290abae32891e1f3a089676526e91d66207d35bcfc26f88520251ee960d5638b | Triage™

Login
Reports

Overview

overview

7

Static

static

3

MEIPreload...rs.dll

windows10-2004-x64

7

MEIPreload...el.dll

windows10-2004-x64

1

MEIPreload...re.dll

windows10-2004-x64

3

MEIPreload...re.dll

windows11-ltsc_2024-x64

3

MEIPreload/Qt5Gui.dll

windows10-2004-x64

3

MEIPreload/Qt5Gui.dll

windows11-ltsc_2024-x64

3

MEIPreload...rk.dll

windows10-2004-x64

3

MEIPreload...rk.dll

windows11-ltsc_2024-x64

3

MEIPreload/Qt5Qml.dll

windows10-2004-x64

3

MEIPreload/Qt5Qml.dll

windows11-ltsc_2024-x64

3

MEIPreload...ck.dll

windows10-2004-x64

3

MEIPreload...ck.dll

windows11-ltsc_2024-x64

3

MEIPreload...re.dll

windows10-2004-x64

3

MEIPreload...re.dll

windows11-ltsc_2024-x64

3

MEIPreload...ts.dll

windows10-2004-x64

3

MEIPreload...ts.dll

windows11-ltsc_2024-x64

3

MEIPreload...57.dll

windows10-2004-x64

3

MEIPreload...57.dll

windows11-ltsc_2024-x64

3

MEIPreload...sw.dll

windows10-2004-x64

3

MEIPreload...sw.dll

windows11-ltsc_2024-x64

3

ToolsUnlock_v13.3.exe

windows10-2004-x64

1

ToolsUnlock_v13.3.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
ToolsUnlock.zip
Size 136.9MB
Sample260823-swsb4aaf55
SHA256 290abae32891e1f3a089676526e91d66207d35bcfc26f88520251ee960d5638b
MD5 f2553f76b26e8628ee46ac57e2ac312b
SHA1 9e0d638684e4b75a9474a0247e52e871d39bbb6d
SHA512 a91fc4a078a21601582dfa8aca33820c517e87bf15b6a53e5c374a6a12292bcfc424bf16a6032d0e469d4e42986b249a102b4f6e2fb7d0e483197c1bd2c6a4a3
SSDEEP 3145728:u3fKyMd0E3OCOxpHAPHWMtdjPEHOKjl91pUquLnkx8ETqK8ezo:8fnMuE3OCrWMtdjzW93uLnZXxezo
TLSH
T1F46833083834AC10A36578C623C8B615D1FB69F39F90C9352FFB78771A9A91606CD6F6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

MEIPreload/CPFilters.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

persistence privilege_escalation

Behavioral task

behavioral2

Sample

MEIPreload/CredProvDataModel.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

MEIPreload/Qt5Core.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

MEIPreload/Qt5Core.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

MEIPreload/Qt5Gui.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

MEIPreload/Qt5Gui.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

MEIPreload/Qt5Network.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

MEIPreload/Qt5Network.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

MEIPreload/Qt5Qml.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

MEIPreload/Qt5Qml.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

MEIPreload/Qt5Quick.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

MEIPreload/Qt5Quick.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

MEIPreload/Qt5WebEngineCore.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

MEIPreload/Qt5WebEngineCore.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

MEIPreload/Qt5Widgets.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

MEIPreload/Qt5Widgets.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

MEIPreload/avcodec-57.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

MEIPreload/avcodec-57.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

MEIPreload/opengl32sw.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

MEIPreload/opengl32sw.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

ToolsUnlock_v13.3.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

ToolsUnlock_v13.3.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  MEIPreload/CPFilters.dll
- Size 862KB
- SHA256 f558343f4693c151f9416b20cded176e1da4e6ebc133eb526d1dd5f5fdf596f0
- MD5 6b9d1597fd7c350d3cc9e86c76a204ce
- SHA1 a1213a4a4b875572f5ff2d4787cea50e3d350eec
- SHA512 9d83e3e9c3e90d363efa61b7803a607982fd74045f5ddb1fcdbf7af70f4901b3dc6e861fe9d88a867d4c53c220423d9ff09feae8c58bc3852ea4b38cc72efff4
- SSDEEP 24576:prij+VQYnP8DzPZSw1kPAxhN+u2L7KOy4:AjAQYnP8hD1BSJn0
- TLSH
  T1A8156B56EAEC81A4C06AD13DE6E69216FBB23C07170646FB42604B5E7F37AF45A3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1
- Target
  MEIPreload/CredProvDataModel.dll
- Size 573KB
- SHA256 5eb2abd74b415c4f0df6a20358045873c437a146427095493790a431606cc8bd
- MD5 28d0ab27c32de0fc9607e9b7d10b9f45
- SHA1 6c23366a148260f2f80838843dcac7755df9590c
- SHA512 6075602149e08f1926944dbbd53125e8e6fe570e35115c0960733a6aa88ea6583740f6277bc546e82e4bd92e3da712461c65594eba991fd69803f6136bed84a2
- SSDEEP 6144:afmrkwZ3nFLN2zAm8LaJ6zki6wn36qKmurFfO+gt+tjdKMvekjH4J4AINe02EGz:wwZnFhesgiNXn36jBfOZ+tjFbjY4c
- TLSH
  T11FC43B1A5BDC43A2D93AD13CC2A34A49F2B278011B7296CB5252421EDF7FBE55E3D360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  MEIPreload/Qt5Core.dll
- Size 5.1MB
- SHA256 4f8dc460162407cfccb1be6ef9cce45c4449de838aeffa3fd33378f01a3f9cc4
- MD5 7d180286e9c071c7bc3a6bc2ace792ac
- SHA1 f5947d69aeaacc8a378721f3750b049cc41dddef
- SHA512 9b30d5dd48e736da770e71622b79da294829621565cfc4d995ca31c8cfbbbe2d577677f4240e0ff2d995deeeb5f894018412596c141e8360dd77bf12596ce167
- SSDEEP 49152:q1AH+7g4QrRpvOK8Bbl+Gy+/LZsxRFNHlZTlJsv6tWKFdu9C/cPk4VHEYI9CV4eO:E5gje5lCjzJsv6tWKFdu9CtvDhgwcY
- TLSH
  T18746AFA17B57857AE5A2D270C8BA632F0539AD124B1385C7D39C370A4A746E23F3B707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  MEIPreload/Qt5Gui.dll
- Size 5.6MB
- SHA256 80016776efea2b2a838c3ffa4c82e5f146baff68c36073c0c34668809d1c4297
- MD5 5b0f3d5b1b29b5e650375093c7afa243
- SHA1 1920cbc98bd46a3a72bcfb45caefcfa2649a92e6
- SHA512 9db9a90ab5a1a768e079cf9b10f1da868ac7dae774e90e139ee047c9c8fb43cc5b3e01ae3724ea74efd64409eeeafbcda4f04da3e86265575a3831a4fc69cc8c
- SSDEEP 49152:FKUDGaBVW3sDAPNaiCZPcSnt8KQ6oOtA/tiG7WwjrAxLXwQ98vd+hc0WM66fL5cQ:wUKssPdOy/tZWnXThVc5tnB6NDrd
- TLSH
  T15B562BD1F18671B3C962D2BB270F623FA076A956C30483C3C6996E9558743FA0F7B906
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  MEIPreload/Qt5Network.dll
- Size 1.0MB
- SHA256 37275f3ea79d15a2792bf21f71f1df825f201cf8b33aa1f94ca93d62d76b216c
- MD5 2e3db1cd1ec59d08706438258e86ea30
- SHA1 bc20b1e40049386e6bea3f448a6852bc879a8821
- SHA512 0c0e0e02ccadc3f2b3f6c8cbf2c162fb73734b0b244c80048968a6fe268450a270a3f92b155daf6268fef246d26ad417e6cec224133fd66e6ffb3a5394b04358
- SSDEEP 24576:Aul0ktv339DOBVXaIFP698DWk7PVmr0qwjb:A8sJVWAcwnH
- TLSH
  T1BD256C92B786C0B2E84481F5455EEB67E53DB1388B0666E3E34C6FE2D151ED21E3F182
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  MEIPreload/Qt5Qml.dll
- Size 2.8MB
- SHA256 e45f26ebbc2b0499e0e90f1666fd13f1bb2bed1073e828d30b6a3a70599d4bc9
- MD5 7cda5037206a57cadd50b5f032876a8e
- SHA1 314b671b27e9602a66396ec37bdd6e70bb180d92
- SHA512 1450a79b017b4809c83c2fc4ef53df926e3a725959b6e378c5a55c853d2151a2ba70272848962931c58596fb4174601e3defedb120fd0a211d57be9d1908ee3e
- SSDEEP 49152:grHpbRcgtgEgnLDYZeQok3e3QiBMKbjcbKYI1YLTFXrwWGw6cTWptNrSdSG779LZ:ARcgOnLDYZeQokwuT5E7NrSdSG779LL9
- TLSH
  T1BBD58D83F2C304FBDC429274589E6B379932B51903659BD3E788FA8EB6316E1593F181
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  MEIPreload/Qt5Quick.dll
- Size 3.3MB
- SHA256 5f246016691ff883243ee9b3c9215eb16b859b12aefc5f4bbd2fbda3911883de
- MD5 07266e7d049ac4499f34ce281f3a50d7
- SHA1 257968090b95fae67f92f82db9cab1f7613d75e3
- SHA512 d7f9ce2fb11de178d6d38a5580c503c21fed6777067b8a8259f9fe35b44047040b705903db4ed3fbac821806cbd5ca1db0f5fcbec68cdc49282dc0e63a3257c3
- SSDEEP 24576:wLAgn4tj+U6JL9iji/2LzruK/bEdKUEAWzeauejEM5OmTi/bIi6+LPt1rt83FCbW:zT1HZEHr7OCsKbKzVZPXMC0FEUO71
- TLSH
  T172F57C54F2D381B2D881A279186ED7239539B0904F0956DBF3787F4A66322F21EFB385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  MEIPreload/Qt5WebEngineCore.dll
- Size 71.6MB
- SHA256 4d8875a7dcda59339a0c2b1e5abbfe8de883fbd2688bdfc3a143e7b2da650975
- MD5 0e17d47d512ed6d3e21e96aff87cd947
- SHA1 5a1a588c43dcd2ef70bd5ad83f26d5eade4aa736
- SHA512 c2a311b84f9caabf212e7d3234e4f28559635928f8dce172ccaa08ad3fdd93b466ddb72712a0f39656d635bbed986df64c0ded94fe94f5f22ba5fe76f6f0a91b
- SSDEEP 1572864:UACDyvsq/kEtCe0P6+6kxwV0S5RbMZDjOCKbV4d/RKi0F+praXG3vj:jforytVV0SmD/dSFGfj
- TLSH
  T144F7BE23B4008039D6A212F2EA7D7F7A56AC9E35033495E797DC1846A7B0CE3673A753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  MEIPreload/Qt5Widgets.dll
- Size 4.3MB
- SHA256 600285754e7eee7239b9d252dbed5c9d2c9c4c432751b8953dcb2e8b45e0408a
- MD5 da70580648a398ab1c5336ee9ec631ca
- SHA1 fa67a8a2d7f7930a45974dcb7a12e56914bf0a57
- SHA512 83d85df1717a5b1dd5b31f5ab33e73d1442027a719af7fdcd20d578598f436d63e7cf58287cbe34dbee8d5b0464a68dfd471d8ec6a95a3168eb8639864a7adfc
- SSDEEP 49152:ypo1FNXS+dh75PMvZZNNt+iIo5uL5Sdbtye6cEu0n:oIPqZZUfwusae6ju0n
- TLSH
  T1BD26AE82F3C240F9D889E1790D5EEB63C575F1098B0992C7A7DCAE4665683E01E7F287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  MEIPreload/avcodec-57.dll
- Size 14.0MB
- SHA256 0be1ab58ef33c40fa092cc56b1730967e77fb5cc3c54f09a0e599b0e658f389c
- MD5 06280e3e5eec9783b4af071e7375f820
- SHA1 380036754e5fc786137ceddba989711e02146d05
- SHA512 9edd0515eff29bcb27cd447d97ae7b02f68e2b06885b8671f7cfca7e90696cd7b100a8520e533f2fc9f70795889a983ddec546a5f9827e36d13e63b762909d5d
- SSDEEP 393216:VD6UzgKtqQKrULr6fB9mG0vPIPOlOn9xW1p3:heoPIPhu
- TLSH
  T17AE6BF12FA529242E9C60076D7FEAF67293C1B38131554F3A398ADF4B970AD27632707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  MEIPreload/opengl32sw.dll
- Size 15.3MB
- SHA256 25ae7577e066fa80519a8f1c314b15cdd22e4a8d3ecd2a36eccc79e40714a91d
- MD5 8b197f55264a44b7b25046f7ba5bd7d2
- SHA1 cef69e168160968e00ffffa136e1af7819e7c0ce
- SHA512 6af2b1b17a7e3460099359a6750221aacb8f9ce0e80b346dbafd2cbd8e579543b980f98e0aeb199e0781a045c9d6a7f2f11c8628f960c13550328487b7fa9154
- SSDEEP 393216:rNkEXgt/UOdyRLjqkmbBDrta60HYUnuedxO0g//NuPyEMO32ovq:rN1QtXdyRLjqNbBDrta60HYUpO0Q/NuZ
- TLSH
  T157F6AE21F641C271F8DA11F296BDBB6B667C9634131A42C3E3D81D65AE207D32B3634B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  ToolsUnlock_v13.3.exe
- Size 1.7MB
- SHA256 f3a6df05dab62ba43270bd646d18628c3e14623c108e6f60cc72caf5db0068b8
- MD5 869ff385841e9e82d95717d60317ba67
- SHA1 a76f8b1d8a61479454afaf2a480827d6f6cd556f
- SHA512 e4d20a74c8a0538f5236fecccc9937af41ddc739fae5547c8093702d06e5c36e3e5f41b5040a8d4bc6af9bfa0de377dbd4a2a534f4d904ac28186174db739e60
- SSDEEP 49152:7YH9Bv/2kmxGvkuqt9kQzopvXDQ6qrbw:WsG1qrkQUpxqr
- TLSH
  T18A85E0D3EAF1099CD293C83C19EE2207A527B605479C9B7BBB8D31503F126DB756870A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceprivilege_escalation

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

© 2018-2026

Terms | Privacy