1edd60ec94d9cda9eeb35bcc0f8c47f7db4da279ad96f67d4762d76e553e8373 | Triage™

Login
Reports

Overview

overview

7

Static

static

7

Verse V4.8...es.exe

windows10-2004-x64

7

Verse V4.8...es.exe

windows11-ltsc_2024-x64

7

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDIR/INetC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

resources/...dex.js

windows10-2004-x64

3

resources/...dex.js

windows11-ltsc_2024-x64

3

resources/...dex.js

windows10-2004-x64

3

resources/...dex.js

windows11-ltsc_2024-x64

3

resources/...dex.js

windows10-2004-x64

3

resources/...dex.js

windows11-ltsc_2024-x64

3

resources/...me.exe

windows10-2004-x64

1

resources/...me.exe

windows11-ltsc_2024-x64

1

resources/...pec.js

windows10-2004-x64

3

resources/...pec.js

windows11-ltsc_2024-x64

3

resources/...pes.js

windows10-2004-x64

3

resources/...pes.js

windows11-ltsc_2024-x64

3

resources/...ath.js

windows10-2004-x64

3

resources/...ath.js

windows11-ltsc_2024-x64

3

resources/...ild.js

windows10-2004-x64

3

resources/...ild.js

windows11-ltsc_2024-x64

3

resources/...ook.so

ubuntu-18.04-amd64

1

resources/...ok.dll

windows10-2004-x64

1

resources/...ok.dll

windows11-ltsc_2024-x64

1

resources/...dex.js

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Verse V4.81.zip
Size 156.4MB
Sample260823-vlflnaydjc
SHA256 1edd60ec94d9cda9eeb35bcc0f8c47f7db4da279ad96f67d4762d76e553e8373
MD5 c942daea5aac2d892bdff2ab92c29e1e
SHA1 0d9d2bc4ed2de666abd54f2c6d40032c91797d59
SHA512 56ca2009a3ae881036a2a739955acab2ad609d608fb56eaa263b5d44759f6a9afd15d20a5e5a0b7b6d7172cebc364d36514583759279d6558eb5b0594732bd7e
SSDEEP 3145728:zOQjcngXdn0/mJ1KpkApINhhtpa3+jCbQFfMJM21AZcXMRmhg3pI40X:zZ88d0/m/KpvpINhhvc9sF8MMAZ1Rv1g
TLSH
T1A3783351F86A921BD0BA6B27F7712950CEE7D4F381242D3D5D14F0BB5E8A3B081A8F64
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution linux vmprotect

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Verse V4.81/1. Verse's suprises/SUPRISE [OPEN ME]/Almost there/Mechvibes/Mechvibes.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

discovery execution

Behavioral task

behavioral2

Sample

Verse V4.81/1. Verse's suprises/SUPRISE [OPEN ME]/Almost there/Mechvibes/Mechvibes.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

13 signatures

150 seconds

discovery execution

Behavioral task

behavioral3

Sample

$PLUGINSDIR/INetC.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/INetC.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/UAC.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/UAC.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/WinShell.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/WinShell.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/darwin/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/darwin/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/linux/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/linux/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/windows/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/windows/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/windows/volume.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/windows/volume.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/spec/volume.spec.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/spec/volume.spec.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/types.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/types.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/utils/toElectronPath.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

resources/app.asar.unpacked/node_modules/easy-volume/dist/utils/toElectronPath.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

resources/app.asar.unpacked/node_modules/iohook/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

resources/app.asar.unpacked/node_modules/iohook/build.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

resources/app.asar.unpacked/node_modules/iohook/builds/electron-v87-linux-x64/build/Release/uiohook.so

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

resources/app.asar.unpacked/node_modules/iohook/builds/electron-v87-win32-x64/build/Release/uiohook.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

resources/app.asar.unpacked/node_modules/iohook/builds/electron-v87-win32-x64/build/Release/uiohook.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

resources/app.asar.unpacked/node_modules/iohook/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Verse V4.81/1. Verse's suprises/SUPRISE [OPEN ME]/Almost there/Mechvibes/Mechvibes.exe
- Size 76.7MB
- SHA256 00ddeff79c9dfe78eb915c521511f598909e35a989806166b0d8ed1ecbd2a015
- MD5 945b4e86281ac3ec22567cdc8726d1be
- SHA1 5c36b5a0be7ca98359577bd8214a9e48c131bea6
- SHA512 fcc688e24d68b461c3c79ad0bd84331003dc298b379373264a8aeb8988caa82a45bb84e83da3ad494e2d530c0bc9ccf8261ccfb141a9ab92249c4caf6c40f1f7
- SSDEEP 1572864:ssqAmP2bk+ADpHezwiDy0A+G9n2ATH2bEa1JnJYZBEg0fubALkKirQJYHozW:sTAckk7hcDNAbFTH2bEmJOZBvZbAL+rn
- TLSH
  T1DC083303FC1E9427E2B76EB7A7A29C94DE4B5C6513301E160D54F03E7E9626009EDE2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/INetC.dll
- Size 238KB
- SHA256 ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a
- MD5 38caa11a462b16538e0a3daeb2fc0eaf
- SHA1 c22a190b83f4b6dc0d6a44b98eac1a89a78de55c
- SHA512 777135e05e908ac26bfce0a9c425b57f7132c1cdb0969bbb6ef625748c868860602bacc633c61cab36d0375b94b6bcfbd8bd8c7fa781495ef7332e362f8d44d1
- SSDEEP 3072:hD2ekNFXiQraqoDDfbrH6ZgxkzStPpwGxqeujXj5Bif/Pa0L:hD2vhaqoDfb6mxk2LqHXj3if/Pa
- TLSH
  T16334BF857F68D80BE65402F87A71CFBA1669EC206C21C203E7E1BE5F3D79B56AD01381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/darwin/index.js
- Size 2KB
- SHA256 7a79418184bdd19514ef0b3a6dcc73e54a41396e8e84c25097bc0b34f941a350
- MD5 b9d3ca5982f6f206ca49889c318ac541
- SHA1 8034753164fc96c44eecf352f1ef051ed8afb4db
- SHA512 19f6ee1ab411d0ac23920bebdb95d7ccc587a1bdec80c8bb109126755d838430d2e262b83d10816bff7f6ff7e1542807d1f68a0b2a695d72984e5d15bcfd7037
- TLSH
  T10641031EDEFA30308113B0E4E69BF4EC6863650BA500C9A5796FD6D0EF22C9E91954B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/linux/index.js
- Size 3KB
- SHA256 0e1b7013013fea4407a0799a6ba6403053f2ab3aa377e85b68f2dca0c1c32bb2
- MD5 410490a4d615ac3c80d53adb4f48bb1a
- SHA1 b73329c71987cae4424c0748ef02c282d9466456
- SHA512 7c34d86a862d510dd5e1658fea3f0ec7e507abb01688a46ba05a33c1d6ad200a2705f2ed965e650b25d501f742852df485907db2e185d4b6655c8166998b7d91
- TLSH
  T1C361755DE2FA3076C353B0E4DB5BB06CA0636447E204C9B0B92FE150AF6346D9255BF8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/windows/index.js
- Size 2KB
- SHA256 c4425f498cc1dbd83b5e500936690c9b953231e9e7eaa47e4b63f32ad1fa1bb3
- MD5 a8d15168740fb7d75d38c11e6f6de4e7
- SHA1 7e517cb17fcff987d94913356cd86cc7db8b4423
- SHA512 4954eb70d0e1871587e8b9feb99894e7e510970d15fe6869e2dfea172057ecbc05417ae23f4c520a19831e5d03bc64438d024f5b3e28546e1809f44bc1c5931c
- TLSH
  T1A751652BE5F73020E303F2E0DA5B98BD21A7EC0F70488E64B56F81A0DF61949B345579
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  resources/app.asar.unpacked/node_modules/easy-volume/dist/platforms/windows/volume.exe
- Size 145KB
- SHA256 71893b9d33fc1ac90456a32c11185abf6bf2af5b804a74d0897f12d9c2e9609c
- MD5 025969ae5f2bb680352213cab8745ae1
- SHA1 2c1b20cdb411fecc33eac71c7ad14d5634a8459c
- SHA512 6d0e5b2345a7dce4bb5c4e50767cc9851c27c5af159f8a457ce296e215e5d71c13e55cd0cee6a2f5ba5001a4cfad3087af83170e9748fcdd349e1cfe0b01f9cf
- SSDEEP 1536:hFKvDdJY6CWO3F2EHpw7k4UrFNGgKtieFttDS2aeu3J+jvAV5Q9uriONnCkHN:hF4D7Y6LO3FNpwSr/KfBaeu3JfJuO5t
- TLSH
  T10AE32BC1FBC6ADD7DB45633896AB83295238FAC04B870B132D2562311F536D1BE8764B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  resources/app.asar.unpacked/node_modules/easy-volume/dist/spec/volume.spec.js
- Size 2KB
- SHA256 23476bd34fde4c81ca2dab248dc1dcff0af8cc0e10320a294b6736e95a79a61c
- MD5 4f0cdb0916ad21b8f3ca58a22b131543
- SHA1 d608b53675d4053d01e48336cae27d2c3c8b6da0
- SHA512 05c57c1bfee27e42dc462dd96a730c4f6138417cf86b715d088c1aedde1de58ff28cd3bfbebf7703c9a8dae8970bb69be16d401182448c2b715cb389dd9bee83
- TLSH
  T16551EE25A7E724784027F2C8F9AB683D2971610BA141CB587D6FD3C14F2384FD7099A8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  resources/app.asar.unpacked/node_modules/easy-volume/dist/types.js
- Size 328B
- SHA256 b8394d47eea269dd4d0a231837f79c6a7a6f827ff1372ee45afe84078cb7f898
- MD5 132009c37d7bf44626945f222cfe9eb5
- SHA1 beea6345f3948af026713850399a14df8a4fe4dc
- SHA512 785cdb7b8144f50e51084a355e42ef237eb78b8a43c2df43784a88ec3e1754c5d7a2d9468eceff1ce1bc164ecd68261931f3de73a5327daa6f0ac3c5291a7fe9
- TLSH
  T1ADE0EC5B5B3289EF5B587085B19188F698705853D11F2424B6FD76F3F4B0A6ACC10911
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  resources/app.asar.unpacked/node_modules/easy-volume/dist/utils/toElectronPath.js
- Size 865B
- SHA256 27badcb0e1bf0ac236e1b5d6e6c45e8e38a15bd2b3b856859a69bc882d2072a7
- MD5 3a140e93c2f160da08561ecc66f106c3
- SHA1 b42dc6d626688a0598db2378f8d3cf178538de9c
- SHA512 24481621f9aa0cbb793e131355bc4776181682aaba5ce7e865b1570e3bf8a438274f64c5730d02dbcf7167e4e2cf4ded5c53c60778b4ef38dfc00faa33832fd4
- TLSH
  T17111568A7EB63361556712AC2126D9E5E47461FC1103040C703DA59D8C144FB94C9DDD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  resources/app.asar.unpacked/node_modules/iohook/build.js
- Size 6KB
- SHA256 667c8af5f36f9263a34f0d3537d91a5db5ed784a3199d865727d9a20cb0a194a
- MD5 18b42357d93feebac8cd44ffa7cb1b19
- SHA1 35e6caf7535d2b55bd624b18901b1e8c3fa1b9cc
- SHA512 ba08516ca80a9faa39fc015eb07296fba27408a735bb647857a39e58076ba7ca77438a30278fdfae3f53e23185bf5e10e2a618ba156d8f939d72556609bb0869
- SSDEEP 192:WUWpu2h3Cd+Coi2BXpOqbf85AifqiKPnhaTwIFIS:7x2hXlbbfBC
- TLSH
  T153E153684AF7653502E3B39F6E6F400696B4D0232509CE28BC4C93A56F61534D6F2FAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources/app.asar.unpacked/node_modules/iohook/builds/electron-v87-linux-x64/build/Release/uiohook.so
- Size 45KB
- SHA256 68770090eb8961e322ecd898bc0ace11b682ca61ce83389a2b201ff42e13475b
- MD5 0299188e2617454e769ab30ce6a18c0a
- SHA1 453f9280032b444d2339f02f6c5a617c76074fdc
- SHA512 b583b071176a50b5e325185a505e2417877a6811b7de4e7cc62d31eb8060dc81b1861b78c359f206b9173e256fee4371a42c811563366c19dcc944cbbde4c2a6
- SSDEEP 768:w70yKC6yldVNF91tldVNF91tldVNF91tldVNF91tIg4QoAYwIg4QoAYwIg4QoAI:a5F+lsxBUql7darxa
- TLSH
  T17A230919F2A0CA7ECAD0D175CE5FD65162B0F4A8E670173F2E08D2766CC639C097EA58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  resources/app.asar.unpacked/node_modules/iohook/builds/electron-v87-win32-x64/build/Release/uiohook.dll
- Size 138KB
- SHA256 c6e5f3ad4890a8633d6c4bd5a5a6134c0c89c73d0f7d32d95e16404e084d5d88
- MD5 320b5e107f288d1417e26f89f75ccc79
- SHA1 2b0ccf7902401eab93d197422419c494debd8b5c
- SHA512 b39f44a0d7a6ff86373f3b4e5390259a6388f07fefdcb42843e9724f1330ed61bd0428210053cc327a0099bee2a1396a3ef914d62c5f7a4fef6cb3301a186aab
- SSDEEP 3072:DKP175wLUhZsSOASfq9DxNq4wp1lBVKhx1:2P1PZrSOdN
- TLSH
  T13BD37D5773A500BBD4728639C8231A06F3B6B4121B219BAF1794477A6F273D1AD3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  resources/app.asar.unpacked/node_modules/iohook/index.js
- Size 10KB
- SHA256 3b86aaca5882a0b012ac02175f967707558c79c40c7a2b8238238ae4d2280e43
- MD5 eb8b61033179bd94eeba37d7e9787732
- SHA1 71d09cec087dade89036714925d27b2d8d7132e9
- SHA512 f8653b973ed19e4daaefe51ba1b5c2b5ba3b3471c9faeb68b1d88e58a15e5f3f70688df3616933db9ff3e3f98a64a5b57b10696636d251cad97ca108dd442900
- SSDEEP 192:kMSlVBi+o1x7ad7d+2i3RwKydcC/eI6MgcX9BbtAVwPOtk8wAyzH8VOdYtIFTKjH:kxGx7rDIz9BuVwP5B9+3zt
- TLSH
  T10B32544992EBD26348ABB17E1F4A2152E237459F1516CE98BC8C0FAC3F8533407B9B65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy