Overview
overview
5Static
static
5ebfff9269d...e8.exe
windows10-2004-x64
3ebfff9269d...e8.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ol.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3$PLUGINSDI...is.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nt.rtf
windows10-2004-x64
1$PLUGINSDI...nt.rtf
windows11-ltsc_2024-x64
1uninstx.exe
windows10-2004-x64
5uninstx.exe
windows11-ltsc_2024-x64
5$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ol.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3$PLUGINSDI...is.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nt.rtf
windows10-2004-x64
1$PLUGINSDI...nt.rtf
windows11-ltsc_2024-x64
1General
- Target ebfff9269d209d6575512fd64730202962153d7a8a2801d1e548fdacb451dbe8
- Size 7.4MB
- Sample260816-e5cfcazzfv
- SHA256 ebfff9269d209d6575512fd64730202962153d7a8a2801d1e548fdacb451dbe8
- MD5 c7f00dc753050039aca4ce9a91429514
- SHA1 f70dd032eba1500eb716fc4bc14a1a464986ee70
- SHA512 ab343b277393823d597e24c478aaa6c6965b871fb4802a02105089cd08010988255cb1bf11b81ef70f4c3f4f6b1d281230ff3b17bcec785df8102bb01aeade09
- SSDEEP 98304:LruBm1eteLH+nroUdSiCwwV8F6THKVtQbN1oH/s7ePFj29hn2wW/Y8vmvZNg:LreCe8UdqwwIabrq/uK2fn2wEpmZNg
- TLSH T183763380D990A174DD4A1BB02AAFE6B79B61BF285D71C39C7A3C366337374E156B7200
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ebfff9269d209d6575512fd64730202962153d7a8a2801d1e548fdacb451dbe8.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ebfff9269d209d6575512fd64730202962153d7a8a2801d1e548fdacb451dbe8.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/JxNsis.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/JxNsis.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsFolderIcon.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsFolderIcon.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/setupdll.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/setupdll.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/uires/rtf/agreement.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/uires/rtf/agreement.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
uninstx.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
uninstx.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/JxNsis.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/JxNsis.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/setupdll.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/setupdll.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/uires/rtf/agreement.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/uires/rtf/agreement.rtf
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target ebfff9269d209d6575512fd64730202962153d7a8a2801d1e548fdacb451dbe8
- Size 7.4MB
- SHA256 ebfff9269d209d6575512fd64730202962153d7a8a2801d1e548fdacb451dbe8
- MD5 c7f00dc753050039aca4ce9a91429514
- SHA1 f70dd032eba1500eb716fc4bc14a1a464986ee70
- SHA512 ab343b277393823d597e24c478aaa6c6965b871fb4802a02105089cd08010988255cb1bf11b81ef70f4c3f4f6b1d281230ff3b17bcec785df8102bb01aeade09
- SSDEEP 98304:LruBm1eteLH+nroUdSiCwwV8F6THKVtQbN1oH/s7ePFj29hn2wW/Y8vmvZNg:LreCe8UdqwwIabrq/uK2fn2wEpmZNg
- TLSH T183763380D990A174DD4A1BB02AAFE6B79B61BF285D71C39C7A3C366337374E156B7200
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/AccessControl.dll
- Size 24KB
- SHA256 89ae5e9ed94c71972ddb25aeb508ee6fb8c7a39e39e775182bcdba02762e6dce
- MD5 03cc5115234c4868cc8e2116ed949ca1
- SHA1 9cb86d1d2c41da77fd486a128ac43afcd6b8c129
- SHA512 57b1a63316192bd76f65168f07d1797f4d04b98b4a99d0e543ebee3ab4b65b8562ac3f83100c25a207c385956025c10c298ff68a17770bbf0e8b82c7b89d0c58
- SSDEEP 384:udGZ2ESnTqkddTm43saIvybNyb8E9VF6IYiTPxIZHMMZknCC:uMANdTHpIvy3EpYiTPxIKMC
- TLSH T145B22C624FB80BFEF9B21A303AF8547747B6B50125A0C18F5316C95A6D217876EB8337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/FindProcDLL.dll
- Size 292KB
- SHA256 acabf187f608858363ce88fcf64e78c09738860ce4a84952c114cf53fa81ade5
- MD5 5a177de1f2e0a85e3fe15e9821747a79
- SHA1 e339619f777fc21ecb731559799b7189c2a324c1
- SHA512 0e8456b5b480c18300515af33a1ca665c20da4c07fa66baa7ccde9dc83dfc9fdde7e4d0ea05a3fd030e67dc96e0619c236410ed59985de9bc95654eac2b36103
- SSDEEP 6144:A+WFR2dU22mRXAtS40ZxdjYHXQohL7cRJ5:Av2dmmRXAIDzxzotQRJ5
- TLSH T107548D117DC18432C2BB38346678E2B64DBCA8311D749A8F539C0A795F74582FB36A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/JxNsis.dll
- Size 2.6MB
- SHA256 6a3b8e3b628b49cbb27d399a6f78cb7dedeee171357df2d4343cd86a1b5b602e
- MD5 8e6ed29b3e4e96287fbaa44fa4bfee40
- SHA1 16bd961ae71e4a536d3538a6aea35613746d7bfb
- SHA512 e337564c67a1b536760122534626c0e92b6f59ee56d2a4430d6c3ebc3eb750931306f93daa242d41031eed068ddbede3c6dcfea1ddc7932c27310653073170c4
- SSDEEP 49152:UR9wPpoE4+deyU2fo3Yp8VXcnRdNQN09k298MQFP+AtD4wjGlpxaXJkw4wDR1TAd:UR9wBoE4+deyU2fo3Yp8VXcnRdNQN09v
- TLSH T1BBC5BF12FF4280B2E59F0234A1BB577F4D3EAA244738C9D397E519A99D301D1623E39E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 21KB
- SHA256 d4c3a23eff386c311129d582650abce1ca1e15adcef9482a303306fd3a958058
- MD5 5b11192faeb214d966ae26b4bd47cc9d
- SHA1 be5ef8b780d51b85aaac5932f1587e74ca05c705
- SHA512 714eb5c2352637bd218b889c3ed2c564227568e9c01f0046fd096b500923f5d805e372a2a7633d5662e584b5860aad3b546fddb967fb77057d3539b6d80d1d8a
- SSDEEP 384:I8PJlt70esj0Mt9vn6ay6mNyb8E9VF6IYiTPxIZHiW39bU:I+qesjRL6HEpYiTPxIL39bU
- TLSH T119A29E6386604CF2F9524D3430D4AA36AF79B6851FE081D3A39BC1416F943C77BF92A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsFolderIcon.dll
- Size 127KB
- SHA256 8adb71b8f8dd87adeb44c873b2e75a61d4deab1637f10ae33d48454bcc641786
- MD5 2f06a36c102fb5165a9260651f827d3f
- SHA1 88c696026eff26bab7b89a34331b35e0269590b8
- SHA512 62d23bb45825737f5e48e203606913f492dd16efcc66cd442a5b126b254ce0283edbef3915636a99b1fff6551656bb96c8984ba029be0ca4a09b3e1856d84888
- SSDEEP 1536:KHjCVzTw4NQZmTynGpQmpdqfPwlUZr+HXanAOyE4gRwG9WVmg7TPxID1:qjCrNQZZCQmpY+3E14gSG8VmgfxS1
- TLSH T1FDD38C1132A0C071E09A5A395979D7729B7E74719AB488CB7BB8037E8FB03D09F7435A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/setupdll.dll
- Size 2.3MB
- SHA256 e30f2d1583462e6556fcb71112adc533f7c004262e2cecf48a6921625a6f4c10
- MD5 7e469cadf8f403fd07c0a29ec0b2a2da
- SHA1 f95ae76a7fb8cc55540be7193e5bca2f9b17ae49
- SHA512 d7ff11594a633171afe44758abe2dae229a8d88f72b1a086f28c3deb3871acf9c49bad44147ed923af00dc74c6a2595e47d1ed48bda0597666649d54201c4b6e
- SSDEEP 49152:AiY1Wf/vu0J9E7od0yMHacx967Tgp9XJ23:w1au0J9UOMPx7C
- TLSH T113B5BF1275E2C035C27E03305D18B28B56BEBEB409B4D76BBBAC151CAF74C819A577A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/uires/rtf/agreement.rtf
- Size 151KB
- SHA256 c7c26aa990d1c6468fc5dcf89909f2d08383f076c7f59c61c9ac8642d2be6bb8
- MD5 3cec216107e91c76fe64934dcccc81cc
- SHA1 75e6a4510ec6334b5fb7852c58a355c649042d05
- SHA512 5665096c0aa55c2f2712ee5fcf91a640fc33d157d42eccacf908293ed16ce551b14154316151dcb165beb56afdd780176f9f374d893d778a68b3f5ec14e7be4b
- SSDEEP 384:Q1MZCpjZ6W6TeJYQWFqhGjjNjVrtIR9CL9Ty9TAH9T2js9TwWLbVP2YQZvX57Js6:QGDzBpBOOcQkoao8yHLbbV9LKT2efv
- TLSH T153E3DE9480113789C7B3C7FAB925F0E8FD68A90AF5B814216E3F816BC46FE3DD695142
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target uninstx.exe
- Size 4.0MB
- SHA256 920a92aed5b0f19e14151760f3d46ac3913bab5816460c505b6e406962fd62af
- MD5 514cc49e0f90b91eb93ee00b75871ec4
- SHA1 70061f7d626d3de28b9f60676e86133d942f40e1
- SHA512 b07a7adbe0d58356fbe3a0ba5492a6bd125757b54e7b9d01f93185d2c3fe00a7ff0409d6bde3dfb5a6ac26c2cb7e4ac5ec7436f75db38c17ac578350881fca96
- SSDEEP 98304:xbuBmgQc5Ox4rYHHzSQM0WmQwi02h1GU+nYJ6lEckz/8:xbvwS4rYHHzSQ1DQKQJ2EcV
- TLSH T126163316E758F420C89F66B06CEBC1395265EE182DB2C26CF67C352B3F739E156B2502
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target $PLUGINSDIR/AccessControl.dll
- Size 24KB
- SHA256 89ae5e9ed94c71972ddb25aeb508ee6fb8c7a39e39e775182bcdba02762e6dce
- MD5 03cc5115234c4868cc8e2116ed949ca1
- SHA1 9cb86d1d2c41da77fd486a128ac43afcd6b8c129
- SHA512 57b1a63316192bd76f65168f07d1797f4d04b98b4a99d0e543ebee3ab4b65b8562ac3f83100c25a207c385956025c10c298ff68a17770bbf0e8b82c7b89d0c58
- SSDEEP 384:udGZ2ESnTqkddTm43saIvybNyb8E9VF6IYiTPxIZHMMZknCC:uMANdTHpIvy3EpYiTPxIKMC
- TLSH T145B22C624FB80BFEF9B21A303AF8547747B6B50125A0C18F5316C95A6D217876EB8337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/FindProcDLL.dll
- Size 292KB
- SHA256 acabf187f608858363ce88fcf64e78c09738860ce4a84952c114cf53fa81ade5
- MD5 5a177de1f2e0a85e3fe15e9821747a79
- SHA1 e339619f777fc21ecb731559799b7189c2a324c1
- SHA512 0e8456b5b480c18300515af33a1ca665c20da4c07fa66baa7ccde9dc83dfc9fdde7e4d0ea05a3fd030e67dc96e0619c236410ed59985de9bc95654eac2b36103
- SSDEEP 6144:A+WFR2dU22mRXAtS40ZxdjYHXQohL7cRJ5:Av2dmmRXAIDzxzotQRJ5
- TLSH T107548D117DC18432C2BB38346678E2B64DBCA8311D749A8F539C0A795F74582FB36A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/JxNsis.dll
- Size 2.6MB
- SHA256 6a3b8e3b628b49cbb27d399a6f78cb7dedeee171357df2d4343cd86a1b5b602e
- MD5 8e6ed29b3e4e96287fbaa44fa4bfee40
- SHA1 16bd961ae71e4a536d3538a6aea35613746d7bfb
- SHA512 e337564c67a1b536760122534626c0e92b6f59ee56d2a4430d6c3ebc3eb750931306f93daa242d41031eed068ddbede3c6dcfea1ddc7932c27310653073170c4
- SSDEEP 49152:UR9wPpoE4+deyU2fo3Yp8VXcnRdNQN09k298MQFP+AtD4wjGlpxaXJkw4wDR1TAd:UR9wBoE4+deyU2fo3Yp8VXcnRdNQN09v
- TLSH T1BBC5BF12FF4280B2E59F0234A1BB577F4D3EAA244738C9D397E519A99D301D1623E39E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 21KB
- SHA256 d4c3a23eff386c311129d582650abce1ca1e15adcef9482a303306fd3a958058
- MD5 5b11192faeb214d966ae26b4bd47cc9d
- SHA1 be5ef8b780d51b85aaac5932f1587e74ca05c705
- SHA512 714eb5c2352637bd218b889c3ed2c564227568e9c01f0046fd096b500923f5d805e372a2a7633d5662e584b5860aad3b546fddb967fb77057d3539b6d80d1d8a
- SSDEEP 384:I8PJlt70esj0Mt9vn6ay6mNyb8E9VF6IYiTPxIZHiW39bU:I+qesjRL6HEpYiTPxIL39bU
- TLSH T119A29E6386604CF2F9524D3430D4AA36AF79B6851FE081D3A39BC1416F943C77BF92A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/setupdll.dll
- Size 2.3MB
- SHA256 e30f2d1583462e6556fcb71112adc533f7c004262e2cecf48a6921625a6f4c10
- MD5 7e469cadf8f403fd07c0a29ec0b2a2da
- SHA1 f95ae76a7fb8cc55540be7193e5bca2f9b17ae49
- SHA512 d7ff11594a633171afe44758abe2dae229a8d88f72b1a086f28c3deb3871acf9c49bad44147ed923af00dc74c6a2595e47d1ed48bda0597666649d54201c4b6e
- SSDEEP 49152:AiY1Wf/vu0J9E7od0yMHacx967Tgp9XJ23:w1au0J9UOMPx7C
- TLSH T113B5BF1275E2C035C27E03305D18B28B56BEBEB409B4D76BBBAC151CAF74C819A577A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/uires/rtf/agreement.rtf
- Size 151KB
- SHA256 c7c26aa990d1c6468fc5dcf89909f2d08383f076c7f59c61c9ac8642d2be6bb8
- MD5 3cec216107e91c76fe64934dcccc81cc
- SHA1 75e6a4510ec6334b5fb7852c58a355c649042d05
- SHA512 5665096c0aa55c2f2712ee5fcf91a640fc33d157d42eccacf908293ed16ce551b14154316151dcb165beb56afdd780176f9f374d893d778a68b3f5ec14e7be4b
- SSDEEP 384:Q1MZCpjZ6W6TeJYQWFqhGjjNjVrtIR9CL9Ty9TAH9T2js9TwWLbVP2YQZvX57Js6:QGDzBpBOOcQkoao8yHLbbV9LKT2efv
- TLSH T153E3DE9480113789C7B3C7FAB925F0E8FD68A90AF5B814216E3F816BC46FE3DD695142
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10