Overview
overview
8Static
static
3core-release-x64.zip
windows10-2004-x64
3core-release-x64.zip
windows11-ltsc_2024-x64
1bin/How To Setup.txt
windows10-2004-x64
1bin/How To Setup.txt
windows11-ltsc_2024-x64
1bin/lib/app_11.dat
windows10-2004-x64
3bin/lib/app_11.dat
windows11-ltsc_2024-x64
8bin/lib/app_18.data
windows10-2004-x64
3bin/lib/app_18.data
windows11-ltsc_2024-x64
8bin/lib/ar...3.sdat
windows10-2004-x64
3bin/lib/ar...3.sdat
windows11-ltsc_2024-x64
8bin/lib/ar....sdata
windows10-2004-x64
3bin/lib/ar....sdata
windows11-ltsc_2024-x64
3bin/lib/ar...13.dll
windows10-2004-x64
1bin/lib/ar...13.dll
windows11-ltsc_2024-x64
8bin/lib/ar....sdata
windows10-2004-x64
3bin/lib/ar....sdata
windows11-ltsc_2024-x64
8bin/lib/ar...49.dll
windows10-2004-x64
1bin/lib/ar...49.dll
windows11-ltsc_2024-x64
1bin/lib/ar...8.data
windows10-2004-x64
3bin/lib/ar...8.data
windows11-ltsc_2024-x64
8bin/lib/ar...60.000
windows10-2004-x64
3bin/lib/ar...60.000
windows11-ltsc_2024-x64
3bin/lib/backup_93.dlm
windows10-2004-x64
3bin/lib/backup_93.dlm
windows11-ltsc_2024-x64
8bin/lib/ba....sdata
windows10-2004-x64
3bin/lib/ba....sdata
windows11-ltsc_2024-x64
8bin/lib/bu...3.sdat
windows10-2004-x64
3bin/lib/bu...3.sdat
windows11-ltsc_2024-x64
8bin/lib/build_128.dll
windows10-2004-x64
1bin/lib/build_128.dll
windows11-ltsc_2024-x64
8bin/lib/build_55.dat
windows10-2004-x64
3bin/lib/build_55.dat
windows11-ltsc_2024-x64
3General
- Target core-release-x64.zip
- Size 135.6MB
- Sample260819-mvx83asclg
- SHA256 8c67ef26560fd1cd62932c1db6d5a7e748b3dba403f8e444f5bbeb2fcc4c5d4d
- MD5 e855c0e6b5a67fec6ce26cf12aff3a8e
- SHA1 fbf51e355e724b325198f71f65aaca1835d31624
- SHA512 43e724e42b8d30be3398684e2bde6ad7685f83583e7bb05b772a16153bdf28300267f2a2133e70890667b79bfdff1f5471dd4746ce6d61f84b288fa6dd47578d
- SSDEEP 3145728:uFVu4CeGqgencyHlfNvZqtknsyoeGjbRRcfGJFbeDf3:oYe9genfzvZqcNIbRRMGJFSf3
- TLSH T11C68339043605150A1DBBEEA657F0FC2AF7B4C91B96E90FDC5AB5C62BC904ADC4F810B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
core-release-x64.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
core-release-x64.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
bin/How To Setup.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
bin/How To Setup.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
bin/lib/app_11.dat
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
bin/lib/app_11.dat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
bin/lib/app_18.data
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
bin/lib/app_18.data
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
bin/lib/archive_123.sdat
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
bin/lib/archive_123.sdat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
bin/lib/archive_125.sdata
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
bin/lib/archive_125.sdata
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
bin/lib/archive_13.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
bin/lib/archive_13.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
bin/lib/archive_14.sdata
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
bin/lib/archive_14.sdata
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
bin/lib/archive_49.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
bin/lib/archive_49.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
bin/lib/archive_58.data
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
bin/lib/archive_58.data
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
bin/lib/archive_60.000
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
bin/lib/archive_60.000
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
bin/lib/backup_93.dlm
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
bin/lib/backup_93.dlm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
bin/lib/base_126.sdata
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
bin/lib/base_126.sdata
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
bin/lib/build_103.sdat
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
bin/lib/build_103.sdat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
bin/lib/build_128.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
bin/lib/build_128.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
bin/lib/build_55.dat
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
bin/lib/build_55.dat
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target core-release-x64.zip
- Size 135.6MB
- SHA256 8c67ef26560fd1cd62932c1db6d5a7e748b3dba403f8e444f5bbeb2fcc4c5d4d
- MD5 e855c0e6b5a67fec6ce26cf12aff3a8e
- SHA1 fbf51e355e724b325198f71f65aaca1835d31624
- SHA512 43e724e42b8d30be3398684e2bde6ad7685f83583e7bb05b772a16153bdf28300267f2a2133e70890667b79bfdff1f5471dd4746ce6d61f84b288fa6dd47578d
- SSDEEP 3145728:uFVu4CeGqgencyHlfNvZqtknsyoeGjbRRcfGJFbeDf3:oYe9genfzvZqcNIbRRMGJFSf3
- TLSH T11C68339043605150A1DBBEEA657F0FC2AF7B4C91B96E90FDC5AB5C62BC904ADC4F810B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/How To Setup.txt
- Size 485B
- SHA256 289d7fd63b98894a9789a148a094b6205c579680ff5b2699cb4937661d330cef
- MD5 7d1dac169b9cd7895ada983ebbf8a8d0
- SHA1 7a9f69957baa09413b887179589689ba7a7509c8
- SHA512 ce66fb767cb6f451d77e06d49b5277267e21560bec7aeee18becfed9a69fcd9f2af9e9f5d0491e6d4570fcbfeff8991037ffc1d935dd19be392d115c5ab79d45
- TLSH T1CEF09ED5285E916B1AE202CA5E1AF7AFE16AE067800104A525BFE500B11F856E3C51CF
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target bin/lib/app_11.dat
- Size 661KB
- SHA256 12cd09f8df7cc82f28435f765763f70d5019c8a126a783be792d4e732c4107b3
- MD5 159a0e301ac9e6135be47880fb66937e
- SHA1 69ef1b7dfb1c8134127d702d15e94acfa51ac9b4
- SHA512 08449ce0084777f6fb1d91c3f5aa9fa14b0717e50268b9e821fac81171de907cd38e1faff3665e88e5dfef762f5ecb7f5db670de61611d499d6cbc0cf07c4219
- SSDEEP 12288:yqTde08b3ZJsCDZqN/Wprd57jIZymomszC56n+Mu3T/NykFkf+:/80SZdtqN+nFjDzC56NAT/Zkf+
- TLSH T175E423D5A3418037CA42555E7FBB8482C75F2E1ADACE486BCE4ED9802D9EF4B8810D9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/lib/app_18.data
- Size 661KB
- SHA256 bbc707395523657107f89e9070f4c387561aa4ee5b1b203deed26d1635ab8400
- MD5 b34555c17a9a44a19287d5c3fb70defc
- SHA1 b76aacfe04afc8ade0fc20e2446254ad27306310
- SHA512 f44b12133f49002e811c617f0859e814036d1805a149bd5825985228e24c675038915b912997114bd589009daa01c25f57bf6b1a5a02e385ad4246f467aecb50
- SSDEEP 12288:tf4vA64tGF1qR7uYt/yieFSj+aOLRFcFvBmqZvKUs0OJpNuD0lY9WToi:tZHkmRtzeFSdNvfsnJpNuA+WTp
- TLSH T1F7E4331847BCAF07F1E05F719922693877AA6E604251C330E464B5DF25ECF94723AC8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/lib/archive_123.sdat
- Size 559KB
- SHA256 b8ed9fde794d57c917a5d9e0a17dd88e0e015f565fa2b6a9413cc2b4f30d33e6
- MD5 78e94e9ab5b0419029cb07df895f3ff4
- SHA1 27785eb71c49961775afb79dea3849799f92ccef
- SHA512 ade1cbdb37f065c9c1f2b91ed0f1fb29abf30df64f4129f23586b1ab728c7f1fa9c6cf3ec9872874d6952ca5b7ec84d14ed07732c05b7899fc33ab22ef9ce440
- SSDEEP 12288:nWxo3bVd3p1x00JqevnF5YoXqAc9l8WX17f4fCjfGfdVnATh1O:nWy3jZ1G0Jqo5FqA1Wdf0Can
- TLSH T1F3C423F54F4A440618382E1CEB1E52651D26E074FDCDAACCCA594D7C3DAAFC9E8E1E12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/lib/archive_125.sdata
- Size 533KB
- SHA256 a3d284d26820e753b898524fcaa85731850c0de651e4d458a9f224c423f609f2
- MD5 35e2ec2dc29ce4a42c9dbd07b0e45484
- SHA1 57059a6f85eb423e01f4e6c0188066795589b1ba
- SHA512 5314b4f1822bac0c3a6a448682ac636e37621ebed2f1e94c6ea4590e4a0bf7eaa9ad39166ea6ac4ebfd2d5af1257425a418afba6c29fe71c038fd8781e573e66
- SSDEEP 12288:pDNOX5n4X3/WV83Yw7ZGMQMdujmjH3/xcF/84HxhCExuWG8rY+7RMx:HOX5n4X3/WqZGMxwqjH3py/84RhCExA/
- TLSH T16BC42314169944D117BA8C02B49B73411B6F4BC6E0BB1B6D939E390C5682BEF5EBD0F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/lib/archive_13.dll
- Size 825KB
- SHA256 fcf7646f364cc533941ae301cae7506b30210160cc95fc7d6f07480c7d56a01f
- MD5 62aaa0f286f765bc93f8fc8cbfa3e317
- SHA1 728f9dc6bff35aad08a795c3d9370852f54142c2
- SHA512 3f84687111d47abf0de55ae8eedba64587417ebe5dcab2f7a9ff1b5bc6304dc5e558c1cc38b39390f88df04eb67343e2247d8d5dbfdc8de7b494e452dacc70cc
- SSDEEP 24576:z+7Ovto9ergggJIvY84PWllMNAi7LdNp/ny:k2EerZ5w84PWl6VLp/y
- TLSH T1400533CE5B4E854FE6C38865BBAC390883634E4B86B67E5DE9E454787CE3910A4F41CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/lib/archive_14.sdata
- Size 605KB
- SHA256 ae1578555dfb34f3cd483a5a8bea62e6549cbbebf67ce11863a6fe5dbc3c6d93
- MD5 30b5682aae360bd720aff59a79928d1e
- SHA1 66898aeb626d69885ac9317cb4230d3dda41a4c9
- SHA512 18a315406fc14e8427a63e5de492d9b08848d4083d627aa83d89bd1658686754b4dea72f37511d0e03d6c97061284bf325712b8eeeeea39fb27043f37d5a1c11
- SSDEEP 12288:CRmOFD6c3sJtxG1S39khxSoaFrblp4fiEDHA0CtXXbwal4S:CRmjweG1S39YSoaFr5pWDutbjd
- TLSH T111D4239923DA26E23974974ABC4996CC4E720D1E8E975432E1C70B7B1CEFC0186F4DA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/lib/archive_49.dll
- Size 545KB
- SHA256 759761105d64df2218ee9c09691e3707c9162d6dfdabc2c01716607338ec489c
- MD5 24af8e97b9f1d12df6523ba036e23f97
- SHA1 1957001b6784534304ce95122ce8d96b7eb66ef1
- SHA512 f3c920d02ad52a8bc80d0d4b43f87f5daf52127cb0119f5037e1409e82fa2f586d8f1aff6cc1dece0c084bf8a9d8174de16ac09a9e686676a46847698c43dc21
- SSDEEP 12288:4KjRTQQBkEXm3ycX2gqoQ1ZSEebfBvLM4j/mop6z21:4KjXk4+lQz7uBLLsz21
- TLSH T116C423C8862C4A31DB35E563BF6634D0ACEB9461B1F153270196A02ECF4D2AB4DE54BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/lib/archive_58.data
- Size 801KB
- SHA256 a633408488fcd6041b34b7f1199c3516a71fe6e5d82b5e9add64af48f4d7e813
- MD5 6d296ad5a4eb0f0cdd88c3f7abc6e13f
- SHA1 eccfe3399a441229b6b5d3a457fbcebfcf568775
- SHA512 ea06d7001fdd6472d95bc32b01ad625e691a7543bff21a6b84b8d2dd3e6560682018c5b43c1b08f0c6856db95e0b34c095847b9dfa3a3e0c7b9d9e915374a134
- SSDEEP 24576:iywqO2dgQYmqMh5W0t5iG36wLykm3WGQL:iwO2d0mDVvUJ/A
- TLSH T14D05235C8D2FFA36F60DD58F3A0A8666F0FA0D96843D4910F4C506EB848B675241DEBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/lib/archive_60.000
- Size 589KB
- SHA256 5795f95263e6700944bb9ca0434801b5ec21c536c02672679d16f8889e6f97c0
- MD5 42d38f9cf2d77f4fd89ea818617db097
- SHA1 e8f0af6bb812fa3f7123cabaed02d9f1d156c3ce
- SHA512 0e77488d05b27721431ffc4d528a06282ba0751c853d476cadfdcab016e6d1b1ce4196aa34c580aa82e46504bf28d7f32dd8feb22f7da2365b08b842b0d528c7
- SSDEEP 12288:fGWdjh5fDsKRcog+tI9sfb8avKLmF/N4G9AmlmUPnuNSF1CS7/908:+WdjvDLE++/LoR9PXn7/L
- TLSH T18CD423FE73317100644B720C04CDAE9CD2DF892F19D2577722AAE5FAD5E24632A663E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/lib/backup_93.dlm
- Size 666KB
- SHA256 082fcfb2977b02cd7216256aea1adf09423881ce88160f65d2029650158db7b3
- MD5 ff4a875fc6a650440cbfc766cf020e7a
- SHA1 55fbf922810fcb5acba3fe1dea5d2f12704fc728
- SHA512 34aef6d1a09bda1bb95a1b67e272670c1a415d507e18a8d325d51049db3e742a7ec1c6b460d540cb799f32b68e1cc87601b41eee321d67db1fd6ddea89be51a2
- SSDEEP 12288:cgbCCvRQ3vvRNC3wqaQ8F9ZIEbTN78J0e2iRwVdWoSTtEeE6iXC8VkWE7im:7eCv6XrC3jajFXwJ/2d6ISqE79
- TLSH T1A0E433B24E2FF8B5245546BD09B5D3DFF311160E2A6D39A3289A2901DDFAFD83028717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/lib/base_126.sdata
- Size 819KB
- SHA256 ac399f23acbc4232909f92dea223283f37c887b620e9a37a9fc101224b236398
- MD5 e24accaaea110eb397e65fd16769bc19
- SHA1 3c9ef3a18c098490f08d4b7c0f16add005f28216
- SHA512 66195ce89e2ea0a04c6e5b275b81fd9476c10018f17b2920ff6deb9376a8d3be33d56fd0a079e967720335cabdf57580564b886d81afb17630682a7aac60a418
- SSDEEP 24576:Q8SDhGV7n/GTvJc8yEKt50UGLqEwnbMorY30guoezHYNNQYbEA:XSDhk/ue8yEc0lLpZ09ow4kYAA
- TLSH T1240533769729F1378033C43A43B84A896C96380DBBF5EC48F7691837297FE969181ED4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/lib/build_103.sdat
- Size 679KB
- SHA256 1ddeccc9cb69b5d4874f7883d11132692d1798f4a9217ec5a115a805ede657a1
- MD5 2986f69466b3df5cdf7d5466994b2543
- SHA1 0c73c1019fddd7acc46df113c929332d654b764f
- SHA512 5ba7d9c24738a53a4d1e231dc34bb358df9cbdfd64fe29fe1fe603b40e09c844220b5c8e353c5d9eb66da507b5bd2daf88365b923c6586cbdcd22605ef1ca948
- SSDEEP 12288:BTTIx/bQEhW6+VWVPU02oYu/ide/ubnGbXuIm/VYUVSKF9AiCwJCr0KytQp/Z3GX:1TDdEV5oPDQXuIU/fAiCoCI9M/Z3GX3X
- TLSH T13DE42332EB84361E57F4D03B9F617B5DBCBE6AB6394881420CF19250D71A871E09FB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/lib/build_128.dll
- Size 820KB
- SHA256 ed9dd863bae1f3afa3d962c841c259cd24b39f5067a026b8308dbea3b21f23cd
- MD5 84fb4a3b41f7d58a99228c6bd5770877
- SHA1 6f93a84483a0ae75a1462daa97da3f8bd81a36ab
- SHA512 a5270cfeba3ead787b87a67e3d5413523d93dedeadaadb289dcdca4ec4c0f4983c7f46fa2bde5cd2b4095c5d731eb873ee0fa44313c10c97cdee39014fe4b307
- SSDEEP 24576:fQtjpf+atRFbCykIXRYX5xpMK9epR6vxKTjv:Itjr/kgYwR0wH
- TLSH T1E005337D6887BDCD86D64D7507E995374036468380EBB0D14FF072B99F888AC8A92E6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target bin/lib/build_55.dat
- Size 761KB
- SHA256 72175f2be974b861eda133f835819ee947d753c05205881f2512dea52d1957a5
- MD5 104bd7562441ec853651289fe1cc8bc8
- SHA1 4ad0ac410d426346ea171598e1c1d10355e4bb70
- SHA512 aa488b3d8255c25a51878839a85cc8c95145f2cf48f6a80c50815cc0abc701674455b09448e4c167ca1087985eda9ea1023f6d7a4a1bfb6e854a6d14a6df9292
- SSDEEP 12288:uW2nbxcZLq4FAU5LOe/8VD7MXQ6DfBJIEBIcYfBzQOkNeYugA4Km+bOVypCjZZzM:uVbxcZ24FZ5L3/SMXQOfBJIEdYfBzJki
- TLSH T1EAF433E042EA39D269FF3EE5793FE02A59DDEF08383F50125856877727424CE2A854B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10