Overview
overview
4Static
static
1npcap-1.88.exe
windows10-2004-x64
4npcap-1.88.exe
windows11-ltsc_2024-x64
4$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.exe
windows10-2004-x64
4$PLUGINSDI...ll.exe
windows11-ltsc_2024-x64
4$PLUGINSDI...re.dll
windows10-2004-x64
3$PLUGINSDI...re.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3NPFInstall.exe
windows10-2004-x64
4NPFInstall.exe
windows11-ltsc_2024-x64
4General
- Target npcap-1.88.exe
- Size 1.3MB
- Sample260814-qyp9eaab39
- SHA256 a2f4ec1e5ea353ff67efd24b2ebf081ba44532410fae8d5e146af0310aa4f56b
- MD5 c78aaa2a95794030f71798c94f0da181
- SHA1 35f6c49deefffbe51f96985e87e813ad68c1f217
- SHA512 ce732beee69c3431268fe7ec51b99be338c8d5e963c009eda5a622d965fb91c3c3bc1ed071839f964c84a2cddf557d39272040036a6d51138ed8064aef282d08
- SSDEEP 24576:Y2S1Qavd8udnTYXUIavMq/Zcw31W8PGFmlc4BbRfEra3Az:aXu0mii81XPyAbBbRuaQ
- TLSH T1AC55238896E8E81EF0B34E3728F0835E52BAB10A06E1D60F7350F55EF935B55C61C7A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
npcap-1.88.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
npcap-1.88.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NPFInstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NPFInstall.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/SysRestore.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/SysRestore.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
NPFInstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
NPFInstall.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target npcap-1.88.exe
- Size 1.3MB
- SHA256 a2f4ec1e5ea353ff67efd24b2ebf081ba44532410fae8d5e146af0310aa4f56b
- MD5 c78aaa2a95794030f71798c94f0da181
- SHA1 35f6c49deefffbe51f96985e87e813ad68c1f217
- SHA512 ce732beee69c3431268fe7ec51b99be338c8d5e963c009eda5a622d965fb91c3c3bc1ed071839f964c84a2cddf557d39272040036a6d51138ed8064aef282d08
- SSDEEP 24576:Y2S1Qavd8udnTYXUIavMq/Zcw31W8PGFmlc4BbRfEra3Az:aXu0mii81XPyAbBbRuaQ
- TLSH T1AC55238896E8E81EF0B34E3728F0835E52BAB10A06E1D60F7350F55EF935B55C61C7A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target $PLUGINSDIR/InstallOptions.dll
- Size 25KB
- SHA256 04f9432186b2aaffe44cf9610ef3d148eff881880ceda6efa59b3cba1405b892
- MD5 5f840911e4fc9015ce7a2fcb54dcaf5e
- SHA1 589d1ad1c0e7c9a5454c2a5afab283e98b90f061
- SHA512 53b62c5545e4378110d45355d4bf493caa40dc63167f86955752e43d93b96e4b9465578797a4a9b6fe107f76ed1816cf076a0be3e97d9f943c1c63ddf8142a37
- SSDEEP 384:EKNt+4t7uJalUnGesY7Lt8nC3/YosaiIYi/kn/hy8RbmL4nNygB:EH4t7uJnGeXLtUJ+Yi/S5ALO
- TLSH T18CC27D527BD05C72E5A72E3479E0A227DFB1F6226881C987E2365E069B413813EBD361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/NPFInstall.exe
- Size 268KB
- SHA256 28833727d45f1761776097da4c562148bc04c984f5484fca1528eed2905b24b6
- MD5 8a070fbb55767d1cf823da2973ed59a5
- SHA1 38ed8223bccc34766391fd343b8be97d85fa469f
- SHA512 638807ebf6ead343305b4a9b055db5ec2cd21bf923e3217a59a2f2afb4742d2533e534fc53f4decfa04dfbcbacd0a78374d2ae1db578debd5ab6e4ab210c1c73
- SSDEEP 6144:ulZWSbmTCiWOLE2xsrYpT+giUlwz8E/vd:ulZWS6TCiWeElgdDE/vd
- TLSH T1EF445A11BEE1C432F2B21E715C7586A64E7EBC611F3099CF538049BA9A726D09B34B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target $PLUGINSDIR/SysRestore.dll
- Size 15KB
- SHA256 633ceb9c0a591e2165a9aa92e1c660816c56332fcc6cbe50b5f59c3304803912
- MD5 b9d3e9435246189b5c05d115ea0b7103
- SHA1 843d93256859d7e3d8ea4dd6efe31c06cb7150bc
- SHA512 ea719b3a7f841ed2f197f8c0ccfbd04f0682eb880df754c0e02d2688a58fdb0fe0990de3c3c99d32adabda1b8ca49ea07c041b4f233ba5e651d96ece8cf8b789
- SSDEEP 384:tpZGVdndRqSzwIYi/knv12y8RbmL4nNysY:tp+Yi/R5ALJ
- TLSH T1CE627D734D981C51DC1B5E30B8C4C936ABB676995FC0C1D3221AC1299B407C2BEFE36A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 22KB
- SHA256 3ceadba8f202e3f7f605dcad341255e596810fc94d623de2b2c9169ff7bc4592
- MD5 cd6a36dd894b5a4d5a09b14f8b4141c6
- SHA1 e65bad79ac9c676f65a988afd779f72cc699430f
- SHA512 ac1443f441e9e37604d7c13a4601debd06fc335aaa43a147d914c6940cffedd2d2075463f82b815861849c3f28c240d33b948442d981287958deb3174e212de0
- SSDEEP 384:b/Qlt7wiij/lMRv/9V4brrzIYi/knoQy8RbmL4nNyj1+M:baeiijipo8Yi/k5AL/R
- TLSH T18DA28E138BA04CF1F9165D3034D4BA36AFBB79991AD081D377E6C191AB503C329BD297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 17KB
- SHA256 6a7e0435c5094eb4ecb21164ea8c28329ca150e298db78b1954fb981c39d57bc
- MD5 44825db7369e6c6744a1651ffdbb100a
- SHA1 3f8df790fa16fad120f43cfc76e080bb2328bc11
- SHA512 e9658f1944ebeb48ac2485e89c5bdf7d76830e9a3bd49b56d16fdc6e18aff82ee84a4dc22c8f46efa9b3545eeac7fcd937afd2eca57def16de1dbeb2749367cd
- SSDEEP 384:3H/cXtqfUNQZGdHyIYi/knkEcGy8RbmL4nNyvH0x:3Hw8fUAGRfYi/BG5ALxQ
- TLSH T124825D7349C02C52DC1B8D7078C4A93BABB5A5A51BD0C1D2322BC5959B80793FF9D3D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target NPFInstall.exe
- Size 268KB
- SHA256 28833727d45f1761776097da4c562148bc04c984f5484fca1528eed2905b24b6
- MD5 8a070fbb55767d1cf823da2973ed59a5
- SHA1 38ed8223bccc34766391fd343b8be97d85fa469f
- SHA512 638807ebf6ead343305b4a9b055db5ec2cd21bf923e3217a59a2f2afb4742d2533e534fc53f4decfa04dfbcbacd0a78374d2ae1db578debd5ab6e4ab210c1c73
- SSDEEP 6144:ulZWSbmTCiWOLE2xsrYpT+giUlwz8E/vd:ulZWS6TCiWeElgdDE/vd
- TLSH T1EF445A11BEE1C432F2B21E715C7586A64E7EBC611F3099CF538049BA9A726D09B34B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10