Overview
overview
5Static
static
3R6-Dumper.exe
windows10-2004-x64
5R6-Dumper.exe
windows11-ltsc_2024-x64
5snapshot_2...er.dll
windows10-2004-x64
3snapshot_2...er.dll
windows11-ltsc_2024-x64
3snapshot_2...ne.dll
windows10-2004-x64
3snapshot_2...ne.dll
windows11-ltsc_2024-x64
3snapshot_2...le.dll
windows10-2004-x64
3snapshot_2...le.dll
windows11-ltsc_2024-x64
3snapshot_2...re.dll
windows10-2004-x64
3snapshot_2...re.dll
windows11-ltsc_2024-x64
3snapshot_2...ui.dll
windows10-2004-x64
3snapshot_2...ui.dll
windows11-ltsc_2024-x64
3snapshot_2...vg.dll
windows10-2004-x64
3snapshot_2...vg.dll
windows11-ltsc_2024-x64
3snapshot_2...ts.dll
windows10-2004-x64
3snapshot_2...ts.dll
windows11-ltsc_2024-x64
3snapshot_2...as.dll
windows10-2004-x64
3snapshot_2...as.dll
windows11-ltsc_2024-x64
3snapshot_2...la.dll
windows10-2004-x64
3snapshot_2...la.dll
windows11-ltsc_2024-x64
3snapshot_2...ne.dll
windows10-2004-x64
3snapshot_2...ne.dll
windows11-ltsc_2024-x64
3snapshot_2...ne.dll
windows10-2004-x64
3snapshot_2...ne.dll
windows11-ltsc_2024-x64
3snapshot_2...se.dll
windows10-2004-x64
3snapshot_2...se.dll
windows11-ltsc_2024-x64
3snapshot_2...it.dll
windows10-2004-x64
3snapshot_2...it.dll
windows11-ltsc_2024-x64
3snapshot_2...lp.dll
windows10-2004-x64
3snapshot_2...lp.dll
windows11-ltsc_2024-x64
3snapshot_2...on.dll
windows10-2004-x64
3snapshot_2...on.dll
windows11-ltsc_2024-x64
3General
- Target snapshot_2025-08-19_19-40.rar
- Size 53.7MB
- Sample260815-eaxg2ael7w
- SHA256 fba90815ee3f3516394085e45baa26f7942d5717ec6b75bce0b6fd278195812c
- MD5 582fce0cbdcc7d28202a6954944f8fd2
- SHA1 0df5b9d16356c871ce02d1d2ddb7379b33d12c59
- SHA512 3d333c8fcd7e723b7c5da602cb2fafb514ba5beea3162816bf4605f594a5e35048e05f1a21babea6cd8a2045c35410df147d475347e4990bbc0532d5df350c77
- SSDEEP 1572864:pPltU2oD+3cgUcha+NNcSzOzhvbrucF8s9H+PSOci:1li2cfgUua+NNcSzO1zrujui
- TLSH T1E0C733D2EE24223C300B60BB8F8DA3A6D81DF5451971658BF7B1D1D522946D82FCFC6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
R6-Dumper.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
R6-Dumper.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
snapshot_2025-08-19_19-40/release/x32/DeviceNameResolver.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
snapshot_2025-08-19_19-40/release/x32/DeviceNameResolver.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
snapshot_2025-08-19_19-40/release/x32/GleeBug/TitanEngine.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
snapshot_2025-08-19_19-40/release/x32/GleeBug/TitanEngine.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
snapshot_2025-08-19_19-40/release/x32/LLVMDemangle.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
snapshot_2025-08-19_19-40/release/x32/LLVMDemangle.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
snapshot_2025-08-19_19-40/release/x32/Qt5Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
snapshot_2025-08-19_19-40/release/x32/Qt5Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
snapshot_2025-08-19_19-40/release/x32/Qt5Gui.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
snapshot_2025-08-19_19-40/release/x32/Qt5Gui.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
snapshot_2025-08-19_19-40/release/x32/Qt5Svg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
snapshot_2025-08-19_19-40/release/x32/Qt5Svg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
snapshot_2025-08-19_19-40/release/x32/Qt5Widgets.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
snapshot_2025-08-19_19-40/release/x32/Qt5Widgets.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
snapshot_2025-08-19_19-40/release/x32/Qt5WinExtras.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
snapshot_2025-08-19_19-40/release/x32/Qt5WinExtras.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
snapshot_2025-08-19_19-40/release/x32/Scylla.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
snapshot_2025-08-19_19-40/release/x32/Scylla.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
snapshot_2025-08-19_19-40/release/x32/StaticEngine/TitanEngine.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
snapshot_2025-08-19_19-40/release/x32/StaticEngine/TitanEngine.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
snapshot_2025-08-19_19-40/release/x32/TitanEngine.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
snapshot_2025-08-19_19-40/release/x32/TitanEngine.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
snapshot_2025-08-19_19-40/release/x32/XEDParse.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
snapshot_2025-08-19_19-40/release/x32/XEDParse.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
snapshot_2025-08-19_19-40/release/x32/asmjit.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
snapshot_2025-08-19_19-40/release/x32/asmjit.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
snapshot_2025-08-19_19-40/release/x32/dbghelp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
snapshot_2025-08-19_19-40/release/x32/dbghelp.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
snapshot_2025-08-19_19-40/release/x32/iconengines/qsvgicon.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
snapshot_2025-08-19_19-40/release/x32/iconengines/qsvgicon.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target R6-Dumper.exe
- Size 30.7MB
- SHA256 67cc75a522c6a2886bd806da5a654b2698e2ca87a011b739f13b37dac35230b1
- MD5 7d4af5f8acbe15a51441f646d3894dda
- SHA1 853c71a64941d88b98d0b3ca645d45876bd6c0e6
- SHA512 5109be2d742a6b93750d9926e76f34b5d327943daa390092d47d797bd3ec02b3de751cd4bba893f39c5d60dfb5d4ccda7cf13a9e3ffa3b7360ff06c9c91337ac
- SSDEEP 786432:C0L4S1PoQOvURRT1z7mpJ4g+IsABkD/8Jh3:C0sS1PoaRx1HE4jIsABkK
- TLSH T1C56723E6A9CD23D0C7C31A00618E43AB61D1957941FE9C292BC73C026B15EEF664AF77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target snapshot_2025-08-19_19-40/release/x32/DeviceNameResolver.dll
- Size 62KB
- SHA256 603ca613ae1000ee0c534694154d360d48fcff0a5db4681ca061382d814509d3
- MD5 43a975de4528ebceb903bdc443537a2b
- SHA1 9dbe0386f31fe3b25da84c9723305fb3a8270566
- SHA512 ccc3bbda2ebec44dc3bda6f864d5401cc3c4d1146231a74a0e2a3448ad55c3720064db2c6dee1db669cd0143f0e9f187ed619e7381f1123c00fd391772e7ab86
- SSDEEP 1536:Y63ZAOkToFb9Boo7kw1je4fD3dEk672iD2:NZAEbBom1je4fD3dEk22t
- TLSH T1A4536C117650C072E6AA563494A997739DBE78416BF440C73FA90BFD9FA03C0AB3436B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/GleeBug/TitanEngine.dll
- Size 844KB
- SHA256 d4ed3c4757613fd3e8254a348b5b88e53a8de3fa1e3a5c780109bc9d4140f5b9
- MD5 fcdcdf0708059c0f27528ef8da7c23e4
- SHA1 d694167498b3d7d88ebee2268aab2189183546eb
- SHA512 c74da754a334fff7419f424d8c066373665b17884dd5b7751129b43e5db369009cb377542cc8530e2d4f9343282271153c5e4e45b22923501fbe9aae47fab74d
- SSDEEP 12288:SpvpNsFIoKK26G52vXMsROOmWwRyuQVx67uAZMtbUuIbtxnzDezyhGsdl5tFAB75:S5K26GeLHVoKUugt1zD1eK5Jl/Vm
- TLSH T15E05AE10BE41C072D79A117804BEFBB71ABDA4240B309DCB53D81976DF606D27B3A66B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/LLVMDemangle.dll
- Size 453KB
- SHA256 99f99e4abad8c162a36ef3e90f7d7364e6df569456647a70e3c5f17af807dd39
- MD5 e9df45d405d347a4d69903b4e2d7cc9a
- SHA1 48957dba49960a1076e184640b798521c5c95931
- SHA512 c494a7cdb9a4dac66cfd9038257447481ced160205935baf5673c518dd2afc56272e594f4957a5c40ebf8879bb553eaf9546151fb0b293b082246ae74fe8b94e
- SSDEEP 12288:YfUN7l/qdTSkigC55PU+k7BNc7wH3nUNIWX3qC0I4dJORac4W2t:k+k7w7X0I4dJGac4ht
- TLSH T142A48E10B881C031D2AF34B455BCB6B719ED79201B751ACBA7F8147A5EB05E27E3872B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/Qt5Core.dll
- Size 4.9MB
- SHA256 054b08b2b64d0cf9cce74d629d8b9fc0736e12d369f99b6e5111aaa9f4559bfd
- MD5 5eb49c566a30ff8bc22565b780f648e8
- SHA1 89f24337b9cac953c057806d578414fc5afc1447
- SHA512 0417185f0a49213f424b6638b712349e53d9c5766b725e615d3f0484987f3f48a6c85998d47713271d3435754555992c8b177528b3c13fd3b6993d60fe03f738
- SSDEEP 98304:T/cPFLQEJuMEGJsv6tWKFdu9C9Ed74Gx80MEcUsk80MEcUsk80ycUsk80M6O:TsRJsv6tWKFdu9C9y7
- TLSH T170369EA27B978176E9A68270897F776F402DE8150B1145CB939C360E9A716F13F3B30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/Qt5Gui.dll
- Size 5.2MB
- SHA256 ba869785c14c4ace0924c123295a503a59cf90cc4da68e0c61c47187b3754fe6
- MD5 0906103e25f7349766fc6025c491aa5a
- SHA1 350589ec1f12ba5f65afc263c10243e10a362287
- SHA512 ab28b7c562a342c8cbc1dad5290c2c9d2e0678de871f8ae71163fdc6bd7458084481f84baeff3349f9f79c5f07fa3e20cea4553b163fcbec75709ddf599b808b
- SSDEEP 49152:QxxOt5RYfb/yCBXDCiYERf8ogtACsw5FvH3CjsE7d9oDCCGCdBEtq01zN+p6G6n7:TdEHBXWiYERf9gtACTv+7d9oDCCGQpQ
- TLSH T128463BD1E2467173C96292BE270F263FA1B6AD52C31482C3D658AE95D4703FB0F7B906
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/Qt5Svg.dll
- Size 273KB
- SHA256 4e5e73ae36d79192dc04ebaf1d08ac5afcb77a825af6d425ed5431845605f8a8
- MD5 c7cf7bb86753ea779b0aaf9cd92a0433
- SHA1 7c336c2c16e4c1956c7d7b7c209f8e954f336fbc
- SHA512 cb94e6dbff446640376960d0eba67a3cb39a2804d6cf8eb760b752a15ca6a55d7f13360500a257e0a45d84db81d60a4228c24df04bdd3d91d9347493206d0ab1
- SSDEEP 6144:sgc+DBosZOrod1j9vZQdy8DvBojojRsTztYQ2rbvk3JVMlfMmu:swoSGO1Efy
- TLSH T1B7544C52B2530EA2E54EE338785F6B179B3AA04203398FEB8259DD2174243F45DFB395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/Qt5Widgets.dll
- Size 4.4MB
- SHA256 fae1cbde9e10955e8b0ff414e64020be20bf9d1d62e7c583b4510b60f363faf0
- MD5 07b30ed72326c030aae212224034bf28
- SHA1 13283d6bd5e953a298ea2dd095bedb239dcd7961
- SHA512 228bf5d5adac1e6fb8eb4cdc75d60f44d1c81c2e5f44d1f04bb3929a06fc2ebbe33bc634a90d593d5892f75121d96a680fd988cb0b462bed82db7183c936fbf4
- SSDEEP 98304:QvFOYikKmlkpxE5G2qWIWhZIsC6C0DH2DEijycRoe+KbD/Mb7C8I+b2fGA4MgHQk:ZSZpcRjgVb6Y
- TLSH T1A9268D93F28382A1D8CAD178CD2E6B63C535B1194B5992D7E39CEE4664703E31D3F292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/Qt5WinExtras.dll
- Size 444KB
- SHA256 8cbe541083088cb133647074135411c9a77b06035de3de90ff6362205754fd88
- MD5 095bb7707ee3b0b353f5df0d518b6bfb
- SHA1 48728656b2f212689e17430eb64b8ac0c43d322d
- SHA512 62e14b1291129f7e4e484e6b952b1869c7c2b23d7a86c5420e98e772e732b839f354271887b650d4a5738dd31301d5671877bcedd47e5075596a7e14c31af153
- SSDEEP 6144:SIme9z7fBhS61G4jc099vS832I1Yh+rjFKz0FKj5YgtAoBqJvAtU8J1Ntm71omNq:SRehNA6bc0XS832I+h+rjFKqDZ2mNInt
- TLSH T19BA4B83A16E9E1A8EC4C75B91E48AB1C838EA6E0C705D5D7DAB50CC7B7868ED053703D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/Scylla.dll
- Size 452KB
- SHA256 3b5a699cf588472468085de0abfd19ed3bd3251e9a5b110348671b028f99b146
- MD5 f39e0d2680ca0c765c6b57557692a86b
- SHA1 82b06a211a9facb80ee0631023547cc8a906bbd7
- SHA512 01096f37082ef01f9b74311331e7b3ed85cd179c486b2539f46d4b928c9706fde6e01ad091638457f740d7e4c60318847bbe24ac00ede704a529c5e2a18845d7
- SSDEEP 12288:yyn15kGuyxztm7eT3kAydMAIIt86IV2K3D2Q:yU1B4eT3kLCIt86xK3aQ
- TLSH T158A48C20B782D132E9FE027069BDDB6A087DBA710B3585CBF388495E6D646C21F34B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/StaticEngine/TitanEngine.dll
- Size 844KB
- SHA256 d4ed3c4757613fd3e8254a348b5b88e53a8de3fa1e3a5c780109bc9d4140f5b9
- MD5 fcdcdf0708059c0f27528ef8da7c23e4
- SHA1 d694167498b3d7d88ebee2268aab2189183546eb
- SHA512 c74da754a334fff7419f424d8c066373665b17884dd5b7751129b43e5db369009cb377542cc8530e2d4f9343282271153c5e4e45b22923501fbe9aae47fab74d
- SSDEEP 12288:SpvpNsFIoKK26G52vXMsROOmWwRyuQVx67uAZMtbUuIbtxnzDezyhGsdl5tFAB75:S5K26GeLHVoKUugt1zD1eK5Jl/Vm
- TLSH T15E05AE10BE41C072D79A117804BEFBB71ABDA4240B309DCB53D81976DF606D27B3A66B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/TitanEngine.dll
- Size 844KB
- SHA256 d4ed3c4757613fd3e8254a348b5b88e53a8de3fa1e3a5c780109bc9d4140f5b9
- MD5 fcdcdf0708059c0f27528ef8da7c23e4
- SHA1 d694167498b3d7d88ebee2268aab2189183546eb
- SHA512 c74da754a334fff7419f424d8c066373665b17884dd5b7751129b43e5db369009cb377542cc8530e2d4f9343282271153c5e4e45b22923501fbe9aae47fab74d
- SSDEEP 12288:SpvpNsFIoKK26G52vXMsROOmWwRyuQVx67uAZMtbUuIbtxnzDezyhGsdl5tFAB75:S5K26GeLHVoKUugt1zD1eK5Jl/Vm
- TLSH T15E05AE10BE41C072D79A117804BEFBB71ABDA4240B309DCB53D81976DF606D27B3A66B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/XEDParse.dll
- Size 1.3MB
- SHA256 c69f1bdbe2f153a807311a6164d0823ab50314c2da96dcb0b5f438e61e4a0b8e
- MD5 111676b7fd20a5db422c93fb5c9e81ce
- SHA1 6249ef36ef44b753b8b09449e6a9dad24aafbb4c
- SHA512 f749638f0e9a5239d2fde6e782ceadd1de5262dee23a709375b64118dff35707ba44a94a416d3e19614f988022b1e488ce8420674ae5d99fc1f2ca265db41275
- SSDEEP 12288:fFCSxfrWamGisd7Tv3wfvm8a91e5VOOETgnoOC0VDZD5pZJ5pZJ5pEx4T2j:fFCSxfn7j3wfYlOKQC0Ej
- TLSH T14755B5C99AF48F03C51D52B8198FAF78A114A2C54E25CDD79AAA78F034207BB759F730
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/asmjit.dll
- Size 298KB
- SHA256 412e418493efeb0768fea2a316ede1abdf6f482f98b01b5b1e038b04021da5df
- MD5 8bd6f56bffa69247390dc459d367578b
- SHA1 a2d98a28469c11faa48b7907e448ed643ffe6b3b
- SHA512 c733cbb6c7ba2d8c21c7f6bc6a4fffd02906b4f844002df79cd121102c2bc0262eebc3447baebc7671ed6827d8949f05d24d33e5d1c331e221457cc85212ee78
- SSDEEP 6144:7mW72opZK+Po7xtuVSVYo8aLtct9f73zkg3yt2i:7mGPw/sSywithDz3u2i
- TLSH T108549E01FE82C8F1D8EE053089FBD7265A3C79B147E789C777941C266E723C06A39996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/dbghelp.dll
- Size 1.2MB
- SHA256 0697984deb8c7e482c50232d8ed791d759756f1aad9b62f18e4602d0db7a7cda
- MD5 c6e2a6a2a8d234fa608f7fd909327a95
- SHA1 fc1f3985d79d02a2c69819ef09dd385b1a0df45e
- SHA512 a6c4cf9d397055fe12dc5ebfd8b29c898122236617c926edc3a559beff808bd71ed108d2878a70cfa8b5255c8688f89603fac4e3455823568ef7dfdbee80f862
- SSDEEP 24576:yZpLHEicTfNTGxvm8rXLWmf70QyS4yE3/:lxAvmQXymf70l7
- TLSH T191456B31F5809275ECD61172A6BC7A3E25BDE636032C12CB628809A96D717D26F3C7C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target snapshot_2025-08-19_19-40/release/x32/iconengines/qsvgicon.dll
- Size 38KB
- SHA256 0537ce5368db4601239b5401d79f294366f7b3a9ee434d3a8d824f825dccd678
- MD5 eac65f03e9f9df34f8438162d9ad377a
- SHA1 8bf9c07832614ade1f297ab49c646b01bc89eb81
- SHA512 c0f288fa833b1e2c9832738ab363d1e2af2e376089aa91036cc0db51f7dddb8edada79e8ac1bec45263479807a828a2a17cc63a6b41d132c7aaabc94cd5a80e5
- SSDEEP 768:lE7X1LJGhKSkvyOOvVJzcdAsBoQpE8mtAfJkbo66N266Gg:+TkK78VJodAsBomE8EAfJeoL6Gg
- TLSH T15C033AE2266912F2F29A96353449EF17883DB77037C385D3D71B497A98163B27E3430A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10