91ad1b9a01c864e366080d336aa6efe033cc5dc6b459bf33559249f2b03e2cdd | Triage™

Login
Reports

Overview

overview

3

Static

static

1

FSCapture1...01.dll

windows10-2004-x64

3

FSCapture1...01.dll

windows11-ltsc_2024-x64

3

FSCapture1...02.exe

windows10-2004-x64

1

FSCapture1...02.exe

windows11-ltsc_2024-x64

1

FSCapture1...03.exe

windows10-2004-x64

3

FSCapture1...03.exe

windows11-ltsc_2024-x64

3

FSCapture1...04.exe

windows10-2004-x64

3

FSCapture1...04.exe

windows11-ltsc_2024-x64

3

FSCapture1...05.dll

windows10-2004-x64

3

FSCapture1...05.dll

windows11-ltsc_2024-x64

3

FSCapture1...06.exe

windows10-2004-x64

3

FSCapture1...06.exe

windows11-ltsc_2024-x64

3

FSCapture1...07.exe

windows10-2004-x64

3

FSCapture1...07.exe

windows11-ltsc_2024-x64

3

FSCapture1...re.exe

windows10-2004-x64

3

FSCapture1...re.exe

windows11-ltsc_2024-x64

3

FSCapture1...lp.chm

windows10-2004-x64

1

FSCapture1...lp.chm

windows11-ltsc_2024-x64

1

FSCapture1...ir.exe

windows10-2004-x64

3

FSCapture1...ir.exe

windows11-ltsc_2024-x64

3

FSCapture1...us.exe

windows10-2004-x64

3

FSCapture1...us.exe

windows11-ltsc_2024-x64

3

FSCapture1...er.exe

windows10-2004-x64

3

FSCapture1...er.exe

windows11-ltsc_2024-x64

3

FSCapture1...uv.dll

windows10-2004-x64

3

FSCapture1...uv.dll

windows11-ltsc_2024-x64

3

FSCapture1...bp.dll

windows10-2004-x64

3

FSCapture1...bp.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
91ad1b9a01c864e366080d336aa6efe033cc5dc6b459bf33559249f2b03e2cdd
Size 13.1MB
Sample260823-fpf92ashjf
SHA256 91ad1b9a01c864e366080d336aa6efe033cc5dc6b459bf33559249f2b03e2cdd
MD5 432f2ec866c9a2ad0edf9c0ff0de1a93
SHA1 2d32b37ecd52504ccaef92f013e0b1a2f894a9d4
SHA512 1195d9d577ff049afb5ec171b19067d89fb0d241d319b3de20ddb3e215fdca6580d5c5f79ff52a2b78b0f8edde84d1e8950ab847fb9e0f2bfb1b3131390bf8d3
SSDEEP 393216:xnVxTXpxNBnqHo7Vx3fvvpskHjCtkKbHmGu+eB1nNEsFGJ4hr:VHX7f1DqvkWFutFlhr
TLSH
T168D6335C51A517F480232F283BEBDB7DBC1C311C8946E1E493ACA1E55BB5AA9CDC3827
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Static task

static1

Behavioral task

behavioral1

Sample

FSCapture113/FSCPlugin01.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

FSCapture113/FSCPlugin01.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

FSCapture113/FSCPlugin02.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

FSCapture113/FSCPlugin02.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

FSCapture113/FSCPlugin03.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

FSCapture113/FSCPlugin03.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

FSCapture113/FSCPlugin04.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

FSCapture113/FSCPlugin04.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

FSCapture113/FSCPlugin05.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

FSCapture113/FSCPlugin05.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

FSCapture113/FSCPlugin06.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

FSCapture113/FSCPlugin06.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

FSCapture113/FSCPlugin07.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

FSCapture113/FSCPlugin07.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

FSCapture113/FSCapture.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

FSCapture113/FSCapture.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Behavioral task

behavioral17

Sample

FSCapture113/FSCaptureHelp.chm

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

FSCapture113/FSCaptureHelp.chm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

FSCapture113/FSCrossHair.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

FSCapture113/FSCrossHair.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

FSCapture113/FSFocus.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

FSCapture113/FSFocus.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

FSCapture113/FSRecorder.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

FSCapture113/FSRecorder.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

FSCapture113/libsharpyuv.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

FSCapture113/libsharpyuv.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

FSCapture113/libwebp.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

FSCapture113/libwebp.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  FSCapture113/FSCPlugin01.dll
- Size 319KB
- SHA256 cf66f927d6d3ebc77d93567c25c9577803e5fb64201755d7773257c4c3ed5d2b
- MD5 f421919da3cb7c44b086210d4d797d7a
- SHA1 cdca33c63f6fae255a6f64bdca62bd8dbc7032dc
- SHA512 bb98bfdbea713ae19da38cb3cfaa4f2c54a5af2c9adc8a80eea415f45eb07005307733589fcf54f407a090e5e6c228fac3ff654f4aa71cb861265d6b41a01472
- SSDEEP 6144:Iu/M8/CrMeIS4iB7ncZzPnRGpk2WQvg1+i/X5NKP5NCs/lwaj2Qy:l/Anc1x2Wj5NKPqs92Qy
- TLSH
  T199648E2276E380B9CB8A1632652C3BB9B6FDDE4A2FD1D5C38B54F86C1A33541D139139
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  FSCapture113/FSCPlugin02.dll
- Size 3.5MB
- SHA256 3940a45fb0f3b5ea4417ad7a5548fa6782d04fbf4153ce293456419bc917f5ab
- MD5 d1ee29e053cb0ee681ca60e5edcd06d0
- SHA1 acea629fcb49cf627e7ae9bad0f309d64a584a92
- SHA512 561137b8c8b79d099a5810c7895999b8db0dbf125fde7adb65e3408c03318acbb9f53decb238354fbfa4f1a8b156458dadaeb9667e866d0ec784381b76188418
- SSDEEP 49152:ThO3Tvd0z70duSDf+8lrERgPDLSl1Wb5YHh:Mdt7rG
- TLSH
  T17A06276F62A8D36DC12EC37EC19B8B11E43370B51BB3C6E7139006759A469D48EFE261
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  FSCapture113/FSCPlugin03.dll
- Size 2.2MB
- SHA256 d6a2b32f59cd6d567232597c3f440bd338d6914da472372c50ceb73c65564434
- MD5 d8938801e05e512f7e37380db1c1c4ec
- SHA1 cc9d9debc47ed6c5a66753a98ebc889fe03de045
- SHA512 275ba078ed40fc03f4727115c687daf01bb7ba1c8a0d0c8e19d369db459a910790b67184f2587381f7bccbd605075bbf346c7023d188ec6c0bbfd94eb0eafd8b
- SSDEEP 24576:B1+Sus1HRBOcDtwCpFf4fMaJj8C7hkEcw32Ig1BJS/AcOWdg0DZMK0jwWKrxaLa:9JzVAjj8uo1nSocOsDZMo/rxn
- TLSH
  T17EB54A23B384643FC05F1A3A7637A754D9FBAA6127168C4B57F0088C8E355892E3E6D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  FSCapture113/FSCPlugin04.dll
- Size 1.6MB
- SHA256 be7fedf3abe163c3c4ac2610780bfa99d7164c61b1517d6a883fa67f33331baa
- MD5 cb21f86c66c5e8ce4f8db284a60b0261
- SHA1 1c8f025d41d72cc99fc364829c35ef4849980ab7
- SHA512 bb42fbc4e835977eac3ac4c4ff7d75d8a8205ada15cbef761fa2d6a7d021c244f3d0180f8a6110d290d30a2989c46956033df8a4a1979d5983fc09b2f9e6afb7
- SSDEEP 24576:wfjAQHIJuWVA12WaGKxekwjRJ1e/x6j+EclGQHjg8qTKoYZW0pcmm/54WEW10MZG:TKhLx1kwj5emgpvU00SWxiMUP
- TLSH
  T1E2756D31F182843FC4731B74AD1B56D49826BB902E386D5B3AF82E5CBF396417D1628B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  FSCapture113/FSCPlugin05.dll
- Size 117KB
- SHA256 3d2877a8d739f682fb5323c00d568483f8c878c6ac745de5f0d0caa7ffa3788a
- MD5 70c3f6892684641080c6ffe2f32b9bda
- SHA1 cbb401c44a17e85e54e73b0c716cd5e819ff6421
- SHA512 d1341d4e190ea4109a15a99e4119b2559c0d330df43ab2ed6605f454e9f7012fd42fa75dde9a8290c366fbf50b4d44d36548e35568bc510b974fa4cfe47f7f30
- SSDEEP 3072:yuJnXnJMBIrVDtuUFAWoULBRmBrv8qKxs:yYXfpxuUFZDBR8h
- TLSH
  T145C36C227254C032D1DA15398879BB65673BB9A29FB488CB7BB807BD1E603C15F34397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  FSCapture113/FSCPlugin06.exe
- Size 2.9MB
- SHA256 c41fa438424ecb6d8ef579bea1336212f32f68290e41ce46abcdb30cb8abb6ee
- MD5 889aab202245e64d3c025b24a02a2589
- SHA1 e642244bd404cecf15409b8e5813026dff4b1360
- SHA512 a00430eb62839b901b0361dc173c1007a4affcfb77208712e9b39ba5f2df2f8f81a3334f4558b79ea268d8ebb039b34c980101d48654b026c94f5b0765492e24
- SSDEEP 49152:zsKGl/H9pqT9/OGN/gqH+AWl6RneMVEwJgHMgJB2hnTXTJ:zW/H9pqPg4WlYnVJElqhx
- TLSH
  T130D56B25F3428437C0631B38DD1B52A96529BF202E3899877BE83D5CBF797907929387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  FSCapture113/FSCPlugin07.exe
- Size 25KB
- SHA256 fe43d2a447eacbda956728ad75b85c4743d406389c0354f3d81bbb0dfb4a7d44
- MD5 e3ef14ed122068dae0aeef89db996513
- SHA1 32ce0bee51fb8ff7e02c7917cb06d72dabdd0fcb
- SHA512 fed0bd0cfc1f5272a62ccfb6b8127b272d10d942d2dd8505ea61685b50426aa5c167117060a627f19649a672721f824018dfda1b610ebe740694eaf7445e9371
- SSDEEP 384:gGSRg3LRNHTitQa6anmoNsaaU9JGnKUDzE6/L8+IYix6wEtiyAM+o/8E9VF0Nyg0:gp2LROLqX/ATYixpFyAMxkEWC
- TLSH
  T11DC26CADA6A8E866CC3F4E7278C155251B71F7930E50C7A25F4FC6D04F7238326652E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  FSCapture113/FSCapture.exe
- Size 7.4MB
- SHA256 1a111d3ef9b3c4432c0436b76e5e8939c6dbddbee7bdf630a25f06cc0b50f972
- MD5 51dbe5e71d61d3f0a270f151e1104230
- SHA1 a223f405533eb54a356bff2a37aca406f49515f6
- SHA512 f1f94a5743dc7b00d26418200697b7002d6e423a724c23a398589712ad02e91a2883b16ab4061ff8a12b1c8f30d01b89cacc20bb0ed85984b72aad2ca294c531
- SSDEEP 196608:lzAkcpD6NIWShgFf7MCireh3IQKKgzCpm3JdmrUtKjmmqM:lzA1D6TFfUQNgOmKUtAmmqM
- TLSH
  T170767C56B252843BD0274B38DD1B83E95929BB242F34968B7AE42C5C7FB934179383C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  FSCapture113/FSCaptureHelp.chm
- Size 172KB
- SHA256 419f766cd3c22e1f6e5a506d655eb7037ff9701137251ffbd045eeef29f164a4
- MD5 3ff07c9db0b12f66b61a4b3195f8d8de
- SHA1 357e8b07a5a820e49d9ac4520a7dee2878e1574c
- SHA512 16f3c7db8b4925da767b8a775dcc6498d77833ae4d5fd20c24f4b0d063cdd28e57894566c2a18afeaa533463be4e5a6e5bfa8fea4c3ebcc52de9fdddd98bb84d
- SSDEEP 3072:hDb+gB0Ews3HNuRAEVkBwEypB15/NaTt1lVXnSvwOcrFah+VJEU0ZJTervo:hDHB0Ews3H+xvOt1l5SvwldJEUEerw
- TLSH
  T16E0412BA35C92206DC5890787ED047B1E95FDD01E9AE3793832F2F4D0EACE201D6596B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  FSCapture113/FSCrossHair.exe
- Size 643KB
- SHA256 1addda69512a0d742d35ad227bdd9d5eb7c6f370cd78864cc76c5bfe4b952abf
- MD5 ac247a14aa2e9163fe5637425ff2726a
- SHA1 ea005c886bdf4196b0da24b47d767b45884c1e6e
- SHA512 d2a5628a1c308af8ce602ac2a9a8cde4c4f259c077f60b7b157c8226b02229456546595219237d79aaa345b1c23b378b22a1514d42ae7e8eb9b80880b1276862
- SSDEEP 12288:WTzlAMnFwfF1uujrdiXIsEgwo9aaZkTcw2BLmxyOSILecVGjGEeed:WT/n1srULEg5WUBiIy
- TLSH
  T1CBE47E62E2A14837C1732538AD4F5768AC3ABE112E28B9467BF55C4C5F397607C3A393
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  FSCapture113/FSFocus.exe
- Size 648KB
- SHA256 6a42df7f1328611028566f40d48d36fd59cbc2de9042e8f8d7832d7c20a3eb73
- MD5 99a03fb8c4773ee7f14d8bf3a3eb9e55
- SHA1 445e70166938c013a095b082bc445080928a8d8c
- SHA512 0050c7ded8a9f18507b25dff26cf8089f839c7d5acb46fdbfcdb41dd56ce86fb37d8455e5bf5bcfbe655adf8e315bab81b45c73d36f0537fc8d62b35e4ecb99f
- SSDEEP 12288:EasyrVmeeTEuSjwlBWz4u/LZdSLiKYUBSixDcSDeBQhQ4G:E8VmTEw3Wz46saIPeBWQZ
- TLSH
  T1DAE47E22A2A15837C1332A7CAC4B5768AC3ABE112E24B5476BF55C4C5F397917C3A3D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  FSCapture113/FSRecorder.exe
- Size 5.7MB
- SHA256 b72bac8e783a9d320811d25468d8970f9ec3bf4e89a35ad13b17d30382036a15
- MD5 dbd19342590a353e59867d650a8c117c
- SHA1 a26c5c07b2a37fa8deaf6787f26b35bc54fc8fd4
- SHA512 2a0bdda18a2352c6524ece7711508547683bc57eb4659f27c9d7f9cd284a7692c4cd5baa9d8ffd5d11490d6d0205a83340046fc1bd60fe711025a3823c233934
- SSDEEP 98304:84h0Li9KB755fABgZyDI1DdzTpKjQFJg7aaAWEEVBDVvv+2CuzPPNA4:nki9KF4CyDCDdsjQg2aACFVvv9CgPNA4
- TLSH
  T151565A25F642C42BC0631F38D91B97E9A529BF202F34664B3AE83D5C7F797813925287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  FSCapture113/libsharpyuv.dll
- Size 104KB
- SHA256 0dd0d479546a92de887c57679a11f6b3bf86218359f1e52baff5b5b0ac40046e
- MD5 02e298266b4cae1c64288f8270c45025
- SHA1 4acae30050e0cdc29360582213138c2d647956b1
- SHA512 015516c52d3472bcfa6c2648455e882f142baf76cf7894040024afb2027d30b90f49b4c4fbfa59402d2e105bc7fbd6945bddb01808f1463cc863c61f4e65f155
- SSDEEP 1536:EZZZg5wwcuBil+UaTJwb6Y2FadNyPLxbuvtmgMbFuQh54RbbbbbbbGUvy07qx2:IDkjtqwIAg0FuQh540UvDN
- TLSH
  T1D7A3AE2174E7C973C8BF15350499EB2A1EBA651143A184FB7FF80BAE8F203C09676365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  FSCapture113/libwebp.dll
- Size 492KB
- SHA256 0e5548f665b6ce4442ee630a622607a6e212fcb4df87febf757d09a2b8377515
- MD5 0b111a5b7140cf4a85402b16d2bc91e9
- SHA1 9721698c05140f06479452866733bac853da2d97
- SHA512 166ec426bac7a79d5fd163f5c21eb8205790d7cef09a1d36840eed9a8317fb489f9b0113a6283fcdc2768c1c782551e4278133e2c3a8f70395cf34b7faf4ea3d
- SSDEEP 6144:I2jeRff0cK2+k5tkTTB77bRkBWq1dPSVf2ekIOK+epZwbLUVSCiAU4DyAOmYGab:In6Jhydy+ekIZNU0yUq
- TLSH
  T122B48D81F59360B1F89F29B846FDBA2B5528192D4318C1F723D66F21B9B33D1A3352C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

© 2018-2026

Terms | Privacy