Overview
overview
7Static
static
3DataBankInstaller.exe
windows10-2004-x64
7DataBankInstaller.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$TEMP/7z.dll
windows10-2004-x64
3$TEMP/7z.dll
windows11-ltsc_2024-x64
3$TEMP/7z.exe
windows10-2004-x64
3$TEMP/7z.exe
windows11-ltsc_2024-x64
General
- Target DataBankInstaller.exe
- Size 949KB
- Sample260812-ppqcdacf36
- SHA256 a604bd3916f80589f40e87fd5d801babbedf14c272e506a3f5e243f5c508addb
- MD5 fd183c1a57f24e9650cf415999d4abd4
- SHA1 fcc149ac6d9be0fbdee567e786589128ffe42ae7
- SHA512 600b1390196275386f773129254c8b629b0079b2857d8aeec3d7e4d5f90505c49c9ea63d22b5220ef3fcf949d5ddcf8fd1a02e49df159f1110fd931eac47c198
- SSDEEP 24576:pyWZ2I/PqPkkQtpT3TfxikKeRX/pNr6b/0XXlZc3r:ojkf+eRX/pN6T0lC3r
- TLSH T130252330B340D1A5F6523772AD72D1B36AF16B1EAD04EAE203605D0EBE51143E72F675
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
DataBankInstaller.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
DataBankInstaller.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$TEMP/7z.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$TEMP/7z.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$TEMP/7z.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$TEMP/7z.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target DataBankInstaller.exe
- Size 949KB
- SHA256 a604bd3916f80589f40e87fd5d801babbedf14c272e506a3f5e243f5c508addb
- MD5 fd183c1a57f24e9650cf415999d4abd4
- SHA1 fcc149ac6d9be0fbdee567e786589128ffe42ae7
- SHA512 600b1390196275386f773129254c8b629b0079b2857d8aeec3d7e4d5f90505c49c9ea63d22b5220ef3fcf949d5ddcf8fd1a02e49df159f1110fd931eac47c198
- SSDEEP 24576:pyWZ2I/PqPkkQtpT3TfxikKeRX/pNr6b/0XXlZc3r:ojkf+eRX/pN6T0lC3r
- TLSH T130252330B340D1A5F6523772AD72D1B36AF16B1EAD04EAE203605D0EBE51143E72F675
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 32e35e4b97f8df08f07d8879ba2ec963c75707440cfc0275e944a31c946f633f
- MD5 58696f9e1a48139fb1b0ed289a88f386
- SHA1 71ed08169cf00dd00d41d41395fd982ff8e8c5fd
- SHA512 3feac3983c39194d9101c803d69c395c33d8757e6ab746447f0f22ee9d0d8f790bb4f0c6c9f4fe7fae66cd6119c2b456c02ab051ffb62af4d010387998760d33
- SSDEEP 384:3rSQMCOUILnCaSPy/yhJzmGSMRWyOUKiR:3rSQMCOp0yamMRWysiR
- TLSH T15C623C16B62084F5CBB2167034D73B3E6BB28F6A1A2848C24BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
- MD5 c953dd0aab774f1446fcd63fa7c5f613
- SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
- SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
- SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
- TLSH T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $TEMP/7z.dll
- Size 1.3MB
- SHA256 c6989259a78960805b8b646843d2ef3a8a19e5533359e8a252aad2f3cc78c844
- MD5 30af07caeecb916f92f5817a04af61e0
- SHA1 2e07d972247685804705c5146eac124818bf1896
- SHA512 095b15e2ee689fe6509a6ef58ff1993d030c0aaf592a0d4c9a7cae68d5acb33714f928249d67e0f178f81703b8d68e938e34a2ca657e99975e0a6295be5ae9b9
- SSDEEP 24576:E0p4+kpYxuzmZlGU4j4j/M5TfhfYBSGZm9AE/0vA9g5eYoWbDuzY295M:E06+kpYtGU48/MlfR648A9Em029W
- TLSH T193559E11F7B1C0B4D58D5630862DBBBA50F8E729CA2068D777C0BE6E6F319D2C235A19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $TEMP/7z.exe
- Size 349KB
- SHA256 285e5220d6d4240b6a4bdb6357d427e457313376e3464d3cb973637a384ed02a
- MD5 e678c71771cf5c21f3e1f0c2ebf677bf
- SHA1 2b923e35b944a44a85e15da942999d24f3550163
- SHA512 38e2b486a32a244a57d8b07296f09c42ac003a05285f70fa9269fbe3533f82eeabbbcf20048f0772e02cf16f82b6496a46117b9c71ba8df1493fc1a0f0146e1e
- SSDEEP 6144:Ohisb84NXdM/vJh118TO4V1K2s8ipfQdvyHdh+XZbYHBC:O/hi/vH118Kg1KrqdReB
- TLSH T142747B127AE8E43AD2420131DB1AABA5E4F9D7684D71188337C81D6C2B75CD6D33AF1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10