4af4e3c11e900350a7a3abdefb53a9d565deacd43f67cd7038cfdf725e666b83 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

4af4e3c11e...83.exe

windows10-2004-x64

7

4af4e3c11e...83.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

Ownd.dll

windows10-2004-x64

3

Ownd.dll

windows11-ltsc_2024-x64

3

Uninstall.exe

windows10-2004-x64

7

Uninstall.exe

windows11-ltsc_2024-x64

7

plugins/avi.dll

windows10-2004-x64

3

plugins/avi.dll

windows11-ltsc_2024-x64

3

plugins/debug.dll

windows10-2004-x64

3

plugins/debug.dll

windows11-ltsc_2024-x64

3

plugins/lyapunov.dll

windows10-2004-x64

3

plugins/lyapunov.dll

windows11-ltsc_2024-x64

3

plugins/newton.dll

windows10-2004-x64

3

plugins/newton.dll

windows11-ltsc_2024-x64

3

plugins/qoi.dll

windows10-2004-x64

3

plugins/qoi.dll

windows11-ltsc_2024-x64

3

plugins/vliv.dll

windows10-2004-x64

3

plugins/vliv.dll

windows11-ltsc_2024-x64

3

vliv.exe

windows10-2004-x64

3

vliv.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
4af4e3c11e900350a7a3abdefb53a9d565deacd43f67cd7038cfdf725e666b83
Size 732KB
Sample260813-py7m1szenb
SHA256 4af4e3c11e900350a7a3abdefb53a9d565deacd43f67cd7038cfdf725e666b83
MD5 3ad96a39d0e73386d7962fdd639d0259
SHA1 47a1f94d53f90dbc7199521ea93fc5574707494d
SHA512 c34b770c22152280a7dab30cb9d7f8eac186da065a8f02c3c47562e7d335e0cf98d535c0dcf794b023a5b113ef7f75150893a656ef5dc46c75cf76b3e236b611
SSDEEP 12288:yNy8EDe9vzsxWGU3GDjpCyfDCJsnI9CK8nctL7icgWjhWLmsXC4sTV+VNiFVavW:yNy8AqzfdKIy2unI9CKO2pgWkLxvsB3H
TLSH
T1DDF42300BBECC445E5B016B0693E867AE6A89D4558959BAF0F60DFFEBD90641CF063C3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4af4e3c11e900350a7a3abdefb53a9d565deacd43f67cd7038cfdf725e666b83.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

4af4e3c11e900350a7a3abdefb53a9d565deacd43f67cd7038cfdf725e666b83.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Ownd.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

Ownd.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Uninstall.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

Uninstall.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

plugins/avi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

plugins/avi.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

plugins/debug.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

plugins/debug.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

plugins/lyapunov.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

plugins/lyapunov.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

plugins/newton.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

plugins/newton.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

plugins/qoi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

plugins/qoi.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

plugins/vliv.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

plugins/vliv.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

vliv.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

vliv.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  4af4e3c11e900350a7a3abdefb53a9d565deacd43f67cd7038cfdf725e666b83
- Size 732KB
- SHA256 4af4e3c11e900350a7a3abdefb53a9d565deacd43f67cd7038cfdf725e666b83
- MD5 3ad96a39d0e73386d7962fdd639d0259
- SHA1 47a1f94d53f90dbc7199521ea93fc5574707494d
- SHA512 c34b770c22152280a7dab30cb9d7f8eac186da065a8f02c3c47562e7d335e0cf98d535c0dcf794b023a5b113ef7f75150893a656ef5dc46c75cf76b3e236b611
- SSDEEP 12288:yNy8EDe9vzsxWGU3GDjpCyfDCJsnI9CK8nctL7icgWjhWLmsXC4sTV+VNiFVavW:yNy8AqzfdKIy2unI9CKO2pgWkLxvsB3H
- TLSH
  T1DDF42300BBECC445E5B016B0693E867AE6A89D4558959BAF0F60DFFEBD90641CF063C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH
  T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH
  T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Ownd.dll
- Size 48KB
- SHA256 cb4dc992d10493e8076d83536fbeb3e6111a4b397dc66314fd01a4e0edd22314
- MD5 9d471e237dcad8045b618bd9d1102e55
- SHA1 7aa95ea831f2bfb543d26025f1eebcdd4f379f5d
- SHA512 5c7218c8e7a001f71710373175cdc54de147a5545ed6fc50d1a583090e84ac02b87237f6c2af83cd76ab5a105a0340118403f69eba8efaf73e11421406078f58
- SSDEEP 768:cjsq7/zOpMMWyd8CGvc98ntddKFKC/ETcLK:etCa9vttKUC/ETcLK
- TLSH
  T10A23397276884967E4D6033D40F35B32677FBD315922AA07AB40BA4BFD31BE0B416782
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Uninstall.exe
- Size 61KB
- SHA256 6ee83804743f1b6abfb6c71cf151824183aaac72613307555247c5cc12feaed0
- MD5 589e52e91ce4e2f010e99533b2dc6417
- SHA1 899f456918e1f9e8ac22bbf71bbad87ae8b9e790
- SHA512 3cf12c60f52886bd120d719660ff7a57af1807bd6b32ceb0c22fb31d86c6469ec4a8806796641c10991c0145bef68b3401337b1935291744ca76bb0831a76f26
- SSDEEP 1536:72suNLvSFVVeozLpPuUgdLeAyNsdySgDgxN:721NjcVVnLpPuUceA9ylDgP
- TLSH
  T1A353BE057794C0B7C9B206311D7E9BB62FFABA7610248B1B1710AB1EBDB1681DE0E357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
behavioral10 behavioral9
- Target
  plugins/avi.dll
- Size 71KB
- SHA256 6c3a769cf7eb9e45e9416d762d77ae88edad851d08e437eb9501cdf4ed8ec032
- MD5 88335952b0e7089e6433e75a28a15386
- SHA1 8d325f98d7d232f94d156435daae96a24c88e034
- SHA512 4b8a4c5390fc9bd901a5d5e8ea2596af019ce6b607e95867d84df960879a94150eb468c660e5a365631a1cf7a734c4f49bf47e2a2d9da50748312782cc3e499b
- SSDEEP 1536:VkxMtlfglgEwTdsi0lPdOdZW/QsWnCcdmKbAY7Y:Vo6Agtdsi0adEumKbAY7Y
- TLSH
  T167635B01BAD1D871E97E1D355464E5716B3E79224EE09DA73B8A027E0F312C0EA35E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  plugins/debug.dll
- Size 95KB
- SHA256 196a4972640314511df6cf135c61f3f0f7de31a32e0024ce99f1bd3a269a0256
- MD5 3c59c2222abb1b55c4fd64061908996d
- SHA1 11690a790ee3d51c9d994e83775a282bc802d07c
- SHA512 ed5a3728a9c04817581c64ec340b5243287d74b9a216811cf0a7ed09db259546594e9197ea7c5a80b2bee769e5dfefad7de047a505b7865e154d3fe68a3190ac
- SSDEEP 1536:MvxNHwon0Qg/MG6aZyGwiAvGxH+rmkpmarVGpZ8lXv8hZFfsgYsWhcd1cKye2VL7:MZNHwGeMG6XViAexAmkpmarft8hHsg1G
- TLSH
  T1CE938C44B0C0D672E9BE2D3D0060DA719B3E7970EEA05EAB67581A795E302C1CE35D6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  plugins/lyapunov.dll
- Size 97KB
- SHA256 6e7ccae555d5ba2aeebbd8a40bc6ea625fe33a324508ed35f8bd6a7bdd7b61ce
- MD5 2ee19737661bb927c75fb6c1a1534a1b
- SHA1 aeb15f5f9ad32b6261ceb0a446dbf92f235eb82a
- SHA512 cdd7b77b46d5ae5b01f79ccaf0624e2c1dff21d2c148bfb883edd19c95bd35f733f8a5e6fc5c65ada05eacd5b6fa73437453d5f861483ec63620fb78d015d21c
- SSDEEP 1536:tb1lj8WJsg4uIPPS5CNv/Wk6OGRvtmgMbFuvZWSsW2D7cdRCqy1ton+:9v/Og4YCNv/dGhAg0FuvIfqRCqy1g+
- TLSH
  T14AA36C00B5E3C572D8BE19381424EAA55B2D7911CEA0DD7B2BE51A6E0E703C1DF32DB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  plugins/newton.dll
- Size 76KB
- SHA256 0ef0c173cc1dfdd63be216b85f645f1a50b1e4a5fa7ac70624af836672c55b6e
- MD5 6b13881cde4a9d42413108786dac1312
- SHA1 d45fdfa085e2a85ed65231d50cfddee965039919
- SHA512 615000948c2c43ce8f97fd017c38cecf7fba4247158ce3e193830094ca09c4fb59c04793500f68358772489c25d2822b6b3a79dd53bcac2982ab2b939852710c
- SSDEEP 1536:Ox1jFXydHIdHsj3It/NKS7HBwxfw5zVOeKZStsWJYwncdSR195tJoaa:g1jFXydHItRNKEBwxfiOeKQJQSR1Jma
- TLSH
  T1D0735B4176D1C4B1D97E19352460DA766B3EB8218FF09DBB2B49223E0F306D0EE35E66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  plugins/qoi.dll
- Size 10KB
- SHA256 42ec0ade33bd7eecdc190ebef20e370fc1a58a12ad01c3f1d3fd88e95c803dbb
- MD5 1e50c2973c7abc960eebfeb42e8cf8e7
- SHA1 cd3f49feaf2c6d6f6dcffb16e1ce96a704125b11
- SHA512 6151b111aa469774fd16c00ce321af3d824ace03402c588fd6797523872629d3183b752ba3016f9ba35d2e2026c47ed225934fe6800b206cd814410a3f62a9c2
- SSDEEP 192:Qe/H8SDtB/JP6cCXCPLWGLpkzZQQ5WJG4jOI+lvtJoAM:QelDtX6HCrLpOx8JG4jMlMAM
- TLSH
  T1D4221942FE5419F2D66A027820F69233C76CBA245F511EC3BF976E090C6A5D2FC3A51E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  plugins/vliv.dll
- Size 1.3MB
- SHA256 63e3613d397af2e8bb2bb5865825a4683c225d72fd0d3ff451131a15ed9c4c60
- MD5 cafb6f80f3c08c03a53e060660d97a44
- SHA1 c74bf5551e244f79dfcf2d0c70f9f942d360e082
- SHA512 e75272c74353d77449731f0e4f89ecb3811d189a6d3024522d2d1978bfd21abdb293457a7ae05f5c46d73f0941301167f09ac87d2059ef52cc309ee2637fd707
- SSDEEP 24576:Im2jCjb/eu1RlQOl4d+ZtV/W8QYNzGPsgvdNTt:IpjIbNloOIT
- TLSH
  T135550442EAD15CA2DBF40071CDAAD6766732796D67F382F3B18079E0B8217D134722DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  vliv.exe
- Size 186KB
- SHA256 b2b9ca5c86a9611ed4862d0208b79f6d3ea222a7ea343acbccfed5bc181d5350
- MD5 6f25fad0e77e1dc787f073eb063c91d8
- SHA1 5fe442d714fd03ca431938f891dd135d86a21a15
- SHA512 5f7a736f2ce2e044f5431aff1d8a39963ca2c1c6a3a318060d409c6489b08c3068f95e6ae6bc8aac8f197eebe10743ec07e22789496c8ad41ffb5091e5277d14
- SSDEEP 3072:JZ9KbL+bPNPzNEejglqWAm51YpnVPOdFh6qeytwDG2mXRBKCiK34Ku:JPGL+jpjg6s1cnVPO73TEyXRBZLIKu
- TLSH
  T1C714293C72F0D461FBA91535CC6096FD4728FC344F305AA7FF863A6A69302D18529A7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy