661d0cfe2c3f08fbec8811ab15477a4e0b095e1de423c4178227d8f49bb75753 | Triage™

Login
Reports

Overview

overview

5

Static

static

5

OnlineFix.dll

windows10-2004-x64

3

OnlineFix.dll

windows11-ltsc_2024-x64

3

OnlineFix.ini

windows10-2004-x64

1

OnlineFix.ini

windows11-ltsc_2024-x64

1

OnlineFix64.dll

windows10-2004-x64

1

OnlineFix64.dll

windows11-ltsc_2024-x64

1

steam_api.dll

windows10-2004-x64

3

steam_api.dll

windows11-ltsc_2024-x64

3

steam_api.dll

windows10-2004-x64

3

steam_api.dll

windows11-ltsc_2024-x64

3

steam_api64.dll

windows10-2004-x64

1

steam_api64.dll

windows11-ltsc_2024-x64

1

steam_api64.dll

windows10-2004-x64

1

steam_api64.dll

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

Target
Project Zomboid.zip
Size 9.1MB
Sample260820-ls2m2ahq7x
SHA256 661d0cfe2c3f08fbec8811ab15477a4e0b095e1de423c4178227d8f49bb75753
MD5 2b1c24153bbb55b9a22194dd09c4b825
SHA1 d5d654e0bb5275ad8a777b6f96c4329c24dbabf7
SHA512 90607a7530e091092b52d3f10220eb9ea7e8362f2a2c37c422f97eae126ed41c678746edb6de87337e5e3bc4ce4fa11fc6f4e8f4374bcefc8ca5cad1447cd6cc
SSDEEP 196608:jXUYyuzz0hp/Yb4pFo6PoEc9FLLB3/fQlu4/i2UXoGYxABpBpWXJ4SrKMH3gMo+h:4YHz0hpgsb5gEc9FLVvfX8iNTew4drKu
TLSH
T1A5A63339B745ABD833E760453E035813D9C69C11BE6E4C4798C98B2DE1CBEB8C45AA4E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution ransomware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

OnlineFix.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

OnlineFix.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

OnlineFix.ini

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

OnlineFix.ini

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

OnlineFix64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

OnlineFix64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

steam_api.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

steam_api.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

steam_api.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

steam_api.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

steam_api64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

steam_api64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

steam_api64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

steam_api64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  OnlineFix.dll
- Size 4.5MB
- SHA256 5222b53ba33e3060244b0f9ae03c172824b91feced2ab0240f1356c822c56d43
- MD5 ffbf5e29c4f397977e1d8d26a634dba2
- SHA1 44459c8da456fc09d873ba10c70a1ab44b33ddac
- SHA512 9c1f706fc947d312d3bb377babf4a484fbe791a098d85ed603356ea7bb8c0e45637146d0abc8a02aa5219d42941778efb49818f3bf361e04b59590f99b7f71b9
- SSDEEP 98304:x0PM83VGHBa3UYF6WXYD8pP4KHqWx87KGF7LDRuXESs0k237FlCA0tnM:xED3VGHcRTYD8pP4KHqc8XlLAbsxq77s
- TLSH
  T1542623734270115AE1E5D93DD623BDE071F60B578282B476B8FEAAC525D79F8E203A03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  OnlineFix.ini
- Size 620B
- SHA256 25327eb9bb38b65c476b6fca1f93d9b8ff5c641293597027953ca476a2452407
- MD5 e46ec947e7b0bef2ae2ae4fb2c084f0b
- SHA1 f1f6bec4694a768f890f822aa3c19e209e55b228
- SHA512 da1dda48423d16b86a9b2c5bb67bd531f531079b682a612ee742fddcaf4e8f69df011e3310b8824c9bc853863df95cc9aff27f411718273380255c4a69b2b230
- TLSH
  T116F008C5D41514B0604D4755F0976CE70DD12B4B9497F4578B14AD06DA8F621247219F
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  OnlineFix64.dll
- Size 4.6MB
- SHA256 d80efa7ffc44b018e51f5528cf5b701e6c05c47108f2be98611f08591477b4ed
- MD5 05fdda04525c97630c95e5095164cde3
- SHA1 c77ee48196d6f0b59b92b2e8bd2d16b6a0a22884
- SHA512 066a7d235c42b03479c8d4f499e59379f1e2a00c3cca73898da3928af3f2bb735486262173d5ea6a1a63aa27c2c11f603602af20ae0e8650f9be69e038c7a9ab
- SSDEEP 98304:J9DmmgLnJ9WnEw9pIDF6K0msUf49i9TgNKiEyG:JMmgLnJ9H5DEbUfQQi
- TLSH
  T1E02612FDA19833A8C45F85348923ED0472F6911E9DF98AA978DBFEC07F97860D901B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  steam_api.dll
- Size 256KB
- SHA256 56bffab85ac14987a516dbdcb045732bc9d104f7868d432685c3baeca6c9daa0
- MD5 ba3a714b4efd2510bae4115b027abf93
- SHA1 40e036f958df3e5d3a76556b285f0da4cb47d29e
- SHA512 5eefb3929061abbd46334eb8d392f3dac555d35dc1d72c75d8f7f361048109f2575fa457a4ab376d5c4ea744deff61c3d76895155d71ae97a06077298d3b1b73
- SSDEEP 6144:D9j7BrSKU/mXxQ7C8cbp9huslymC2CPRtyd/:D9j7BrSKUYQWByl2CSd/
- TLSH
  T1BE44393538A049B1E5B580358AB4DE2B3FAC266B37342CFF634806B5C9671C35A3759B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  steam_api.of
- Size 256KB
- SHA256 1ac139ebad2a653adff5700347274cf9816256eb5d69ae6dc43c4cf9c8532aa7
- MD5 56d9f94d37cb8f03049a1cc3062bffaf
- SHA1 90f0f4780117bd2ae44fe051077005964eb75bce
- SHA512 f92bc75a4fc6de545a9773093c39993942f03d5091c6fa0150e0bd00fb5c1dfb6edb3afc0afc7eaf3fd311336e513eeacfbb2cac5d638ab366c384c9e831b54e
- SSDEEP 6144:D9j7BrSKU/mXxQ7C8cbp9huslymC2CPRuyd/:D9j7BrSKUYQWByl2C7d/
- TLSH
  T17444393538A049B1E5B580358AB4DE2B3FAC266B37342CFF634806B5C9671C35A3759B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  steam_api64.dll
- Size 288KB
- SHA256 e888d9f18301b02267c9d12d92d8f123eb7502892483bb44d9bf4e9bdb798d8f
- MD5 2d41e6f1b80968e17e505a6fa0084160
- SHA1 4aa6b9840beafb125397942c672dfbe2ed66d834
- SHA512 e560718e474dad2a29781f181adaa70ef2e36471a2c6cc95f8b32c81b0e9fba5d3bffd81072cc5889778509473dd9e21bd5299f2b3ebc12a513dd00bac2dd9a1
- SSDEEP 3072:ujTqkh2mB9mkVi635gRaeaZqk4YJDf32uB+rJFC9R+5z65lhTbCz+hnv91vFAyNc:Gb9mZOB3Zx4YUuoaRRFAymC2CPubN
- TLSH
  T188545A7AA2710CF4D076C13A88565E0FF670744B23629EFF2A6053369E676C21E3B791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  steam_api64.of
- Size 288KB
- SHA256 4df999c0c8cb12589f0864d52be5d4c775577aeb27fee28b49b188f9ba083eea
- MD5 500475b20083ccdc64f12d238cab687a
- SHA1 b13f17561a9a0671befbebf0aae7b51bcc0072df
- SHA512 de926d38118c808cde4d3a8f6fde7b56b755ef7938b9adadf0efaac45c853f3d19f4cdd5906b02a7dcca7d2c38b8c01cbd401ce3a7f5e3f9221776f0ed49355b
- SSDEEP 3072:ujTqkh2mB9mkVi635gRaeaZqk4YJDf32uB+rJFC9R+5z65lhTbCz+hnv91vFAyNp:Gb9mZOB3Zx4YUuoaRRFAymC2CPzbN
- TLSH
  T13C545A7AA2710CF4D076C13A88565E0FF670744B23629EFF2A6053369E676C21E3B791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

discoveryexecution

© 2018-2026

Terms | Privacy