3189253e4cbb13df06684860959ace4989011a5fd23f868de83852941db2df55 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

NuevaPrint...up.exe

windows10-2004-x64

7

NuevaPrint...up.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

index.html

windows10-2004-x64

3

index.html

windows11-ltsc_2024-x64

3

js/main.js

windows10-2004-x64

3

js/main.js

windows11-ltsc_2024-x64

3

node/licensing.js

windows10-2004-x64

3

node/licensing.js

windows11-ltsc_2024-x64

3

node/nativ....dylib

macos-10.15-amd64

1

node/native/Mac/systa

macos-10.15-amd64

1

node/nativ...te.dll

windows10-2004-x64

1

node/nativ...te.dll

windows11-ltsc_2024-x64

1

node/nativ...ta.exe

windows10-2004-x64

node/nativ...ta.exe

windows11-ltsc_2024-x64

node/nativ...te.dll

windows10-2004-x64

1

node/nativ...te.dll

windows11-ltsc_2024-x64

1

node/nativ...ta.exe

windows10-2004-x64

1

node/nativ...ta.exe

windows11-ltsc_2024-x64

1

node/nativ...te.dll

windows10-2004-x64

3

node/nativ...te.dll

windows11-ltsc_2024-x64

3

node/nativ...ta.exe

windows10-2004-x64

3

node/nativ...ta.exe

windows11-ltsc_2024-x64

3

node/turboactivate.js

windows10-2004-x64

3

node/turboactivate.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
NuevaPrintPanel_Setup.exe
Size 3.5MB
Sample260812-bjef2agm3t
SHA256 3189253e4cbb13df06684860959ace4989011a5fd23f868de83852941db2df55
MD5 22e7cff89301782ba08a42a9390786fb
SHA1 3420e5426c8d65c5aed7e3223b8cb054677fd8f7
SHA512 64e23b2bcd2cc1e0093bce83bdf2c8f59eb7d3b25fe07627c31dd00743f2b27ea9bf49b43f979307f66462dc2b37f20e8630065a67a40656525b88351fd69d2e
SSDEEP 98304:VITsqZGW3RUv3up3Ok72OZKCViXRdSoF954D:V7A9RGul2OIFjSUn4D
TLSH
T16E06339123880627D0B31339E4ABD336B7699F4195BFCA4B52D0BC937A0DF572B809C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution macos

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

NuevaPrintPanel_Setup.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

NuevaPrintPanel_Setup.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

js/main.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

js/main.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

node/licensing.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

node/licensing.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

node/native/Mac/libTurboActivate.dylib

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

node/native/Mac/systa

Resource

macos-20250619-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

node/native/Windows/arm64/TurboActivate.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

node/native/Windows/arm64/TurboActivate.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

node/native/Windows/arm64/systa.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

node/native/Windows/arm64/systa.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

node/native/Windows/x64/TurboActivate.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

node/native/Windows/x64/TurboActivate.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

node/native/Windows/x64/systa.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

node/native/Windows/x64/systa.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

node/native/Windows/x86/TurboActivate.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

node/native/Windows/x86/TurboActivate.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

node/native/Windows/x86/systa.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

node/native/Windows/x86/systa.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

node/turboactivate.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

node/turboactivate.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  NuevaPrintPanel_Setup.exe
- Size 3.5MB
- SHA256 3189253e4cbb13df06684860959ace4989011a5fd23f868de83852941db2df55
- MD5 22e7cff89301782ba08a42a9390786fb
- SHA1 3420e5426c8d65c5aed7e3223b8cb054677fd8f7
- SHA512 64e23b2bcd2cc1e0093bce83bdf2c8f59eb7d3b25fe07627c31dd00743f2b27ea9bf49b43f979307f66462dc2b37f20e8630065a67a40656525b88351fd69d2e
- SSDEEP 98304:VITsqZGW3RUv3up3Ok72OZKCViXRdSoF954D:V7A9RGul2OIFjSUn4D
- TLSH
  T16E06339123880627D0B31339E4ABD336B7699F4195BFCA4B52D0BC937A0DF572B809C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  index.html
- Size 5KB
- SHA256 00aebf37f12a8f957569f72010120346371433efdcd0ed11d2533915bde4d3c7
- MD5 c210b3dd2f5102aaf52eeb2471372571
- SHA1 b3669ed4a63fc2747fd8ddafb02021e677446a31
- SHA512 cd33c6cfd3f25f7b7176bbd578f0a9b0e27f509ef7a05235005688bad1ed11d699597041b3b4b3c21d4ce0b974e11f1c49c8bce618fd04945a9235caa82f6c3f
- SSDEEP 96:xRepvFH0EUtGEPGEoGEIGEkgWGERGEknVYWiUYXYiwuBLIKc1eeOgPu:xRepvN0DszOKFAvLV1ihXYiwuBLIKcrc
- TLSH
  T193C17C70A4F06D7B82C342D9A9659B5B7A90D643C96EA51076FF0BE10FE3CD09C0789B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  js/main.js
- Size 25KB
- SHA256 0f47c333c6e05d13880d71ff49afaa4b755db42d197ebb58bbad12e32a655261
- MD5 329e1e8021289e826a508e85fa3781a5
- SHA1 4d1ba1664e1ec15a361bdb446a9a5821d9aa08e6
- SHA512 a4ee9c5fb29a4ec2ebbf08dda1e3d6484279ce6555705cf36d59959861d38442867d7a9c8bb4505ab08afe58c2a93c7c8b653432e880404d38c061d6c266d763
- SSDEEP 768:R2j/JRR8S+AGDwLMwBL5uHZcFrv7Db21IXep/gtBhaI/iS/Uc8xKA4D4ykMFY:RwlNvtayA
- TLSH
  T1D4C27384BAD0B08E23C31F7FE717A5E5F44A0A4E54944547E101BCD46BAA23AFFB1A74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  node/licensing.js
- Size 18KB
- SHA256 ae6e900aa073c3e2925ba0b365ab530fbaed42462333a5312aad866c4cab8fa4
- MD5 c78da1062923bac37fd4182648cf9ba6
- SHA1 c95759e4ad1f0547e541265f9ffe724bd6004960
- SHA512 9d5a369af68a7724ed7ab9664b676bf3d31019bd36043fe2a66ed8e2222a824f01bfdeb2c0287f18f3894d732d4de54e993ce6062f0512316b5cffca6510d953
- SSDEEP 384:vZHoAdKYq/QHMWkVhwnzf0Rtc2eOcDUMScE3M/eygv8f:BHoAdKYq/QHRYwnz0tc2wScE8/eygv8f
- TLSH
  T111821C269F812A845BF787923BEE6FCA9059039B30E20CCF96065BD4FC1943651D82F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  node/native/Mac/libTurboActivate.dylib
- Size 2.3MB
- SHA256 ec0a022b59839bd61109b663126bf7406abcc3dab75745f56d49b0c0b293228f
- MD5 623dd562b919289ec61fa1dada6fdf7f
- SHA1 39899d4fcfb36a05206fb93263f123a24a6a59d8
- SHA512 12e68016c47d469f8fd36b610cc4988f79c3d6fe80820969acd79bfd48774d7c35e7e7e15c2025c8a12004719696507f6b3ca58489f867a81e28d2343b5f937d
- SSDEEP 49152:dk/ZoGb8wS78fdw1Aq4vaKhZf0LMBwt/kQBuK4MWUgC1:QoGu4fdu4iJLMBaPX
- TLSH
  T1B3B5AF02715C9428D1C5E1BC4BDF4FA1A232FCA41620E7EA35A1F22C6E71ED5A62D737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  node/native/Mac/systa
- Size 157KB
- SHA256 6c023a7787f8e12f456905210c712c29c085b0715c2fae32054d58204798a293
- MD5 f7c8e340dc1aadf16359ea082e0aaa43
- SHA1 c70e124fe9867d95125f49152d7a28f68b6f9156
- SHA512 66a0bb3991f638fc80d65eef18ff0d793e9754417a3050dc788ca7c627f9b2d0aa6dc02e4e4921c79d46608f9b460a65ec59a66138585dee927f28310e799b7d
- SSDEEP 1536:pJeMxKOz5ruaEGkBR34H5KML2MBLqat4Um9KTkBLOIHK:avOz5ruaHkBdC5H2MFt/m9ukBCg
- TLSH
  T124F33B031B9C5813CD4941B446CAA3A35B33FED90A3153D7A599C4A81FD6BFA9F2821F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  node/native/Windows/arm64/TurboActivate.dll
- Size 1.2MB
- SHA256 31dc762ee2ed9d90ec18e54a5a799274c1908c6f1746f692797a697607bbe9a4
- MD5 6547dad355f5cec6f9dbacdf9cf1cbe5
- SHA1 2750a34bdac6f01014960aaf0d0278873b4465e9
- SHA512 15173924d73e10f735b150a06b89ddba5dfaab2a29688e302183397dff4dede2812d02c8bb14298e9213f20741df20a71e28dcdcf47c00751666b4eb1f11f1bc
- SSDEEP 12288:sJpwGffu4ykaPXKXk7XLazXR3Hs9JxgRHHPobExRjuq7IFG0qQDU+:sjtxKXyzVMkPobErqlFKQDU+
- TLSH
  T1FD456C80AE4CEC51D2C6E27CDDB38F943127B9688930C987B567570DECF6BD0C5A52A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  node/native/Windows/arm64/systa.exe
- Size 185KB
- SHA256 b5a032ca6e5cd044c52df058727487422ab25e0d6de0f964e0637945c8429802
- MD5 d22791d98c67fa8aad2158b5db09abf1
- SHA1 3470d0966832c5aa945393c1a9851a4243a5625d
- SHA512 f25df2314ff4237e2d881da29c023f76e4bc14da7c801c07d361ba16c5cb9c29f241213e8093b9ae36a466752a6e834ff6b2136dd6fae3aab6c2b2854d9d77cb
- SSDEEP 3072:s31BQaME7xxUwXLMgKJjAKGmIulinJ3Jwrer1ibV5/Ed:s3L93l8rW1ibDE
- TLSH
  T1FA044B8177CD68C2E2C3D73CCC558E40613BB9798A30C99B7153026ECE6E6D0DEB49A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  node/native/Windows/x64/TurboActivate.dll
- Size 1.2MB
- SHA256 8c54c16c22ecdf2f938e0d0c067a1adcea6112349f0aaa172cca479113b766fd
- MD5 639bacb1b7312bbe9189006f9f6a6ed5
- SHA1 57afa8b66e330ec77825f595532984ffc69c29c2
- SHA512 91f3bc936108684ce864402d5ac4126f555d3df96e16e4b8e8239987fc7ed7d8079c52eb6b9f7b86be218f501098b8845cc3ed02470e5d8d4bc546f3d2931116
- SSDEEP 24576:mm2nwToR/qcbZyddVPPL/yBLb6eqbR7Ey1W4rWdOd4:AvCj/gT0traOu
- TLSH
  T16D459E1AA77841F9D0ABD174CA538A0BE7F27C464670DB8F13E05B9E1F637618A2E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  node/native/Windows/x64/systa.exe
- Size 195KB
- SHA256 9e5e5ba4bde34b524b046d440f9b94bf9fee8c4abd1115884713c31dcb8004d8
- MD5 9bea1e8eec9b2fdb25b7d3b2430b5ffc
- SHA1 1cc7eb9b5aae8de492a686d5cbbcbab01596cfcc
- SHA512 5e96739890dd6793cc2c5e57350bcfba13ae538911e141779432f27f95a049f2d66f15ba90e0a93925d55685af39b8e37884f45fc9f876282e6a62d1c94d72ca
- SSDEEP 3072:7sGsI8XBzE2p1Cwv/LXSNm10aSYhn8uMSE1TPOYGmEbnc2c+PN6:7sGH8XBzhpb/N1iYhn8vEbc2cP
- TLSH
  T106148E5AB3E510F9E0779238C9614646F772786207609BDF03A447BA9F233D09E3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  node/native/Windows/x86/TurboActivate.dll
- Size 1000KB
- SHA256 2896451c3ec0e495671e0fa9f0fccf6c61fefc80b5e717ceb8f21405d716fa90
- MD5 cc446e7ce4d5cb683458056c8947a6ee
- SHA1 f9b29729bab1df3c7ba8d2effda9a262e7dcbcb2
- SHA512 5348217689b2dd12cae501fbc08668a3a5e293e93c5d40ecfd22dd1acf8da9e66493643133521f8ce8130ba956d176a7d7dd8090eb3f249f730fef15a46d29a2
- SSDEEP 24576:NACZrwIlQY4s/pGixI2D0zZ/4BUGjDoX+v:VllQYtpqTZ/4BUGjDouv
- TLSH
  T1B025CF51BA86D0B1D98F11F00D38D75E6A7EAC650A30CA97BBD87B9E4E305C0CF25786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  node/native/Windows/x86/systa.exe
- Size 155KB
- SHA256 99c095bd87aa92c539aceba5e9fcb55d7ab2231378bd6ad80c3f647c4a47a944
- MD5 98834b38c85b62d370fcd3b7c19ce7b8
- SHA1 c8a606cd5c8162c6ce75a6e66f023d3a13af6665
- SHA512 b5cbe3565b34ba9a630e7ce3198aedef7971d88e5a8bab7b7b551bd2c2dcc5febbea6a1f0792770959ab727c14559de02a4c343025c21db59635acbf4b0b9956
- SSDEEP 3072:c9XFn48dN1Vwua1CpAKu36qnUKC3H9TexCePcMSZwjb2jHxlR7ZK:oNLFacu36qnUnXNWSZwjb6RlR74
- TLSH
  T17BF38D4579C0C0B2D97719350960DBB69A3DFE711F609ADB73C812BA9E303C0AB35A67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  node/turboactivate.js
- Size 70KB
- SHA256 22f7130d406be71d2e01aaa2eafb65526ceba68a3ecc8ae670ba1f53d93ca638
- MD5 f7d1cc07a6ec02282bf87799fbcb4f00
- SHA1 00772b69a89822c7a12da77586d60adf045bb745
- SHA512 2b1c975c663f0a9c2477e78e9ce8d50b3f60d0066665f76d13135940ea6b72b8d2e9edb3c04c1bef269718c293005035dfe625eb0ef531094eab0d814dcb90af
- SSDEEP 1536:5cm+O/qAJ/mcdYqb1+Rsvyf6F7g7keUMW6M4031+mCtRqJi:5cm+O/JJDzbkRsvyfIM3UR/3MVRqk
- TLSH
  T18C63296ACF022DC1DFA59A768EDC6DD7960E778724B3089F4A07CF85901CA1624D93BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

© 2018-2026

Terms | Privacy