Overview
overview
6Static
static
3�...md.exe
windows10-2004-x64
3�...md.exe
windows11-ltsc_2024-x64
3�...sg.chm
windows10-2004-x64
1�...sg.chm
windows11-ltsc_2024-x64
1�...sg.exe
windows10-2004-x64
6�...sg.exe
windows11-ltsc_2024-x64
6�...st.dll
windows10-2004-x64
3�...st.dll
windows11-ltsc_2024-x64
3�...st.exe
windows10-2004-x64
3�...st.exe
windows11-ltsc_2024-x64
3General
- Target 1b4a1cf4591dbdedefd90210c44db8e3d6bdaf004c7965c8fd3724440d47265b
- Size 1.6MB
- Sample260817-b8fqds1xht
- SHA256 1b4a1cf4591dbdedefd90210c44db8e3d6bdaf004c7965c8fd3724440d47265b
- MD5 195e1179a917676069a604f462c9fdb0
- SHA1 c850831c6104499ce4e70510c82d1b938c5f5a91
- SHA512 ee6dab279bd7334326692920181382a09c374ebc804c4f8cca87e176340af1da6f8b98480a3b6a4ccd3d0d25b4228273728482c470f47778061967bcf67abc39
- SSDEEP 49152:oQ9isuLDZ1CvnYd68L//izQIb8G2E7wEqD8/:oKaDsY48b/idbGE7lqI/
- TLSH T18875331BDA5278B39719FC7CBED8C0C001F27B05F3563902B090E5A29EA585AE567E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/ipcmd.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/ipcmd.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/ipmsg.chm
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/ipmsg.chm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/ipmsg.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/ipmsg.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/iptoast.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/iptoast.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/uninst.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/uninst.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/ipcmd.exe
- Size 166KB
- SHA256 4e4b9a9bb7c2f95c2771bc783c7ddcd3f3ae7eaf016bfd07c0e78856fc32683e
- MD5 c9e8c293064169d93c25547dcfc65931
- SHA1 6eab674250dd86498e212e92d6d4cde007b2f0cb
- SHA512 7011550e4e2e3cdfd0e18307684906d17e00b2b7b419f85652595b6f0b7177c7c52bc13924ddc00ee4b94035c98f205cec3bb5d905aabf6565cce8ec407703da
- SSDEEP 3072:r2M5D6JllUitnoIcrSP2wCY7mCpHEhu/vrNILBHlmeu3im1DGqh/iMyy:r2oD6DHci26qOHEhs5ILiSm1n/iJy
- TLSH T111F37B207480C0B2D5A7053119F4DB7AA969F9311F7969EBB39C173E1F702D32A32967
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/ipmsg.chm
- Size 563KB
- SHA256 85ca7baabcb88a6ea9480b74c17e0b11f48fb3499d9a666ea2234b99872a9d6b
- MD5 8bb67e40ebf50553abc48cd626833580
- SHA1 80970f4fbc3eb77a9de1007ca088ac8e837e620a
- SHA512 422d0065b0a4002deb719ccad8e6e019c74fcbf79ec3a853c89901b72115bfe9494d18e5eda859e6b43f55b202b6ce240fdcae8736b903d7295ec095fdb1b442
- SSDEEP 12288:YMefj0UkyFhpm4mtVBEw1yXjFXhjvSoDVYmFRHyNICo2Rd3/9:8oDyLsfj1yJXhj6ozFRSdo2n9
- TLSH T1F9C423124F7149F6F6047F36EBDCC0406ED27615E5A32A1670C24BA92F228B5EE0E75A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/ipmsg.exe
- Size 1.7MB
- SHA256 2ffb126a9adc162cb217827b1c670f153640d51466a4a0ea75428620a5aa768e
- MD5 79aa183bc8fc43ca1a811ea8d379367c
- SHA1 30dc860982fb2497ee92ae0baafc681328f23b34
- SHA512 579a80ee3729e963b227af9d1b5640eb0a127747b1eadb454b834ed387698db3702df6b6283fb55b6f4ec3c00547cd28428977d231ead7c7e3e6ece9f1d0ba6f
- SSDEEP 24576:kqfO8o3PQxc69hJewSkBJf6bKj4hX18/SldqUAEKr5L30GoKKdeDEcUaNCGNeB:bfBIQyyJerkBJrm0R0GcwDEF3GN
- TLSH T14B857C31FD8EC076E891007095BE1BBA0839AA04773950D7A2DC7D29DD707D27B3E66A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
- Target ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/iptoast.dll
- Size 116KB
- SHA256 6e1a0d58f6130280f2dda2af2889746c154e8298c7c337ad8088de24f0375492
- MD5 83709cab50fa00fd7501084c694d9764
- SHA1 6eada9597778dea5402eb030ec2e272ddb5fe5ff
- SHA512 ffadeed77140e3536c4c3a512cc8cfaf49bd696cb0f6ced8276645d3af81c6ded50729b81709dc1063be1cb4ea955670cc548435fc1b7b651bc29dbf6b638086
- SSDEEP 1536:tRCMtLklOF6EL6Jp13jvrW6LbGDdfTXSxOmMV8Q4l+sWiyQcd7qNurVH2ClrFAsj:MitLy1mEbGDdfDypFi2NKVH2GkSyO
- TLSH T107C36B117581C472D4BE29390435AA716B7F7960DEB19EDB27A902BE5EB02C09F30F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ԭɸ봫(IP Messenger)4.51.x86ɫ/IP Messenger x86/uninst.exe
- Size 153KB
- SHA256 3b2b8fb93a5d2216eef6eb9da3e594631275b42431dcf0aecdf861e81f12480f
- MD5 416cd774ea2d669e6e21406c756cf934
- SHA1 5391ed5ce8aeef615425f66663c6621ccfd30307
- SHA512 74fa5908a5aa7f381e2a8b6286e6dd4840fdb106960b77731e4195db9b8481e7ddaa011f9d0bd76472d96639a119d0088b699abc46e3899683e4046b558135ec
- SSDEEP 3072:MpNelZpZhZvSDK4tlHDl4FMoWzZiDWzFGX3u+0li:McZpZh/OlJ4FMJli
- TLSH T183E36B21B8C0C472E5B7193249F8D6716A6CF9321F7849DB639C033E5F601D16B3AAA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10