Overview
overview
8Static
static
3AngleSharp.dll
windows10-2004-x64
1AngleSharp.dll
windows11-ltsc_2024-x64
1AsyncImage...ia.dll
windows10-2004-x64
1AsyncImage...ia.dll
windows11-ltsc_2024-x64
1AtkSharp.dll
windows10-2004-x64
1AtkSharp.dll
windows11-ltsc_2024-x64
8Avalonia.Base.dll
windows10-2004-x64
1Avalonia.Base.dll
windows11-ltsc_2024-x64
8Avalonia.C...id.dll
windows10-2004-x64
1Avalonia.C...id.dll
windows11-ltsc_2024-x64
1Avalonia.Controls.dll
windows10-2004-x64
1Avalonia.Controls.dll
windows11-ltsc_2024-x64
1Avalonia.D...rt.dll
windows10-2004-x64
1Avalonia.D...rt.dll
windows11-ltsc_2024-x64
1Avalonia.Desktop.dll
windows10-2004-x64
1Avalonia.Desktop.dll
windows11-ltsc_2024-x64
8Avalonia.Dialogs.dll
windows10-2004-x64
1Avalonia.Dialogs.dll
windows11-ltsc_2024-x64
8Avalonia.F...op.dll
windows10-2004-x64
1Avalonia.F...op.dll
windows11-ltsc_2024-x64
8Avalonia.M...ml.dll
windows10-2004-x64
1Avalonia.M...ml.dll
windows11-ltsc_2024-x64
1Avalonia.Markup.dll
windows10-2004-x64
1Avalonia.Markup.dll
windows11-ltsc_2024-x64
1Avalonia.Metal.dll
windows10-2004-x64
1Avalonia.Metal.dll
windows11-ltsc_2024-x64
8Avalonia.MicroCom.dll
windows10-2004-x64
1Avalonia.MicroCom.dll
windows11-ltsc_2024-x64
8Avalonia.Native.dll
windows10-2004-x64
1Avalonia.Native.dll
windows11-ltsc_2024-x64
8Avalonia.OpenGL.dll
windows10-2004-x64
1Avalonia.OpenGL.dll
windows11-ltsc_2024-x64
8General
- Target YoutubeDownloader.win-x64.zip
- Size 51.9MB
- Sample260820-ysngmafe79
- SHA256 9e328b306e42d41544c0adf0fb908d987e8d8f28a980ead214e201c0957e4033
- MD5 f56eb87abb9912334f1cfa2cc069f037
- SHA1 d6ac7b03f007cdd90079eb203c943725eb0d2dd5
- SHA512 9f0027568c7bdcd1f8967c3966c8b87631fa786a7059e00756d03ab81f01d61b68c787b32eb58491dc2c9508d74d2a38bc5d96dfc329910f770c46cbbc0fe155
- SSDEEP 786432:FXEzM44d+KFRiLODG01NkHJPDdFg1bHlAorNjNbTyTANO2iNXEuvJscjhbFyFILq:F0ywLMG01UdmPrDENXE8/hbIiLGneSRh
- TLSH T155C733CBF3BC13BA9E9EC4B34569D356339A477B91E229072C25DA4CCD072E586A530C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AngleSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
AngleSharp.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
AsyncImageLoader.Avalonia.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
AsyncImageLoader.Avalonia.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
AtkSharp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
AtkSharp.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Avalonia.Base.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Avalonia.Base.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Avalonia.Controls.DataGrid.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Avalonia.Controls.DataGrid.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Avalonia.Controls.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Avalonia.Controls.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Avalonia.DesignerSupport.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Avalonia.DesignerSupport.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Avalonia.Desktop.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Avalonia.Desktop.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Avalonia.Dialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Avalonia.Dialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Avalonia.FreeDesktop.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Avalonia.FreeDesktop.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Avalonia.Markup.Xaml.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Avalonia.Markup.Xaml.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Avalonia.Markup.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Avalonia.Markup.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
Avalonia.Metal.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Avalonia.Metal.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Avalonia.MicroCom.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Avalonia.MicroCom.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Avalonia.Native.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Avalonia.Native.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Avalonia.OpenGL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Avalonia.OpenGL.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target AngleSharp.dll
- Size 942KB
- SHA256 ffd86f090b2dec5699a5d2ead65e821dcf9579541c97e787633374e15ea213a9
- MD5 0b6f2b04e31a2d0a29db680f9c401ab3
- SHA1 2e2a7b5b578c6e864e54a5e098bee532905016ae
- SHA512 4c2066086720430bfdb504954bd6c8d63dded3d4153e7884c0ce81ff4b323e3115008bff3ce397e93dac7911d5235416256ca29eb828129621eb23c3ec74c2e2
- SSDEEP 12288:HM5nYx7hzP7YnjXg5lJSzR0DDDDDALiMwd4vc/yDlimJfgc:Hll9JS1LnQ4dlim9
- TLSH T107255D1233B9A136D06F0A3DA471E244D978D9D76986EB8F2508E6B23CF37458C51AF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target AsyncImageLoader.Avalonia.dll
- Size 42KB
- SHA256 69a11d9ca38a56b7f9cedb859da09be44a2fd60832c113aac01fcc9b5949d0a9
- MD5 a83e33c701ab6f9126a2fc8bdcfa664a
- SHA1 6a882428b1a44a7016d6d9a7a28f2b060b1d3c90
- SHA512 94cf5402120d1d9f3cc97255d51ec977b5cb9a3f782fe865443d48003ff107458e455872af5a2dc61b67851607d81350a7a995cf8694608321c98259441407ab
- SSDEEP 768:OXz4Ao1Hyn2GjvcJBQc4hVS+7ZvaZi7r7k44KDhDYR8pmZFYRAZ5Nus9yx1bmhuv:OD9wuvpnS+7ZGi7r7k47hDqP62zNSx1D
- TLSH T16E13075693BDC226DBEF5FBCB9651A154371E56BA832E74E0D8C20F808C375488817BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target AtkSharp.dll
- Size 299KB
- SHA256 b6786684ccb865d668320d6d81acdd4d065f3eec3a5775fad81018fc2e1ecb79
- MD5 3642f18b8cab54ed1b5747db5bef1fed
- SHA1 f5a2f068011be27af319f3204ce3433168e444be
- SHA512 930d8bfc0a43668e83b40b5c4818ec237f229dcb8799a0ce333f6614ba1bddbd6fbcb5516868c587408e8c7e0fc961f02b7148f3888006e2bd00c79d24cefe11
- SSDEEP 3072:lWFGhis9szSoXak2a0lvFNHZ4DVtzzP57u7jVz9zWq+EXOU9a4QD3Qbr:OnsWjsxNHebzzP57uVz9zWBq/a4Hb
- TLSH T1A664A60697F04ED2E4EF4334602216841E70F99BF9A3E76B15CEB0F91F85B9049D67A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Avalonia.Base.dll
- Size 2.0MB
- SHA256 ee267f25db7daeeda7bd1fcca3fd283a865e33614f096ada744339b870e9dda0
- MD5 dda3d451fc4f49055533db6d1d5473e0
- SHA1 4d827d90941bb84dbf3e1b9a83ee19c7683ea7e8
- SHA512 1e3dd82ac64bb5b2a67aa95a2bf74d580a1c89b95c487815702604205b64277ca4b46dee5dad30a562128583a48218266af6929b92cd7b925fab8bf889156906
- SSDEEP 24576:9d+Pj9wfDV9zc56c7UUnsRJ2PbeNX5zXu+JJvR0gTF/XHpZa+H3:GPj9EDHzc56BU/PyNBPogTdh
- TLSH T122A54B3673ED5F2BD86FCEBAA03215341375D9555362D34B2B99ABB61D433A00E803E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Avalonia.Controls.DataGrid.dll
- Size 359KB
- SHA256 1bfdd2660a7447d40f1f7116da32581282aa6443f5e306e0496c8cd6d824b239
- MD5 7435f95430f7ee784f70a8d17d494a73
- SHA1 1be9738b4894069f3ae66a24201b03e5e048786f
- SHA512 b509cb504d0359e8fbd33038787b570c0779132826237a53e5f57c8e15ce683245e8744f58797eb772db465334e975fe04c0bb9052182a6999d57e8ba41e0542
- SSDEEP 6144:0g3+eLSsj8s6VFK9c5FUurPOAcOpXgMsA3MCh5FwVW7f:jyFUurWpKM+
- TLSH T1DF745C3553EC822BE7FF8A34E0A46459CBF1A902B7D5EF8C4DA0B4EA0D873917901257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Avalonia.Controls.dll
- Size 1.0MB
- SHA256 c91948f555efc3838ae42d22376833c4699ef2828395d63192041b8da754be87
- MD5 4d583995b6c1189d0c95a6593b0d676b
- SHA1 8ea897d9956f14cb75152b6fd3967693a7650775
- SHA512 9f5a2ce2592b150f30ae9524c05516669bb230d53e7a42b17c389b410795dc29727e2c04b0fb3bef7698dce4d5e8ea3a1ee4d37fcf7cdac2b30de67d60f5dce0
- SSDEEP 12288:6/ZOklHVEAu4xdRX+r3q4HuszBga7ddyBn8YzbJ6fgQkWxodZ5HHx:+lDyHuOyBn9zIoQkWxWZ5nx
- TLSH T141356D623BA99B3BC59F9336A03013284770EA56D3F5F35BA91461F92CCF3598C412E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Avalonia.DesignerSupport.dll
- Size 205KB
- SHA256 a8fe42b4561ab7750e34ac2dac04116da3ca6f5a8639844782863a1393244116
- MD5 22fd6da4dd9c6a83ef9eb8bf69b88083
- SHA1 a29e3853c1e6d66dc7f9e8fe8aea38d4097c4a06
- SHA512 bba553ac098b76199a95b4dbcbb2a514e900e9fc93c5d4d5b8b41b0e99beb3444c08c7e3033d0e4efe98dfdaf7e6bbb201bb0fb65772371f967edea481deac15
- SSDEEP 3072:zwiS/pM2h44uvl6rmY5a7smaNmrYXRCJdqi8YlCGJ5RqHfNumwB6BUPy3obIyB9C:zmI8f5qayqHfNumq6BusyB9x
- TLSH T1CC24E04113AC4633CEEF8B3AB0AA31420732F5576EF2EB8A1BACB5D91A573510750767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Avalonia.Desktop.dll
- Size 15KB
- SHA256 76ddfa340f008d96a903235b78e8d1f2b06cba025bce686e52edeaaf028528c6
- MD5 e33874b9673f61d2fbbd7dd996cc4293
- SHA1 8b4c045ca6f2f1176c9f1a8f78d30f3276f4877a
- SHA512 39d78b8f06c4714e9bb11f5bb816a6d2c343b0e3d91c0c65717d6b485270320058ca6613754b8ac3286a42cd1f6219cfb008cf9a56be0a5d75dd3b8057e6a67d
- SSDEEP 192:Zr/2YgPvkKxC7AAgY6DMZPGlGQ9OHhTVgxKU:p2YBOYZ8xj5
- TLSH T15A6298D593145263ECE28A32B5FEF995603AB6C2ADE2CB565230734AC827B340F61F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Avalonia.Dialogs.dll
- Size 239KB
- SHA256 a5d75fceec334be26530e35021b6ccaf3407b85b8fb18b8370909262a0f076d4
- MD5 8be91213a76bfdd2e6891464427d111f
- SHA1 467ead7b2f126f39636e94e1316b512d29d77b41
- SHA512 1b7d18b7d9e3e1002b57e01a68f4d618e48188b6ad07e80db23877b6bd488eadbea219975237793ac0350fb66c513a4e40a085a022473f1ed2372aa0082bb327
- SSDEEP 3072:WpCa+XlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPt3/yzBuNOIOU7og2Fnu7AxWPQHim:WpEqXpSIE6Ey/SmWUMxFnuEYPQH
- TLSH T131343900D245AB39CAE6E6787C7CB3BE0971F419FC9AA61734C5AB7105C5A10EC58BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Avalonia.FreeDesktop.dll
- Size 196KB
- SHA256 a9b397c0e640e6e4d57922163f31766f5c290572c4923004266e868dd731ca0b
- MD5 e910a4310ea1bccefbf5172f9a0d4ce2
- SHA1 fb83633abd62d01d463bab1a62c7823ab28195be
- SHA512 199d999726470c508a60cd7b37043dcceb84101b67f2da828c8dbe57a53e4c952439da934b1c566317ce0d3e86c8df6e5dc9f63002990417c5d19d5a65e94f28
- SSDEEP 3072:DaHblJ46aj3XCgDip83RLeGGuYl8PPHytgFhsHF5GmoG3Y8:GJjA3SSi+hLfq8XSnGmo
- TLSH T1BA145C25A3E90F53E79F9BB8F694E528CB72F89698C6F74C9CCC25E510533805C0869B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Avalonia.Markup.Xaml.dll
- Size 86KB
- SHA256 594b7fe2ec4b492246c4407725e245043f16431c54b5741e10a74f900ce8ca5b
- MD5 b5ea3f8609a01c2a66f55e35e4d82e95
- SHA1 11d3af596e60f9348f674fa5ae5905c1e58f15d0
- SHA512 51f670110f0e37418c391a701a37e597c6ca4a68d3abe2fa5155efb4d9ffa4b63188ba2454560aba8e00fcc37aa9f67ec155955e53a80635d58adddfebc85a95
- SSDEEP 1536:Faa1kI247VcV8gxk/dHqVHFQkOtU2U+vu6bVmHWIKUlhmfYn9NI:F71kI247Vc8q4Ty2FxmHWtUlhqYQ
- TLSH T199835B6163588326CAEE4A35B0B8B5010337B76779F2DB6B8F94B4CD0A73B6109507B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Avalonia.Markup.dll
- Size 64KB
- SHA256 6b6e5540ebf9274587b704f6b3a1bcdae6d40e23d52eac10347b4f134a7bad04
- MD5 8185bbf3c727ad8b2247bf63ef308b97
- SHA1 877e6914baac98005717f497878ed180e0ee5532
- SHA512 98ebaeafcaf7d1cbe45f553e7d0ff7e363d869682d2bba529c8f1df4db7945e46aadea0e4ae485eda955b1e9bd6db10e57b047802bb05beca8d96120bf66bcf8
- SSDEEP 768:9YP73peJrS0QWoDPpATx5RWrts9JXqhANVqmXfA5APNYZ8K2ZMgPvJd5ijnv:9YzMJMzPpATxbSITXfASNYFrv
- TLSH T11D53296463988313EADE4736F4B872210636B5D77BF2EB974B20B5CA1817B614F40B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Avalonia.Metal.dll
- Size 15KB
- SHA256 e310388da9cd1400919a6d5d639823c1e4c3214d0c56e38d1366717c7606ed6f
- MD5 959549b56d04799ee1326f229193ba68
- SHA1 c801c0a456fe17ab805491bc4ab6efae47bc2455
- SHA512 69c8e4aedf147be602fada003771d57594b9e07f29984db64345a93c5aae7200b26ff06e6caa908ec3e4d2474f9adf57b21bec8b906fbdb4ffc818f3eadfb42c
- SSDEEP 192:CdIPQ8Gh1cet1+vz9bxhLBAgY6DMZPGlGQ1vRJa3zxPU:8RWxvDYZ8JO6
- TLSH T1E062B5D093141133ECD28E3279EEF896217BB682AEE28B556730774AC817B340F62F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Avalonia.MicroCom.dll
- Size 15KB
- SHA256 b7e91f7659b0ee746d2788fe6e0fe6b3ff006a216014ee02d5f5563b9f944a83
- MD5 40ba306bf57fd5e440d55122f10ee1db
- SHA1 661aa59f8af3812b3887c6e3a72d061891c9490d
- SHA512 c8a35edaa0fac099450d13c3b077d39135b091dc1c649b3a84c3e8f00046c4d1fa0b8f8dc1ec3f4a333e2359a8d912fd3a6be84e2f201a06bfec76c322b72210
- SSDEEP 192:TRZBT4PozkwgFAgY6DMZPGlGBFb7k4LHhMRUxFU:9kPo4wUYZ8qnjY
- TLSH T1AE62C6D593045263ECD28A3275EFF8D2657BB282FDE28B5562307346D826B340F62F15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Avalonia.Native.dll
- Size 329KB
- SHA256 025089c74e521f3803050d2f5f37882084e7eb362c120fb706d5e28dd978c5e8
- MD5 c44af1b2310ec3777bcf9bb034510e69
- SHA1 d85a9c0315e12e9a43300badd7b576884acc3423
- SHA512 e57efce61a4d318d651ef27446a3659fe8a0442d2183ec25e455741dc06fa7ebc8739cd9cac47738d6a4305795bf13c5de444aa4db09f1dd95314fda20f2f3cb
- SSDEEP 6144:1v03XKZDZbwN457dyihUm6PS2WdYDi5La1Eb8yA6lDXiasCk4x:1vF/wEETuR570Ck
- TLSH T17A642A9133ECCB67F45F523192522502DB70E987E08BEB8B4C48D6B82D86710BDE6779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Avalonia.OpenGL.dll
- Size 113KB
- SHA256 07d0e3359ebb7f0b6281a16637e25f303fcdfe10e47a6364fcf476826ab26dfe
- MD5 f2c22914c85fca1f3d195b2367f643bb
- SHA1 fdd73c72b357e4343922770e59e916daffd85ff5
- SHA512 3c37de472232b0ad78a1d0a2b62db2c4ae0eaa5c49f1cbfa49abd36756215a3845061299733d65cbd42a5b786a55dd5c19f8d17c39e3f463e4f3e718a269f790
- SSDEEP 1536:WQGH9mGIx+4e36NUyGikcBO8xCQAwpXcIhPYUdWDi74z4cgcPw0Dt/hsPls6O7ff:MAXYIGihBVhPYUdWDitcDYotX
- TLSH T18EB33A6063FA5A92FE958AB6B47835898375F4E570E3E3AF440870FD27A275083D0736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.