Overview
overview
7Static
static
3ff2535da62...82.exe
windows10-2004-x64
7ff2535da62...82.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3MrRSS.exe
windows10-2004-x64
MrRSS.exe
windows11-ltsc_2024-x64
General
- Target ff2535da629c7bcbf1b013d1c7e36cd00cb4c2d9e0ff733fce33b89082a3a882
- Size 10.9MB
- Sample260816-e4av5acr91
- SHA256 ff2535da629c7bcbf1b013d1c7e36cd00cb4c2d9e0ff733fce33b89082a3a882
- MD5 8dd8bb029e244ac45e517956cfff5e2c
- SHA1 0e9e7f7cd560642dff8f1f1f3fd254c51bf38306
- SHA512 3174ab703332ea8aa54ca6364b80819bf83274851ea98e3e3fb1a73a07bfdc45f00df8ade0f2b16eee0185a6868a31a339dc395291f150a1a764f3e52ac64791
- SSDEEP 196608:Jvv5JZmHTWEcamN2oXQZYug4M91Z4fkagLLCtqzf6MWyYxaQlGZOApxYzKFOT3um:JLZ6WEgNhXWYugfckz3CKf6qYxaAApxG
- TLSH T163B633B8C324094BFF8AD33D08451D5B8A63A646E17C2ED34B66E17F789248B4F39719
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ff2535da629c7bcbf1b013d1c7e36cd00cb4c2d9e0ff733fce33b89082a3a882.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ff2535da629c7bcbf1b013d1c7e36cd00cb4c2d9e0ff733fce33b89082a3a882.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
MrRSS.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
MrRSS.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target ff2535da629c7bcbf1b013d1c7e36cd00cb4c2d9e0ff733fce33b89082a3a882
- Size 10.9MB
- SHA256 ff2535da629c7bcbf1b013d1c7e36cd00cb4c2d9e0ff733fce33b89082a3a882
- MD5 8dd8bb029e244ac45e517956cfff5e2c
- SHA1 0e9e7f7cd560642dff8f1f1f3fd254c51bf38306
- SHA512 3174ab703332ea8aa54ca6364b80819bf83274851ea98e3e3fb1a73a07bfdc45f00df8ade0f2b16eee0185a6868a31a339dc395291f150a1a764f3e52ac64791
- SSDEEP 196608:Jvv5JZmHTWEcamN2oXQZYug4M91Z4fkagLLCtqzf6MWyYxaQlGZOApxYzKFOT3um:JLZ6WEgNhXWYugfckz3CKf6qYxaAApxG
- TLSH T163B633B8C324094BFF8AD33D08451D5B8A63A646E17C2ED34B66E17F789248B4F39719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target MrRSS.exe
- Size 29.9MB
- SHA256 22469b8fcbcf26c9c3343acea9b7b7c96391f6f319c1bd685d62be6b8a1d03f8
- MD5 af8cb2440f784a287f639fa6fd7d5b2e
- SHA1 0ac4fee809927ce2c8d315369af929acaaf9adb4
- SHA512 4babb77a8ba0460cfea0d1ad007725c84101e71ad7683939e8578debea6a5b80ce8fdce0ae4df96061285032488a076b4980584550d9583339c8e9ea533fc6d4
- SSDEEP 196608:QkIqPuqV/ypiSd80HP/C2ocVrvp5vN5ytEol1OoNhngvu9rGMeAj:QkIqP1V/ypiSv/TocVrfNQaugH
- TLSH T17967AFBAB65C36F2E6C59BB557E102443334BC05BA82C35AF712675D6DB26A38F31320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10