Overview
overview
7Static
static
3e9b9e9b3ba...4e.exe
windows10-2004-x64
7e9b9e9b3ba...4e.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3earthpeas.com
windows10-2004-x64
earthpeas.com
windows11-ltsc_2024-x64
General
- Target e9b9e9b3ba47548c9f0937837bf16550f573c25f7405e8cfbf45519d79ccde4e.exe
- Size 360KB
- Sample260824-2kndfazxas
- SHA256 e9b9e9b3ba47548c9f0937837bf16550f573c25f7405e8cfbf45519d79ccde4e
- MD5 b0e14b749d6ea74efedde6ca496b45d0
- SHA1 a0a473dd0296e295d3802c77bbe5766ffb333b0b
- SHA512 fb26816097636a316e215f8264f9b9786d0b4a8a12efd08865cc1bb2a1c392f875c0eb3bbc7b0d4fe990f8a6522a09405c7db5d2ad53ec87d7d04d2c465d348e
- SSDEEP 6144:IMm4CCEv3liZFEDwxQRy4Cm4k2WQ5s9PxVVuVGNZJWG7JtmkfCTydOjkY3NAC:IMw3v3lisDpRfr4c6iPxVVuVG577mkfy
- TLSH T1E674126161E5D87AC9645731DC3A07FAA485FD1AC4B48A0B73C17E6939B13C2EE0EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
e9b9e9b3ba47548c9f0937837bf16550f573c25f7405e8cfbf45519d79ccde4e.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
e9b9e9b3ba47548c9f0937837bf16550f573c25f7405e8cfbf45519d79ccde4e.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
earthpeas.com
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
earthpeas.com
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target e9b9e9b3ba47548c9f0937837bf16550f573c25f7405e8cfbf45519d79ccde4e.exe
- Size 360KB
- SHA256 e9b9e9b3ba47548c9f0937837bf16550f573c25f7405e8cfbf45519d79ccde4e
- MD5 b0e14b749d6ea74efedde6ca496b45d0
- SHA1 a0a473dd0296e295d3802c77bbe5766ffb333b0b
- SHA512 fb26816097636a316e215f8264f9b9786d0b4a8a12efd08865cc1bb2a1c392f875c0eb3bbc7b0d4fe990f8a6522a09405c7db5d2ad53ec87d7d04d2c465d348e
- SSDEEP 6144:IMm4CCEv3liZFEDwxQRy4Cm4k2WQ5s9PxVVuVGNZJWG7JtmkfCTydOjkY3NAC:IMw3v3lisDpRfr4c6iPxVVuVG577mkfy
- TLSH T1E674126161E5D87AC9645731DC3A07FAA485FD1AC4B48A0B73C17E6939B13C2EE0EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 09acfc5ee34a1dfa1af3a9d34f00c3b1327b56641feebd536e13752349c08ac8
- MD5 014a3be4a7c1ccb217916dbf4f222bd1
- SHA1 9b4c41eb0e84886beb5591d8357155e27f9c68ed
- SHA512 0f3d1bf548e29a136150b699665a3f22c6ea2821701737363fa2920b51c391d735f1eae92dea8af655e7d07304bd3d06e4aff3f5a82fa22bcf5d1690013eb922
- SSDEEP 48:S46+/iTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mMofjLl:zsuPbOBtWZBV8jAWiAJCdv2CmfL
- TLSH T143C19470F3C248B9C491413368E737D36612EE746784500F9B6311AA38209E7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
- MD5 564bb0373067e1785cba7e4c24aab4bf
- SHA1 7c9416a01d821b10b2eef97b80899d24014d6fc1
- SHA512 22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472
- SSDEEP 192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
- TLSH T1F6427D1193B089F2F590593805A67F2A6FBEAC5C27E44963CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 6bf9cccd8a600f4d442efe201e8c07b49605ba35f49a4b3ab22fa2641748e156
- MD5 48f3e7860e1de2b4e63ec744a5e9582a
- SHA1 420c64d802a637c75a53efc8f748e1aede3d6dc6
- SHA512 28716ddea580eeb23d93d1ff6ea0cf79a725e13c8f8a17ec9dfacb1fe29c7981ad84c03aed05663adc52365d63d19ec2f366762d1c685e3a9d93037570c3c583
- SSDEEP 96:oFsvUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YuNqkzfS:oFsvWyNO81b8pCHFcM0PuAgkOywIFc
- TLSH T19112F992E5A450B3C5D6533A35AA2F2DCBBD5329B0926C00C7738E4D39355B66E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target earthpeas.com
- Size 79KB
- SHA256 ace9185e1eccd2ab2038e0f722ca2a234a35ae7bfb732dc8a6534ac57c37abee
- MD5 110232d85146372234b94ff18b6ca936
- SHA1 7a668c4387095ec91c3c336766db1dfb17e575a5
- SHA512 3676132117a8b69d7865d85dd93db0ca6ef96010418a787277079a5c6b3699e2f4490badfbda33460b5e50af28d98b04a2a3c51e47097743fbbeefff975a5bd0
- SSDEEP 96:tfe2zfpZMOjwZ9AyX7yww9sePY5w5Fts0UQd2TFTw:NBH2It
- TLSH T1BA835BD3B5F06CA64A6CF3C2944AF55042991517FC0CA14E28989C476DB73213A1DBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10