Overview
overview
7Static
static
3e4f64219d3...30.exe
windows10-2004-x64
7e4f64219d3...30.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3mfc140u.dll
windows10-2004-x64
1mfc140u.dll
windows11-ltsc_2024-x64
1msvcp140.dll
windows10-2004-x64
1msvcp140.dll
windows11-ltsc_2024-x64
1vcruntime140.dll
windows10-2004-x64
1vcruntime140.dll
windows11-ltsc_2024-x64
1vcruntime140_1.dll
windows10-2004-x64
1vcruntime140_1.dll
windows11-ltsc_2024-x64
1wct.exe
windows10-2004-x64
1wct.exe
windows11-ltsc_2024-x64
1General
- Target e4f64219d3c0a16db26bc88c44e04f2b9e3cf3d938c3b4489cf3c3dc7b477130
- Size 2.9MB
- Sample260823-rerhssgr7y
- SHA256 e4f64219d3c0a16db26bc88c44e04f2b9e3cf3d938c3b4489cf3c3dc7b477130
- MD5 34ad77a4b2059f2bcc68012d13358089
- SHA1 6d5822daf5f60c640026265efb0ac1f094077b87
- SHA512 f9bddab63365ff529a0a81f95b5e255872e07553c0a5b0488c4ef3898f38f4210741c0ca659d3b67efac0509954426fa3119edcf3e0aa111d6ce6b672183e86b
- SSDEEP 49152:l6gVJos2oc2zn5clp88flsk80r3neHftsU+mmTZLaMPrzfRqpAysN27JNW6cWLVY:l6gVJoplkImCe6U+frrz5q82dNW6cWZY
- TLSH T134E5330E12758D2ECAD96E754C31F732AB6A6E0A1412D34A3EF6FE7F353B9911010369
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
e4f64219d3c0a16db26bc88c44e04f2b9e3cf3d938c3b4489cf3c3dc7b477130.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
e4f64219d3c0a16db26bc88c44e04f2b9e3cf3d938c3b4489cf3c3dc7b477130.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
mfc140u.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
mfc140u.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
msvcp140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
msvcp140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
vcruntime140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
vcruntime140.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
vcruntime140_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
vcruntime140_1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
wct.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
wct.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target e4f64219d3c0a16db26bc88c44e04f2b9e3cf3d938c3b4489cf3c3dc7b477130
- Size 2.9MB
- SHA256 e4f64219d3c0a16db26bc88c44e04f2b9e3cf3d938c3b4489cf3c3dc7b477130
- MD5 34ad77a4b2059f2bcc68012d13358089
- SHA1 6d5822daf5f60c640026265efb0ac1f094077b87
- SHA512 f9bddab63365ff529a0a81f95b5e255872e07553c0a5b0488c4ef3898f38f4210741c0ca659d3b67efac0509954426fa3119edcf3e0aa111d6ce6b672183e86b
- SSDEEP 49152:l6gVJos2oc2zn5clp88flsk80r3neHftsU+mmTZLaMPrzfRqpAysN27JNW6cWLVY:l6gVJoplkImCe6U+frrz5q82dNW6cWZY
- TLSH T134E5330E12758D2ECAD96E754C31F732AB6A6E0A1412D34A3EF6FE7F353B9911010369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target mfc140u.dll
- Size 5.4MB
- SHA256 1ec2a31a1302e720c799bad2fd90cf3457c6b2a375c4b41faefee1a91d92f3e0
- MD5 84b82c149b450d3c8e0d06f09a416b5d
- SHA1 1bac9dfe4ec1e8f3e6137d0181d7c8fdc15f3eb9
- SHA512 5c86dd8a9e7a7802c1c03fecdbcc60b45b03325eca676d590ffd69f222b9c575ef0dcac77577e169f4e3378db13aef22aaa5446fa70360cb27e99bade02fe4ed
- SSDEEP 49152:4LnsrdZXUTQyJa9qgUUjlQNXkW8GCBTDgHsYogTYn3Q3pQMqSj+vTCfEs7ATWYlK:4oJUEUYSPzUQFLOAkGkzdnEVomFHKnP
- TLSH T1CD468D467AED0494D969D03ACA2B8D4BD3B2FC10136557CF0136A75EAF733D24A3A326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target msvcp140.dll
- Size 554KB
- SHA256 75872c426555ac8af55b5a7f6d4aea8831af74353b22612850a2bfc40e3b67e1
- MD5 0ca4a10be84402ce3123ebed2e2c6abb
- SHA1 9e6d9bcb827ee3a108d0b91a99490ee37a4fa1cc
- SHA512 899a4635cf6ed642a2bcd2a4415dd02dbcecfe0a0cf789d1eb4c9781bf86fcc7a44bbf41f20d3d5073f6a3935ed165e6ad3afd38824b7a7af33c7e95855eac1b
- SSDEEP 12288:d7dqZ1EqSGQEwkcz6sm7UtgZ/29z7mnuMG7NaekWdgJMKZ+h7rUh0svaQEKZm+j8:dZNg+h7rKiQEKZm+jWodEERG5
- TLSH T127C40923B74D05A0E195A3B8A1C38315D7F17C8A4312A3C792FB96AD2F573D5AB3B190
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target vcruntime140.dll
- Size 96KB
- SHA256 270ba17bf89cc2eb6e6ce536eb78e4614ab5499f653ab7e07fe9e3d33bf3b6e3
- MD5 665b6299eb326f1b4df4633e391a0063
- SHA1 b24371f2a558840851bb5fc9f0626bcd5403fed5
- SHA512 6893e608f6ddcda945d4d3472798a0e6717e3d5d66832f2e45b064a7e61ed468ea458be8d00b721c57ca287475e065083da9b2f30140891a8e1c11120556b027
- SSDEEP 1536:y7XLjIqMoYdgwdpollAvhkCrlgnpdD+7HkYrecbK556j3z:y77mylIhkoQpdK7HkYrecbK5S3
- TLSH T1AFA35A4A766442BBD06BD278C1E34A5AF771B840873093CF03B649AA5F67BE05E3D352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target vcruntime140_1.dll
- Size 37KB
- SHA256 f3754fc6ec87bcf84e05f3287b5de7bd305a30a0e1db7d478cb6353600682784
- MD5 6471b9621e390f710efb731a51323f3a
- SHA1 9ca664e22d37a5244dcffdb3e011a3edcc82d61c
- SHA512 35205e5da319d747a921fbad477d0afa06ed5b28ca98278e9ac5e751fdfb043ea94d423cb8cb5e24a0fbedffea6d85fc094c85bc6d65d0c9a27c6a2de702c662
- SSDEEP 384:5anvMCmWEyhUcSLt5a9k6KrOE5fY/ntz5txWE6Wc+Xf5CuncS74GtWrNKWG2OHR2:7Cm5yhUcwrHY/ntTxT6ovT7cp6gU9z
- TLSH T10C034A9463788082E46B85B4C4A35F2BFE38F5615760938F0BA4865D2F637D0F63E31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target wct.exe
- Size 1.8MB
- SHA256 f0cc715228c1314abef19f20cfe7d993f645ee7c9ed66333543e0c029d8698e0
- MD5 6cc278edb12f346496febd6899d60f65
- SHA1 4b75dd1f41b6320f2ab51f9517f97f1590bd165e
- SHA512 304f58e329e5f0b3451a45a48de5272668c58abce3bcc262222439166afa0936249a54ae660da270e4c4832abd7b55b22ec76aba56af2b9ef8845647c061bbb3
- SSDEEP 24576:JDJn93K3XofktwC/f+R+eVkADn3jpJhNZ2qtZYeYeD9fVYujD4ODvIb7btD7XbO:5JnpKHo6wkz9izp1BYeD9fVYuPL0Zr
- TLSH T153956D4BA6A801FCD06BC179C95A5A07D7B67805036197DF16A08EEF6F63BE10F79320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10