Overview
overview
7Static
static
3Douzy-Setu....1.exe
windows10-2004-x64
7Douzy-Setu....1.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-ltsc_2024-x64
1resources/...ion.py
windows10-2004-x64
3resources/...ion.py
windows11-ltsc_2024-x64
3resources/...t__.py
windows10-2004-x64
3resources/...t__.py
windows11-ltsc_2024-x64
3resources/...min.js
windows10-2004-x64
3resources/...min.js
windows11-ltsc_2024-x64
3resources/...min.js
windows10-2004-x64
3resources/...min.js
windows11-ltsc_2024-x64
3resources/...ar.exe
windows10-2004-x64
3resources/...ar.exe
windows11-ltsc_2024-x64
3resources/...n.json
windows10-2004-x64
3resources/...n.json
windows11-ltsc_2024-x64
3resources/...n.json
windows10-2004-x64
3resources/...n.json
windows11-ltsc_2024-x64
3snapshot_blob.bin
windows10-2004-x64
3snapshot_blob.bin
windows11-ltsc_2024-x64
3v8_context...ot.bin
windows10-2004-x64
3v8_context...ot.bin
windows11-ltsc_2024-x64
3vk_swiftshader.dll
windows10-2004-x64
1vk_swiftshader.dll
windows11-ltsc_2024-x64
1General
- Target Douzy-Setup-0.10.1.exe
- Size 200.3MB
- Sample260823-paaclsgl6v
- SHA256 7915b87f0f681a3dc2c2eaea807ab95f48f8610e6ef8e84f432b856d51ed8e06
- MD5 2e23cd7566f2da73b5f1261692099267
- SHA1 026236d104a21287e8c62d7aa1901b08ccac9375
- SHA512 c1009538dc8b27a6e787a69b010f0d038cbe439adbe0c6736ad09ab752f03dffc132f23bc276753d2a08af81a996b9f6824f034aa97c430a0101d39d4ca8ece8
- SSDEEP 6291456:ZC4St1yNYJoxZxqZV+H2r2sSA4s+kFSIba:w4St1GYmxbWr2sSAMl
- TLSH T19EA8334A631250BDE6FCD933D21C0BF9A219B158D7238FF32365F2C979236972A502E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Douzy-Setup-0.10.1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Douzy-Setup-0.10.1.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/app-64.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/_version.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/_version.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/__init__.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/__init__.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/core.min.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/core.min.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/lib.min.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/lib.min.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/douyin-dl-sidecar.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/douyin-dl-sidecar.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/sidecar-version.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
resources/sidecar/win32-x64/douyin-dl-sidecar/sidecar-version.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
resources/sidecar/win32-x64/sidecar-version.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
resources/sidecar/win32-x64/sidecar-version.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
snapshot_blob.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
snapshot_blob.bin
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
v8_context_snapshot.bin
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
v8_context_snapshot.bin
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
vk_swiftshader.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
vk_swiftshader.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Douzy-Setup-0.10.1.exe
- Size 200.3MB
- SHA256 7915b87f0f681a3dc2c2eaea807ab95f48f8610e6ef8e84f432b856d51ed8e06
- MD5 2e23cd7566f2da73b5f1261692099267
- SHA1 026236d104a21287e8c62d7aa1901b08ccac9375
- SHA512 c1009538dc8b27a6e787a69b010f0d038cbe439adbe0c6736ad09ab752f03dffc132f23bc276753d2a08af81a996b9f6824f034aa97c430a0101d39d4ca8ece8
- SSDEEP 6291456:ZC4St1yNYJoxZxqZV+H2r2sSA4s+kFSIba:w4St1GYmxbWr2sSAMl
- TLSH T19EA8334A631250BDE6FCD933D21C0BF9A219B158D7238FF32365F2C979236972A502E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app-64.7z
- Size 199.8MB
- SHA256 fe2b950398b4d47048a080645400b6df0b2e60314805974942ff625159e2e932
- MD5 37eab59e159b786516eaa10b77a80a19
- SHA1 cd397562864669d9e76d2f67d7d796469f3539ad
- SHA512 f266da8e30cf153c3860993cfb9c0d5b6a2a688dc3e314c7937f4a54611fd257d8819bebe656cb51879e1f1f91f2234c6d6d9be8ebbbff3c5fd0d7ccbfba36a7
- SSDEEP 6291456:4C4St1yNYJoxZxqZV+H2r2sSA4s+kFSIba:34St1GYmxbWr2sSAM7
- TLSH T1F5A8334B620250BDE6FCD937D11C0BF9E219B158D7238FF32365F2C969236972A502E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/_version.py
- Size 704B
- SHA256 46db65f810da76d716d50cc69cd7df09603f59cf6650a0cc3813d9a7ef8c9ec7
- MD5 16726af7fcc79d67409dd0297a60c096
- SHA1 75785361d576f0ab6c8ec7ec376077c98c9701e0
- SHA512 35cae1ace06ce33276e0a4e63833d1b1545ab61b2434c0e59cccdd6bc431cf6bf82dcb3d965d54f55836dd3f85bee32e9e19635fd400be78deeaf83b52a29c68
- TLSH T16401D809C97DEBB74026924A911F87105330D0037A423519A3BDF24D6B657EFA76CE4D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/__init__.py
- Size 509B
- SHA256 8341c613acde41befdf033f817d90b02c50735207e379427d8c510ed80997a73
- MD5 09e7885dd23c3d0f24977cd17e5dc3ae
- SHA1 a695aa1452e0c63fe628b070a98c468881368abd
- SHA512 9867a8cf2dd298f4e2e28b43bd0b45987044110ef4f0253b89f68e2695e955062c5036a6a57e9a35320dc8aa19ea1ffdc44e38382643dd4243da4a5fd6aafac8
- TLSH T1D0F0598BE1801C6272F4D6E4E44778953139F08399310034BC26C5B81FE75C5A5F15A4
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/core.min.js
- Size 6KB
- SHA256 18da6ce0758b416e7ae645084f4f8801f9f9d59d6c477c05eaa0ff94ebd8cc00
- MD5 72eb80c74322cb0f4f10f69e64ff9352
- SHA1 898cad1fed7b2ee598244a1b8bf389da4050f5b0
- SHA512 bc8888c4f309324fd2b8414e0a8b38f92c46ab6f633556d2020f7e8659d62e9cc5dc9a539bfa69769f4303dd63551883b7a3b4cc859452494600817b13c77c2b
- SSDEEP 192:Xsg1uwVAthzbq7eGSykGQoKEDB0PtYRim:XRUwVnAykGQoZDBoYRR
- TLSH T186E1B8BB3885647509E97EDB60B60015B2786792B10C8061F30D95F72B7752ACF93F2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/sidecar/win32-x64/douyin-dl-sidecar/_internal/yt_dlp_ejs/yt/solver/lib.min.js
- Size 148KB
- SHA256 c55987fe697e5b9ee18830163f7af85327e9bb5c3e674b969d38c8d205eaa577
- MD5 7fbcfdf209230f48e7a5ce656ba9bfda
- SHA1 25b1dc7ea75d732dd46a479c75409bc81c96c5bc
- SHA512 836c9e9a2550221ec2428f8ececa6370ebe5a7f6da51d99753d50945bf74e66beba7a165a515e5eac293d08c3553865312d15bf2bf3c90e8f29f842573eb0744
- SSDEEP 3072:WkaGmLTQ3EdA9ZHTZVBa0xko+x2XEErifaN2GzkUd7q9:WkasEmNV40xkpx2u0dzXdG9
- TLSH T17EE31A3821897437D697C6D330AA037462B445A4B98FA504BF1CFBEAB87149B583B71F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/sidecar/win32-x64/douyin-dl-sidecar/douyin-dl-sidecar.exe
- Size 18.0MB
- SHA256 77e372841614b75a684755e75182dce3822a8fbee3c9db743df3a719182207c3
- MD5 2be692acd8af52234b9515c9b972cfde
- SHA1 6e63dc153b47ab7cfa7750e907db014a8aa6dedd
- SHA512 0bfe216294330c1bbd6d4f2c1016cde4a1ef23c240e59191196a1fedf101ea31fc3b0debc50023787fb4182f9ea09f3b0e0124a4e2505dfb1e3e29979a6a6e8a
- SSDEEP 393216:jdxDOm+N0CNyAh0FSs1Qjn3s7LzBYFduKHa1rP:jdxDxek02ne32L21aJ
- TLSH T1E417330D53C544BBE9F506BB899EC23AE522FD01472AC69F0FA0B1483E27AD55A35F70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/sidecar/win32-x64/douyin-dl-sidecar/sidecar-version.json
- Size 28B
- SHA256 a8f922d91ac8e791a61034a3dd3e26e1953972a2defb13c5bc27b5afd88a3824
- MD5 12d4c58d6eedc67cfe40947697e14e15
- SHA1 af664015bc6019fa13325cf1188c8a0d41804d68
- SHA512 5f046f5e74235a432a8c6dd972b98eb048ba30b9746b12eba6cddce4bdbd6c5d7512590db345153cc0ed290591e272eb2283ee75fd6445ed239325eada6d2a2d
- MD5 SHA1 SHA512
Score3/10 -
- Target resources/sidecar/win32-x64/sidecar-version.json
- Size 28B
- SHA256 a8f922d91ac8e791a61034a3dd3e26e1953972a2defb13c5bc27b5afd88a3824
- MD5 12d4c58d6eedc67cfe40947697e14e15
- SHA1 af664015bc6019fa13325cf1188c8a0d41804d68
- SHA512 5f046f5e74235a432a8c6dd972b98eb048ba30b9746b12eba6cddce4bdbd6c5d7512590db345153cc0ed290591e272eb2283ee75fd6445ed239325eada6d2a2d
- MD5 SHA1 SHA512
Score3/10 -
- Target snapshot_blob.bin
- Size 299KB
- SHA256 c1da41052abe31791ae90a9dbe54442a641e1ecbb018ef35c44e7aed05b8f72e
- MD5 aedd1b80a8140b94c00db3c0b9485772
- SHA1 2dc8444e599438ed37a31ebfe7f8859af7fac631
- SHA512 3e06cb550f46285d8dc81d1f082732c07e9c9d81abe931e859262c7ba699d4eb9737581f5a5c5174e09bb0fc0561a9de46298714ced38f453f922f9536c67d0c
- SSDEEP 3072:ogusbBDoCIdRSt25iD1Z3yAcCLi9wfuwWMvDdkbMzaQ:ogus9oCM9OUYffnWYWbIF
- TLSH T107548746F646EA07C53435738CFFB5996924B8E96F164B0B3748933D7CBA2293B0214E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target v8_context_snapshot.bin
- Size 663KB
- SHA256 83a8345ea197020e07fe2cf53e74f31d0cc632ca1537f5c9c1db2fb2665ab04f
- MD5 0c259ecbb12e6f3f0e076e6200221489
- SHA1 3de53dcafdce24c151dd1812769b46acea77c90c
- SHA512 6ef39ee8b7d40c5e6c0e79f8c4e846d431a6a87711d025122e2e7f060c5754fff917771d5ede6adec3be909fb5ce0e8eb1df5e18142ecdb6339bdde8ce2c8398
- SSDEEP 6144:m/h8ML2Zu/Bg90Ws9oCM9Otxh6vtDINPbIgTtLAkW/cB2Z0JZkQXEzBO+lZ:myMSZu/Bg90BuCzIP/+2ZGZazJlZ
- TLSH T191E46F53F749EE03C66939B389FAE9517674B8C8AF06471B7798533E3A3A3252E0005D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target vk_swiftshader.dll
- Size 5.1MB
- SHA256 46afb1ed7ab1b1a679e00784b2e78cc2358cec615553699624ff77882f55787b
- MD5 8fe00ebe76542263463877f27417ec61
- SHA1 763502e57a3c4fbe5fc25ee7e9c942d94505d244
- SHA512 62b375b40eedf04d03d8465570634b56d529e9525bd6d81be94b40c7da21cccaa808be97649f9404ded9edd5ce129f9fb1d462c6a1986a25fa8a228857cda5a2
- SSDEEP 49152:YL1wrvfRIQkXfBe1IlA8gE+LGHEYXb3GNfsUd9QjqZztkJCP1pSN6WxHEmp+DnnV:81w7weOqiFIYBgTE
- TLSH T1E9363803B2858199F05ED179475BA632F232F8801B76B6DF52A41F192E77FE02B39B05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10