Overview
overview
3Static
static
3EncDecryption.dll
windows10-2004-x64
3EncDecryption.dll
windows11-ltsc_2024-x64
3Qt5Core.dll
windows10-2004-x64
3Qt5Core.dll
windows11-ltsc_2024-x64
3Qt5Gui.dll
windows10-2004-x64
3Qt5Gui.dll
windows11-ltsc_2024-x64
3Qt5Network.dll
windows10-2004-x64
3Qt5Network.dll
windows11-ltsc_2024-x64
3Qt5Widgets.dll
windows10-2004-x64
3Qt5Widgets.dll
windows11-ltsc_2024-x64
3Qt5Xml.dll
windows10-2004-x64
3Qt5Xml.dll
windows11-ltsc_2024-x64
3XiaomiFRP_...ls.exe
windows10-2004-x64
3XiaomiFRP_...ls.exe
windows11-ltsc_2024-x64
3adb/AdbWinApi.dll
windows10-2004-x64
3adb/AdbWinApi.dll
windows11-ltsc_2024-x64
3adb/AdbWinUsbApi.dll
windows10-2004-x64
3adb/AdbWinUsbApi.dll
windows11-ltsc_2024-x64
3adb/adb.exe
windows10-2004-x64
3adb/adb.exe
windows11-ltsc_2024-x64
3adb/fastboot.exe
windows10-2004-x64
3adb/fastboot.exe
windows11-ltsc_2024-x64
3imageformats/qgif.dll
windows10-2004-x64
3imageformats/qgif.dll
windows11-ltsc_2024-x64
3imageforma...ns.dll
windows10-2004-x64
3imageforma...ns.dll
windows11-ltsc_2024-x64
3imageformats/qico.dll
windows10-2004-x64
3imageformats/qico.dll
windows11-ltsc_2024-x64
3imageforma...eg.dll
windows10-2004-x64
3imageforma...eg.dll
windows11-ltsc_2024-x64
3imageformats/qsvg.dll
windows10-2004-x64
3imageformats/qsvg.dll
windows11-ltsc_2024-x64
3General
- Target XiaomiFRP.NET_Multi_Tools.zip
- Size 26.5MB
- Sample260815-bm9rcadb44
- SHA256 a800eb836618b84807690ec4699ff358f7e774c423a4985bbfe14c2a76717aa8
- MD5 2b7db3fa20459211a1c71c577232ac17
- SHA1 79b3f45039fa6dc0337fe77f76e345fc95f2f54e
- SHA512 90a2979ab6b988037869e4b6082fbde4b02078042696ce9f5f3440059f3ba356b95afd34426432f85495dfdffe92fbfc244777d3d24d8fcf003c54335343c6d5
- SSDEEP 393216:3HM7jGqT7hEbAXRrL41USgdO0KpygGDW881PYt0KF6hnPDBoV7S4S+Rn5QJx/BWO:3+LKMRXaUrIpygGpX6ZWSg5CI32
- TLSH T1D95733498497E05C9FB9D7A73F874DD5090EE01EAD2EA9413AB019C06387F647236CAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
EncDecryption.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
EncDecryption.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Qt5Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Qt5Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Qt5Gui.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Qt5Gui.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Qt5Network.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Qt5Network.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Qt5Widgets.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Qt5Widgets.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Qt5Xml.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Qt5Xml.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
XiaomiFRP_Multitools.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
XiaomiFRP_Multitools.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
adb/AdbWinApi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
adb/AdbWinApi.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
adb/AdbWinUsbApi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
adb/AdbWinUsbApi.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral19
Sample
adb/adb.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
adb/adb.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral21
Sample
adb/fastboot.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
adb/fastboot.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
imageformats/qgif.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
imageformats/qgif.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
imageformats/qicns.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
imageformats/qicns.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
imageformats/qico.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
imageformats/qico.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
imageformats/qjpeg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
imageformats/qjpeg.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
imageformats/qsvg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
imageformats/qsvg.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target EncDecryption.dll
- Size 1.6MB
- SHA256 ae07ac7202b0f317cafcf68e5857b18d3a7f43b4aa543abb222240100e6da5f0
- MD5 715eb677cd82d1d8dd4fc245141d2e53
- SHA1 537d2a570b3b8e5aaf4d68c93e5ffa02bdb9c9d6
- SHA512 3793f94e84ad9ad343923e6a05678a4c64be9931cf2fb97dbe10cf7a8ccf1e62a9430ecb3256add755192c340c831c7c56673420f5f28f0a9c13eb17b6144713
- SSDEEP 49152:u1XYc3hCa3dT7bN5ZlpKzZ+Py7hBf3qxepUt3puuCNPwMwaWl:KYcQaNT7bN5ZlpKzEq7hBf3bUt3MuCNv
- TLSH T18D75AE323690D076C26B3330871AB3BCB6FE99704D75828725A29E397E7449395187EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Core.dll
- Size 8.1MB
- SHA256 2af418a34f2076b05ee08dc4bedbe6eb7050bcb6b0658a3db2d5d4302af2db45
- MD5 648c3e60137aad616c90a668511b8da3
- SHA1 404391ed3adbc7f1a644a93747101c3dc2af07f7
- SHA512 b7cb44f7ba6001d41ba37526220f983cbc43e938a41eb947c8627023d0a4761827e1ff47f995088a6c5c21c452921f116ad4e0a20f6f82888ea22b25dddc2f7d
- SSDEEP 98304:Gt/Ea62YmLwCJvVfx2ikSVybkmSCYi8BTWF9jwtJ6PmJsv6tWKFdu9CYpElRnZyy:2YOkuyS5go6OJsv6tWKFdu9CYpu1
- TLSH T1A9868C41FA8684F5EE635674C1CBF77B42342E128632CDEBD7887E1DAA332912907716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Gui.dll
- Size 9.4MB
- SHA256 6431689ae70b04224017f0ca8d1ace0102ac03ca5d11aa7cdb1108c6d5ab95a8
- MD5 0a4c4dd8d1249cb18589281f7db4c1ab
- SHA1 e256d3e8fe953df6da636c3ed2d72a06ff9aa986
- SHA512 9d115224664c61110bbf33ee1571aa5534a940fc02c5f024d296a434112abd89a3e5b9726fea8aef6a6580d037f1d5bccb1b62170cf4d7eb43b502c4367f3b7c
- SSDEEP 98304:e8KLCliI9doIASqKyQQJ601F8LrQCEtHYIadV5ocZTiclj6ucjS9Vd7DPE/W4JX9:gmli6kKEIiMSS977nXYFNzKlcU8
- TLSH T1BDA66BC1F88754E5DE2356B4818BF77B62342A51C223DEF3EB885E2AE9737921503316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Network.dll
- Size 2.6MB
- SHA256 4159d89d0b5dcf4804dc9512e5252377bd8be8be939d505db1227e8c245ec84c
- MD5 70056a6dcb8cf89908bda1e32dd1bdee
- SHA1 dba4e6bc916ad5d9cd03492be29320cf418501ab
- SHA512 120f4bda7472286ac17cf087e80a8cc2ddcf0380f7e4b55b4f7c1ea1604d3d8c98c869ca23fc2a7591468b0b2fc93c6cf6614b1f4201a9c8acc04824fadaaf21
- SSDEEP 49152:bhWdmPr4nJEO5X2dD2J3OnpCenabeDQKnpLDdDM2yxW/xRrjl/o:bhWdvz+senabavpdVRu
- TLSH T13FC52B91F98268F5EF120574C14BF36B23383602C623DFF7D7586F3A5A62663250A729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Widgets.dll
- Size 8.7MB
- SHA256 fa3d2383ebe612f83da59207119ea7aac8306a9fedb165457f7b9d97b875c584
- MD5 b68920116c91c218b73eaa9d2b0f58af
- SHA1 74e1c8295c94ae4ddc9e8f1d08da748c04dca009
- SHA512 434e1f7debbf2d7765c0ab9f38cea3629fa2949197e85444c2477cb6b017545e2edc86d5e9a2b81db3f584a2edf6ad8a4ae85e70c6fbf5443b06d879409bc828
- SSDEEP 98304:n8oFmxzWlImKD/cezKwedFJ1V0/H9d7+Xp4ZqsqzZz4s4POsna3iEdygSEkx+bkO:yaKD/cRwefwobv0uMSOdlNxzjm9
- TLSH T1C6965A80F9C658F5DE531639958AE36363343A41C223DFB7E7486B2E5D33AE22907316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Xml.dll
- Size 353KB
- SHA256 44bb45f9976f28c4ccb653b4b3df2abadf79d9373f74a95dd0a1255488b91b9e
- MD5 ff29ef2cb7d2e8f1905aa4bcb330a347
- SHA1 02c9982456e9069e68dbf7837a8bcd12cb3c924f
- SHA512 751063512d1c6886c625f3cdb4f43541d6e8f89638605b4ba6f49d357ecfd95588f5a47cf8bd55d50d57d8ff801648a241c10b3d80b1e87bd24ddf59751aefc4
- SSDEEP 6144:+EZ6I7SKhFAbBJTu1JczYIeWUGCWHvSMhBysgcTLzrfvZCPUUNrxcQKb8gkIrM+k:dZzSKhObBJTu1JczYuHLK
- TLSH T14374E7E1B7C58CA6EE515378CC9BD77B233869814633DFF3E7A427361E22681241631A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target XiaomiFRP_Multitools.exe
- Size 16.1MB
- SHA256 b862d5de9a73cb7a364358d92df42794c55a2b551640a530b89ce91442c8f1e1
- MD5 4aa56f444320417c3c269c934edee10d
- SHA1 390d62b69b3b9a9e6591570a4818578ed3fbe962
- SHA512 6093179c38d5399958b2c33ad9c54daab648dcf6b00ff949ef75263b385199684c4374e6a4d676647d2f4ec1ca827452e3e31e39f979904a6943a66a9872831c
- SSDEEP 196608:QQQyMIHSxrIr6TS2e5Zu+xp8kxp8U12Da64XkobNLrz3qEBX43/Lq1B8sxU2yL:pQynSuGTS2eLDvQV4XkobVq2
- TLSH T1C407E042FB0258B6CD934271865BE73A5B222E14C1A6DE0BFA8CFD28FF7B8914D15741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target adb/AdbWinApi.dll
- Size 94KB
- SHA256 caf90dd8e1e6def816925d5740a56156463bde12b4611dcc4427b786a05666d3
- MD5 c6c9cb0663996c070f905cf2dceb698d
- SHA1 8baa8c4085c4ae01c6db851733519437866943aa
- SHA512 c96b5af1a4fe9ac30bd6f7f3e95e610f86f25d5053850dfae8ece47494c43d306dd025f7c7d35bf54498391ebc1a167c327463ca02ffd8832ab3081c40bb6342
- SSDEEP 1536:BpCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:Bpo0k6ZWVTaif6sCG
- TLSH T139935A313891C072D8D272B949ECF765A27EE4A00B659AD3379803DEDD643D26E3538B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target adb/AdbWinUsbApi.dll
- Size 59KB
- SHA256 88ca9628ab3326d265c2568aced59353af5b9011a3248c4895d912b5f834f975
- MD5 9806cdf97bf783630a75ed72cc1ba5ca
- SHA1 3c4d69241df65ba0b6590a49b2f4c39edc84b753
- SHA512 1a75f9fd6c07e6ec33e39daf997df91fc19f790ad3ce1c71c0f5e4c3d643b82d4f598ecc0d17e4347f6379220116232db73ec14177c05e8a287645db1b7a7103
- SSDEEP 768:zLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:yyY8wugEwOVEXdz70e4gI
- TLSH T1C5535B2279D4C073C89251F909ADF762626FF6914B6084C3779813EE9E243D1AF3938B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target adb/adb.exe
- Size 986KB
- SHA256 ad5d27384d1b5bceb6342bb3204fee977217422bcafd252ab18f763a3de43931
- MD5 c4be24df324ee7892efa1fa1871b9bc0
- SHA1 ea4d9d58080ccb10a710ed4effa2c416cc6aa85a
- SHA512 144048375a7393797d2d26567fc2defe6137b882671c760057df73c7344fa2a494626df6fdcb8ff88605f56fba3f49b3f22ac72f593377366e85329637bfd2cc
- SSDEEP 24576:hnBLMUPqQkqPRa5umzfL3bgDBTPfjpvXzHUEZiqyDhijEfEQ:hnBLLPqsP3ibg9TPfjBXz0EQqyDvf
- TLSH T1FF252984FD8755F9FE6B1D708197F73F0B214A01C431CDE9E6A8AD85EE33A92111A329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target adb/fastboot.exe
- Size 833KB
- SHA256 d794004af6dfedb5dbf118c20b4fda20ecdb38744191e859f1233287291cf0c7
- MD5 0875abb1c7b403b3f95631326eafb6c2
- SHA1 45faf0c7b005b72145f25186b1a735f282332246
- SHA512 e7749ca3490851c854a036147041c04327203aacd9f9ec6577023ff4adfb9f3ae494baa312dbd12eedce21601ce8a0d2fd20f6f130ed0b2b134ee289db47f09b
- SSDEEP 24576:U+oaWQe5SvYC25H2wrDB8sxUaLDi6SUasTjffp:UJHh3B8sxU2isTL
- TLSH T1FE054B65E70795F1DD1306F1094BFBBFA6309A0A84308D1EF28CDE98FBB2D61246D265
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target imageformats/qgif.dll
- Size 75KB
- SHA256 3ae1828d03e788b310afb96550dd662f00d41fdb34aa3a6586ad4b7b4f362e7f
- MD5 9d59508eb4a586e4a773ccb5bb820da0
- SHA1 b02d40a8749d33a968a6ff01a2520cada3bd2778
- SHA512 fa0471d14d91566d5fd4e72eadc58cd983fe9049fafad056336206300977bc96e48779a5ebac0c84a061a301ea432a720d7dcd84dd1a2ac6344abe4d775f55d3
- SSDEEP 1536:Rfna6uWkq3GEK6NDsXKSeUhy0WuEDfMz41jxNkSMm:RSJWkmK62KSeU8/DfMz41jxNkSMm
- TLSH T14C73A5D1B2E99CD2FE72867C868AD372663CB9D08213DF63D13485395B52F8239C4683
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target imageformats/qicns.dll
- Size 95KB
- SHA256 d974a1766ae3f35b82e03ca6b3d0c444210ca7dee863f9b9f1e86bf9a9a8f638
- MD5 bc2fcda847895434af9b63d78c548e25
- SHA1 150d34a39fb4e3fc4219452855f8a5bdbf47729a
- SHA512 30350293cebbb5129a324b1f6cf386f1a83ceed2caf071786c58532dd5fdbd3e80dea013e557cf1752fd171cca131328ac0abcdcb04cb39535ec337b8848ea75
- SSDEEP 1536:fg77tAurl3J27zLS1N5mFiNrBTs+qxkozPtoWQrNq3Jm:I/tHRJgzLSL5pVqxkozPtoWKNGJm
- TLSH T189A3B6E0BAD99CD2EE71467C45C6E372263C7AD14513DF93D5309A3A4B92F8239C0287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target imageformats/qico.dll
- Size 82KB
- SHA256 d9d1afcb36f8c48fca4cababc3424e47d3eb0ea8665aeecd9166ca21579d31a0
- MD5 9d01f521a411f3b238cb5d58daf6ef85
- SHA1 9a115579c40fd3574265d2d3825b903867f901a1
- SHA512 d66418f16ffc36a020693eae4dbb7a114d183eb5bb237d3d31e4184005e9f559529bb8ac33813c6fcc35cab2c3dae277dfcf594da5ea8f15e7c484e7e7107ae7
- SSDEEP 1536:3fJELHOVvIgxSOpsLFRBer4L7WpjlVNyW5:hErOVIgxSOpp4L7WpjlVNyW5
- TLSH T1918372D1B6D9DCD2FA72827C4689D762A63CBAD04613DF63D1344A3A5F52F9239C0283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target imageformats/qjpeg.dll
- Size 472KB
- SHA256 deef3d1efbd5361e335a766625b25bf00b6ee4b7f8e96e06404ace40c160e808
- MD5 23ac3c8103a5e6de5433e35531442328
- SHA1 1741ec02b8e2e0306cbb321907cc3abfdb6d0214
- SHA512 d3fd64870696b1598ceea04de6d4ebee8eb487dceec0c5743e19c1656a57476acc92aac9415a55ef6286993b7c29c740fd2df6665bb5a6acf54e28f11b08c976
- SSDEEP 6144:3tzLxoc+J7SerE1tIbrl9W4ZAyPDBCBxhF6rqNZBJTevybz+feN45b6m3DBSLVjN:3tZoc+9yluQeNCJQUGh7BYIybp
- TLSH T174A4D583F6865CD3EBE24139CD46D23753287AAC43F3CBB3F6155AE57E626923904241
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target imageformats/qsvg.dll
- Size 72KB
- SHA256 a351d313819ae29d19dc1edd07f2a4add27dcbb7258117ba0af50724b5032380
- MD5 8be5654893054f868504d004e5feb43b
- SHA1 660a1a86511cdd80f3ec5860691a20178706d65e
- SHA512 690f7b9ebc40b98675f2876564ac1fdc6bd830675152ae6c178cd41cede35dd16c7aeaf03805d0947ce5cc03ee61c312830900b369b28d2cf69715ea611b4460
- SSDEEP 768:MChfcADD9Aq96M6SOy9TtuRqdUb3hcGmHJnKPW1IFNFxmzD:5cADL6SOy9TU+Y3hcGmHJnKPW1IFNF03
- TLSH T12B7352D1B6D9DCC3EA75867C469AD372263CB9D04613DB63D1348A3A4B92B9239C43C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10