58002db8244894a2324b99c710e292de7a90ce0db78fdce43b0ee6b263bb350d | Triage™

Login
Reports

Overview

overview

7

Static

static

3

58002db824...0d.exe

windows10-2004-x64

7

58002db824...0d.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

HuYanBao.exe

windows10-2004-x64

3

HuYanBao.exe

windows11-ltsc_2024-x64

3

uninst.exe

windows10-2004-x64

7

uninst.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
58002db8244894a2324b99c710e292de7a90ce0db78fdce43b0ee6b263bb350d
Size 6.9MB
Sample260814-dfct5ss1hs
SHA256 58002db8244894a2324b99c710e292de7a90ce0db78fdce43b0ee6b263bb350d
MD5 d6bccf7d7a6a4f8744e2aeef501f2528
SHA1 670ee627c9a8acce3b5cdc90ddfa7fa614f07f38
SHA512 8d74afbecb138a09b65ca3b9c516a6b075af30fc0b967e9bf3f67e1a02f39d87e6b631caeaebc678a69b68e0f11e45d63e4944040af864b164ed4175c93a717e
SSDEEP 196608:SU2i1m+wYI70f9s9IyjHYSMluM6QpguSKpd2:SU0+C8KIyjHYhluMbWRKpd2
TLSH
T11A7623511212A38BD5AD7233D7230C9EB6562E7AD070891E9520F9DA20FF2478EF75B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

58002db8244894a2324b99c710e292de7a90ce0db78fdce43b0ee6b263bb350d.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

58002db8244894a2324b99c710e292de7a90ce0db78fdce43b0ee6b263bb350d.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

13 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

HuYanBao.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

HuYanBao.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

uninst.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral8

Sample

uninst.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/FindProcDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/FindProcDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/KillProcDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/KillProcDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/nsProcess.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/nsis7z.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/nsis7z.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  58002db8244894a2324b99c710e292de7a90ce0db78fdce43b0ee6b263bb350d
- Size 6.9MB
- SHA256 58002db8244894a2324b99c710e292de7a90ce0db78fdce43b0ee6b263bb350d
- MD5 d6bccf7d7a6a4f8744e2aeef501f2528
- SHA1 670ee627c9a8acce3b5cdc90ddfa7fa614f07f38
- SHA512 8d74afbecb138a09b65ca3b9c516a6b075af30fc0b967e9bf3f67e1a02f39d87e6b631caeaebc678a69b68e0f11e45d63e4944040af864b164ed4175c93a717e
- SSDEEP 196608:SU2i1m+wYI70f9s9IyjHYSMluM6QpguSKpd2:SU0+C8KIyjHYhluMbWRKpd2
- TLSH
  T11A7623511212A38BD5AD7233D7230C9EB6562E7AD070891E9520F9DA20FF2478EF75B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  HuYanBao.exe
- Size 4.9MB
- SHA256 e6ff1a6d784500d4a10ebc65da089417116de6332175a44a64593bdd23e024ec
- MD5 c5475cb4d350a8c8ade70fd32187325a
- SHA1 b611a53316d24acea072bf371c9c46963c1b8391
- SHA512 cc566e0c10111dbf72f4b0286ef4edcec90047e79ff5213c2a2e75eeab605d671a9de9a0e989e99d4814b3728888700a34d8940a08ebb77fd57d382bcee26632
- SSDEEP 98304:YSXX8f/47cvoRasMDHqKwRsfnxlek12jajAxWuN8C+8i1qD1A/LdQZklBIpH40SQ:Y4JKBze2cKAxWuN8C+8i1qa/kSIpHfP
- TLSH
  T12036D02136608176C13E2132955BB36FA979AD601B3141C77598FDFE2BB12C35A3B23B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  uninst.exe
- Size 223KB
- SHA256 db8386c08d52daef58593beb22fa2de248c7e092f92e8ac4dfb5ef34fc199bcc
- MD5 baf32e36bd8529e5863cafb2f16fcc99
- SHA1 80a37e8debc816b32a79df61a7f0299869ca8263
- SHA512 58df391f37cd718a0d1052eb53ee52b5a8c512cd4046568a3ef7ca3d85ed484898a21f5c32e8fd97677b4a6bf133662aff6a6ba432667ee1ff5b2e621cdb54ce
- SSDEEP 3072:H5BuYAVrgUCPnSqMSD+t+MHuR58lOCkqbjO:H50gUCVv+AVWlOCkqO
- TLSH
  T1632427C166B78F67E5BC16731462467E0E65AC331931862B6240FACFA8736138C3B776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral7 behavioral8
- Target
  $PLUGINSDIR/FindProcDLL.dll
- Size 27KB
- SHA256 6eb09ce25c7fc62e44dc2f71761c6d60dd4b2d0c7d15e9651980525103aac0a9
- MD5 6f73b00aef6c49eac62128ef3eca677e
- SHA1 1b6aff67d570e5ee61af2376247590eb49b728a1
- SHA512 678fc4bf7d345eeb99a3420ec7d0071eaba302845e93b48527d9a2a9c406709cc44ec74d6a889e25a8351a463803f8713a833df3a1707a5ad50db05240a32938
- SSDEEP 384:DZoRF0XXUuJReQg0Tw67ADWBTgmldIogUD3GLgFmyaX/fVYcWJQCDmrinogRdBl:DZaF0HtTwuz9yu3KgwRX1nWJ1q+noI
- TLSH
  T12DC26C107C9042B7D28E5671A1E50F075B3F6E512AE65883CF256ADA2D612F0FA3F31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/KillProcDLL.dll
- Size 36KB
- SHA256 de1177a4bd1c56c3555f366d40b37d7dd9cb25e16c4973d0a4d22bf9a8af7aed
- MD5 1cc87d2b5a79b18f133b4f944e2f2f74
- SHA1 98e0ddb727c76e06be1668434d754e5b80a0c154
- SHA512 d8fee1c09fef9af4e1f38baaffa3a6d059713b14ecad900815c086cc22855644fcdeacd6bba31ea6e6925831e650f7b0d34e6dea4c57a978fb4f5bf0cd6d72a9
- SSDEEP 384:JLmJwO50x66T9JOpOUT38YZvml7xoKdyuwlx8xSiorppugBwUdJopS:JW50hJwwUTsXdPwxvtpDtdJo
- TLSH
  T1DFF26C507C8144F7C28E4235A5A9AB179FBF692036E55983CF269EDA1C311F0E93B307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 47b9e251c9c90f43e3524965aecc07bd53c8e09c5b9f9862b44c306667e2b0b6
- MD5 a1cd3f159ef78d9ace162f067b544fd9
- SHA1 72671fdf4bfeeb99b392685bf01081b4a0b3ae66
- SHA512 ccc70166c7d7746cd42cd0cec322b2adf4a478ff67c35d465f0f0f5b2b369c996a95557b678c09cb21b8311d8a91eed4196ddc218ea7d510f81464669b911362
- SSDEEP 48:apTVWFeApYx2lxaKe3yfeEIWCGWNpBWLGGrx3pMt4z8mtJ7HofYZVSLa:RFG0xaKkyfjIWTW7BYrhSbmtJ7/V
- TLSH
  T1D8B18331F3C08CF5C692453A28D337D6AA56BA141748445FCBA726AB2910DEBEF3D781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH
  T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 1.3MB
- SHA256 338fe675307f40fd0d717d5957953e22db145a10903dc465071d7e602d7e298f
- MD5 5832c2246c601cffc1b3d173af07ab2f
- SHA1 a2c75b7eeb276cdc948c560418c1d7acbb1d6d93
- SHA512 c62c8a622c76ef6e6995869ddd56b39cf24a37fcaafc2f017112ae1cf6bdba5f5cdb3f775fb473691e56291fd4d6e69b50f3fe0e6a076492016399e50d54f3d1
- SSDEEP 24576:97mgt08WdvNfx8oh5N5/y4eYxV/yqiF4INklNtCwFQRqYQiklN/GS:76LfnhM4BIklN0wuqYQiklJ
- TLSH
  T1BF558E60ADB2C0FAD10F9B70E53D673F6A3243278E0C896FDA589DB85931561F10B61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

© 2018-2026

Terms | Privacy