtosNCPhXKJ18hcEP1+f+pvMPbkdTg1Zahzs60Ac9khYLMkIX0+Gbyk:oW4i/2JloB5IQ9AhkwZaKRu
- TLSH
  T12DA207425B414AF3D3B60634707A33630769FE72246655DB86F32AC97878393EE36722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH
  T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
- MD5 acc2b699edfea5bf5aae45aba3a41e96
- SHA1 d2accf4d494e43ceb2cff69abe4dd17147d29cc2
- SHA512 e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
- SSDEEP 96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
- TLSH
  T19BD1E73D75C33DB3C54ACA762C65292B0FB8C9261B5402119B6716C279D5AE3FE29382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $TEMP/fastbook/DemoDataInjector.exe
- Size 1.3MB
- SHA256 81667829437cde10abe1a4df4c8a12c0b8bb6d3b286938aa7aa07544af7b6317
- MD5 0b5322071591c2f13eb2864d8a7d73e3
- SHA1 f44e1f5ae94f9e353b5b112574f45224035fad97
- SHA512 a8d79f22287d42ad96781c7d7f2b354d3d5c261800f1eba326ff29582aa24dffebdc4ce9e49af77948c2feddd34aef317dc3ae31c9196cc00d3f0b2f770fb358
- SSDEEP 24576:VcnB80UXsm4djKMzbM30ZTJbdbL2l2OlTwlDLlFzWJ5pH89dIKxQX:unB8batV9bdhXlflFzWzd89ddx
- TLSH
  T1D7558E27F3D28837D17316388C6BD399992AFE002E38554A37E59E4C5F3A6827D341E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $TEMP/fastbook/FBODBC.exe
- Size 966KB
- SHA256 4e170f1bcd3b5767e77bb4593f1ffaa1326e14f969fdae671318356a99ce95f8
- MD5 b192b2741bff4bb5cdec8fc68cae29ec
- SHA1 ec1d942baf6d960ba23de0d80ceda6d96c4e87ea
- SHA512 b322d118e8366f4e786ff1bba9d2a0322065596db1239804636b889df3a1a0e880946506f7961b4d5dc673689a966cc62f81f47a9570e4cf3ec7658d0032197b
- SSDEEP 24576:Z3lYlz4wBTXZvJ6N4qFjMi1oQHwi80rALC15wvnPdsqQ4+:ZghtXZv0iP3QK7LCgvhk
- TLSH
  T10F25234364608972E72245325C39D942CEBB7E2374B9259D33CD1A2F4EB7F50E81A39B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
behavioral19 behavioral20
- Target
  $TEMP/fastbook/Firebird1.5.6.exe
- Size 2.7MB
- SHA256 5441045fbd837618e5c9c907177f88879d929e869a2c6c089b83915a357359f9
- MD5 ba756f12301c068820f90c43dff15a62
- SHA1 772f8f3d33ce71def6eedf891d34a41030ac5ca6
- SHA512 ab96f889f3ca82446721cec56b6375f80f59f437a3620928d5e177d5d73bb51f8d50fe69a3a8ba914139ee342a0b46e57e1cc269975dc868dd18ac3481d2d8e1
- SSDEEP 49152:vOS2mUP6UUb+YKxRCwefyBRqLQK/T9HZCtzz9fhxR2hO/oLOm3NHr:1XUAnKxRCNyBILQdzdR2M/oSm9L
- TLSH
  T1B5D53317D2F6D031D181CB3E9DB10714EC31B62A1E3E48ED2B699CDC5BCB99AA542237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral21 behavioral22
- Target
  $TEMP/fastbook/fbclient.dll
- Size 348KB
- SHA256 0eb316a273ce93f7a95bdecb92c13f8cde13a215388d2ff826e357f7014e5a8c
- MD5 bede59f750b639d7058eea1f4c1ea532
- SHA1 a40834e8369d742b31b47c6447a45a4973a14b68
- SHA512 6f0c33a099a67180b94d371aca57c3955ee33245c0f2aa113548367cac6e61cb107272b29657704ae1a5279e67d2eb4727ecb8f250fd7eaf832393a489fd92ff
- SSDEEP 6144:XWJH5omLV6QQ2l3sICxLc0CP20jD87SPuM6pmkLhsCvDxNmt:mJH5pUQAcJ7k75ewDtYt
- TLSH
  T110748D11BB52D0F1D68D12782076673BAB3CE18D16A6C2D3E7A8CD7718335A1F71D24A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  $TEMP/fastbook/makedemodata.exe
- Size 3.1MB
- SHA256 b3721ddb9680f7d440a3d37681ac1ad4544200f602fd26b28e7c47dacdf9e6e2
- MD5 a7892b00832ac355117dfc11cfaedf22
- SHA1 827dbf087707e21eb323195ea734867a6e85013e
- SHA512 2f3e76b4b2f558b8070f7fb1ee33dfa4c7d09ac84ea3c305fe966607e8c5940ee4bf2b8f8d61445112be8c9d8d62b93fc4f30d0d284b91fb6e3eb0938ab25951
- SSDEEP 98304:Vxhyazt4sm1YHUPwKIuaY703wqWdoROPflPq8:HhyQWsvUPwKIYL2kfA8
- TLSH
  T137E5331D763767DBCD185E7E022265BBE27890F5862A66AFF73021C10FC673294152CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral25 behavioral26
- Target
  $TEMP/fastbook/rawsql.txt
- Size 7.0MB
- SHA256 26afaefb4c4481a0c8001626574467bf51369cdce09bcb1bc9f8948c114e0f3f
- MD5 829d64f0247371280d4d7da13d220078
- SHA1 1c62c9f417b0cd7ed50234f77848731dcdb03623
- SHA512 0d18b33f4d21c86d6999e21facbb735ac732293c51da9e24f74a08fdcb92c5ea304e8a79832ae717e215ab5faca07eb5d32cd00782a06ec9efc130050c65ae3d
- SSDEEP 3072:fA12LWF45Kb2RO3ZfqVCxJ1o0AQs6OVZajYBb0ownjzXJt0J7KtGQpNOyU+Dv+g8:IGrHGZ6IEkXexV
- TLSH
  T1A576CE3D6E933A06520BEA4251392DCB6EDE5197A3544F88B44108CFDBEB1306E6673F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27 behavioral28
- Target
  ODBC/FBODBC.exe
- Size 966KB
- SHA256 4e170f1bcd3b5767e77bb4593f1ffaa1326e14f969fdae671318356a99ce95f8
- MD5 b192b2741bff4bb5cdec8fc68cae29ec
- SHA1 ec1d942baf6d960ba23de0d80ceda6d96c4e87ea
- SHA512 b322d118e8366f4e786ff1bba9d2a0322065596db1239804636b889df3a1a0e880946506f7961b4d5dc673689a966cc62f81f47a9570e4cf3ec7658d0032197b
- SSDEEP 24576:Z3lYlz4wBTXZvJ6N4qFjMi1oQHwi80rALC15wvnPdsqQ4+:ZghtXZv0iP3QK7LCgvhk
- TLSH
  T10F25234364608972E72245325C39D942CEBB7E2374B9259D33CD1A2F4EB7F50E81A39B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
behavioral29 behavioral30
- Target
  Plugins/ContactManagement.dll
- Size 85KB
- SHA256 9eaeb4935e0d694e9fdbbf8a25f299973f42d339220c31f046f7e26f5b875ba2
- MD5 1f2fd0a6e237ed23f9f25d7a52a04f0b
- SHA1 910fd035b06a9e10a487733fe613c50f6252c3fe
- SHA512 c4d3a13de690fc31030d47d9d4aa01b8cef0f0d5cb4c9637c8d773651e901550884b88f2cdae97821d7ab1c22c535868352aba2977caf132973f5e783426603d
- SSDEEP 1536:wjqjoQTOKuovbvTspOaQcNFeSe4Edi3sXxC7gCKKmvXoU3mvj7dHD5i9:nobtgvssanNFeS9EM3IxC7gCKdvY5vfM
- TLSH
  T16F835B53B2C28872E3651ABC9C1BB358D8BFBD213E3A466A77A44D0C4D7D2C4685C787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pdflinkinstallerupx

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

discoveryinstaller

behavioral20

discoveryinstaller

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

discoveryinstaller

behavioral30

discoveryinstaller

behavioral31

behavioral32

© 2018-2026

Terms | Privacy