Overview
overview
5Static
static
5FTD3XX.dll
windows10-2004-x64
3FTD3XX.dll
windows11-ltsc_2024-x64
3HotKeyGrabber.exe
windows10-2004-x64
5HotKeyGrabber.exe
windows11-ltsc_2024-x64
5HuoShen.dll
windows10-2004-x64
3HuoShen.dll
windows11-ltsc_2024-x64
3HuoShen.exe
windows10-2004-x64
5HuoShen.exe
windows11-ltsc_2024-x64
5leechcore.dll
windows10-2004-x64
3leechcore.dll
windows11-ltsc_2024-x64
3vmm.dll
windows10-2004-x64
3vmm.dll
windows11-ltsc_2024-x64
3General
- Target 7c52d9d647456e4ae54f8e40c9811100df630b0330322f07c3e71a979357e957
- Size 7.4MB
- Sample260823-n95gcsgl6s
- SHA256 7c52d9d647456e4ae54f8e40c9811100df630b0330322f07c3e71a979357e957
- MD5 679db5672ddcb89d4ca6de4b42c9f323
- SHA1 bd9ab93fe6d8ed610b42ffb80f4526dcc0c92740
- SHA512 f8f8d568b2d6060017523893675d7a9766fa7ddc4da42e83edad2931e96ff7f7d6b993b9cb38b1c73c069bce58f169e467bc6a08ed2ea441d74123ca5be65384
- SSDEEP 196608:1Q8j2Vy8Yo6yB8NiK2cH219Xm0h23eweXyW:m8j/ijJbXJ42v
- TLSH T19B76339B5F74CB5AFD222468DDE2FF6104A314E2ED87E2F1123946272178D4DA82E743
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
FTD3XX.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
FTD3XX.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
HotKeyGrabber.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
HotKeyGrabber.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
HuoShen.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
HuoShen.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
HuoShen.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
HuoShen.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
leechcore.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
leechcore.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
vmm.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
vmm.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target FTD3XX.dll
- Size 300KB
- SHA256 7a623bd99acca657431e5517d2da94725f2b8256c0992b9c82d0e83830eddcd3
- MD5 e47a41f19e400c06843acf6b9a914175
- SHA1 23e9808b1918d3badc3192dc5a9fdb22dd85ae8a
- SHA512 ede6c88e41b3b6fceb5584c78c7dff5c9b31a5be9914daa46cfa3f0efc30353cfd90b7d6a39286c65e0197b04f4446c65065f8ada9e711c7c6396cd33b05990b
- SSDEEP 6144:OipH8t9MrKYUehwWinVSKGjYD8C9u/KfnSD2Rz2vQJw:OtPMrbUlnVSKG0DZ99PSD2Rz2b
- TLSH T1E2646C10B8848032C17738315678F5B249BD6C300AA59ACF6BD91D7A5FB45D2BB39B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target HotKeyGrabber.exe
- Size 8KB
- SHA256 bbe1a3c889fb42ce4ef1cb744e26b14791a2d2f598d4395ea9dac013254e236d
- MD5 8f66c8f7c5eafe895c8c77e122b2351f
- SHA1 cdf6878bd4322d86551a74549034d8dcb7022905
- SHA512 ad11f80bedf2ef2a5913dbf4ebf42509381ebfb47d7d886bf92d5989aa9ad8c5ca6e85951a9d5d78a89f3b919e41d89b01dc86cdb6373eff54405b605c2f4903
- SSDEEP 192:i680T3VEFHXftXjJ29U+AxNa6YL0w5kWNsWXMu:i6bCFHXftXMXAbapow5k9WXMu
- TLSH T1A6F18C078EE9C4EBD3640B7476A5C0C853B5B62523AEFF0C2618196B2E8679B5EC8470
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target HuoShen.dll
- Size 568KB
- SHA256 b352f472d66fec14cb1365be364502ea64b44ac47b3537d04fe9a774e5a58e0f
- MD5 19fcbb88db6f041f2a922efc844e883a
- SHA1 b8e673751944785a56033f5425f55830cbf3abaa
- SHA512 0aadc4f3aaca9ca2c078c9a2f749423aa01ad47cab9debc6173d72a4516c7ef8fe604375f1ee7ae958c940c2e0273cba7dfa12b518d3fd06b1bbff7011fdf873
- SSDEEP 12288:j0zrk+cX/7oVm/XbQqykidIvb41LpINdoSDF9eijEy5slD90UmMetdti:j8jcX/7oVm/XbQqykidIvb4dATF9eigV
- TLSH T1F8C43A33D1019482E02826F672B317397DB417755CB88A5BEFD0DEF57C626329B9A20E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target HuoShen.exe
- Size 3.8MB
- SHA256 c755c381b8c05d4de73e65110d3746799704e9df43c553cbd782f7e30e210f8d
- MD5 8d1dce50d2832a9d0150e787795eb28c
- SHA1 327268a2f45e9fe4cbd85323581cf2d0267479fe
- SHA512 3bbc345e2062122834d7ac701d5cb1792acdc5201a8e35ce13aed91d69c31b16d323241aa9875d6f921e1786a3efd5d66ab54e00f33566757908bee96cd03704
- SSDEEP 98304:7WxZOLMdDCXZrXEg4zxgUhiKEHyaf6jmM19w4j:7WxYwdD8FUgigUhHjmM19V
- TLSH T1D006237393A4118AD4E2C839CA37FED171F2535A8B82E8F475D6A9D325228F4F613943
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target leechcore.dll
- Size 89KB
- SHA256 7a33014cfc13662193cd84b33ff81db40bfb09f33f3afadcdb760cc414190a67
- MD5 a23643ef2c40c6d0c445ec819bd37eb6
- SHA1 5d63c8dcc69dc78272a3c5e8d4d12fa22da32f6c
- SHA512 7ba762ffede0c62ea2c9b23df11fdb63e42edfe56e32ce3322e07a5b4fb6ac27e95c57b745f5f5d8fa05dcd1eea24e77cb01d1f291732270b6139eb439be6e17
- SSDEEP 1536:uUQXQOYhYtYpYVYeYPP2txCehVNwB+BAD5SVhNF5JI3xaBl6mPnKg5ru5gKs759:JuQOYhYtYpYVYeYo7hVQ+2D5ShJI3onN
- TLSH T137937D86F69278B3C4E2007DA7BD6BAE9D3E0C7407180DE363B914F86D545D2FA3A601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vmm.dll
- Size 1.6MB
- SHA256 19f3abb8f9360dd3bf9825def46bfb972dfa3b01397d293418d9f097474cbd8e
- MD5 10f6987e9851548dabd448ca0d2fd9e0
- SHA1 d0d4be01bc835584ec41e66b8036171219382e19
- SHA512 a6fdee403bc5f7719a8f1f320041da4e1c5c4cc59dd81ec85f9f435c8700d51f60da323d794ba89eed7cca4ec2f04461b7c8ad4fd6c0e9e8e5d33411795f811e
- SSDEEP 49152:G3gZppQGd/WagT10nPYfJhb2e3I8W3idz6:G3gZppQGd/WagM2shLi56
- TLSH T1C3857D61FBC280F2DCC6017252BE2FB798795205531858D7B69C2CA85B605F3B23F75A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10