Overview
overview
7Static
static
32a40cf453a...2b.exe
windows10-2004-x64
72a40cf453a...2b.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3deepseek-h...op.exe
windows10-2004-x64
6deepseek-h...op.exe
windows11-ltsc_2024-x64
7resources/...ent.js
windows10-2004-x64
3resources/...ent.js
windows11-ltsc_2024-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-ltsc_2024-x64
3resources/...ent.js
windows10-2004-x64
3resources/...ent.js
windows11-ltsc_2024-x64
3resources/...ent.js
windows10-2004-x64
3resources/...ent.js
windows11-ltsc_2024-x64
3resources/...git.js
windows10-2004-x64
3resources/...git.js
windows11-ltsc_2024-x64
3resources/...ttp.js
windows10-2004-x64
3resources/...ttp.js
windows11-ltsc_2024-x64
3resources/...age.js
windows10-2004-x64
3resources/...age.js
windows11-ltsc_2024-x64
3resources/...pes.js
windows10-2004-x64
3resources/...pes.js
windows11-ltsc_2024-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-ltsc_2024-x64
3General
- Target 2a40cf453a7f2e5701d6ae7d2fe8c9e44ea42cf23ef818738c838da951d0042b
- Size 4.7MB
- Sample260826-kck5nscd47
- SHA256 2a40cf453a7f2e5701d6ae7d2fe8c9e44ea42cf23ef818738c838da951d0042b
- MD5 e8a98bba330eb2bb9fad473b01eeb06c
- SHA1 6a16ff446d32ad151a47de452265ceec3c2138ee
- SHA512 6fa8e3c780084cf021ade6914f862d2ce8373bceaace916fe36ee7600dd255723bd80c58f893c7a81c203a846a6ea02d792c384fa9a13d0dfe0c887194f9671f
- SSDEEP 98304:+9wu6DxQ6P6mag7LjszkPmwQO+NKJ7UsWYm0MnMbldaISOMGeEvwu:+Inxa9ID9+WUsEASyeEIu
- TLSH T15A3633ECA664FA21EEBDFA772C7274C3F65780748110600F6342F04DEF1B99196AB196
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2a40cf453a7f2e5701d6ae7d2fe8c9e44ea42cf23ef818738c838da951d0042b.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2a40cf453a7f2e5701d6ae7d2fe8c9e44ea42cf23ef818738c838da951d0042b.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
deepseek-harness-desktop.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
deepseek-harness-desktop.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
resources/preset-plugins/dsh-tauri-ui/lib/client.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
resources/preset-plugins/dsh-tauri-ui/lib/client.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
resources/preset-plugins/dsh-tauri-ui/lib/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
resources/preset-plugins/dsh-tauri-ui/lib/index.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/client.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/client.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral21
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/client.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/client.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/host/git.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/host/git.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/host/http.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/host/http.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/host/storage.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/host/storage.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/host/types.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/host/types.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
resources/preset-plugins/dsh-tauri-worktree/lib/index.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 2a40cf453a7f2e5701d6ae7d2fe8c9e44ea42cf23ef818738c838da951d0042b
- Size 4.7MB
- SHA256 2a40cf453a7f2e5701d6ae7d2fe8c9e44ea42cf23ef818738c838da951d0042b
- MD5 e8a98bba330eb2bb9fad473b01eeb06c
- SHA1 6a16ff446d32ad151a47de452265ceec3c2138ee
- SHA512 6fa8e3c780084cf021ade6914f862d2ce8373bceaace916fe36ee7600dd255723bd80c58f893c7a81c203a846a6ea02d792c384fa9a13d0dfe0c887194f9671f
- SSDEEP 98304:+9wu6DxQ6P6mag7LjszkPmwQO+NKJ7UsWYm0MnMbldaISOMGeEvwu:+Inxa9ID9+WUsEASyeEIu
- TLSH T15A3633ECA664FA21EEBDFA772C7274C3F65780748110600F6342F04DEF1B99196AB196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
- MD5 8eabbe36e8b52e69322780d0f541fd19
- SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
- SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
- SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
- TLSH T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
- MD5 b9b71990b37e04a56cadbcbfa694f30f
- SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
- SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
- SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
- TLSH T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target deepseek-harness-desktop.exe
- Size 20.6MB
- SHA256 feb81bdbc10f54c5adec86bede025f2737f3579f4cf65642014ad2e4230a9038
- MD5 4a6edcbb770858c78f3b3a288aee7cbd
- SHA1 4e850a01ddc478c9c376bce003ad33eba1a3e0b6
- SHA512 98e7bebc7d944358a2189fac9352835b2b0d7cd1c2cbe4db2c6441ef7ea3d7ed5fc7a30b498427fda4a0980c5e29114d0b372f947256b75cbe98348e00c42e34
- SSDEEP 196608:BUUgOCZy9LYEM5CNThJP6cUQ2iu9WX3q1:zgOCZy9LYEM5CNTH6cUQRu0Xa
- TLSH T19327F7657A5B9968D09BC4B483478A620A3134DB0B39B9FF449496383F7DBF42F38319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks whether UAC is enabled
-
- Target resources/preset-plugins/dsh-tauri-ui/lib/client.js
- Size 8KB
- SHA256 d1b4c3ee4473971fe29e3cddf620df01098efce28e20f392682d3409bb9d1436
- MD5 b57a2265eaafa5d691af736fc3b40f8c
- SHA1 4ed51eb047d361a86a5e8cfab6170fbf1edad894
- SHA512 6185f3c36a35a4e6bb3b846a5bc913093a20d3dd781cf6d9e2a511262aa82a57cba10d17c1e9ed5fee85868b94f7e183e773042955c821f2148bc6a47e397aa5
- SSDEEP 192:q9Hi+zE5jlxDSZjFmiA1pULukdK2onp0hweE6EQBbnxn/xqdfdwnfu68tsU:eHjgBSZqALuk8yh3E6Em7xn/QfdwnWtF
- TLSH T16B021C94B388B43D912283F9E5BE4B6C702F04287D1945A1922C9CB512D35F96777FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/preset-plugins/dsh-tauri-ui/lib/index.js
- Size 284B
- SHA256 456e75e773874cb96379b5ef5d23779a56ede5594f2ac0da9c6d0e15acd81b42
- MD5 c2a18a6748a7399863cdd42b413908a9
- SHA1 4a7c5d7b9bdd62388044613774ff3f80cbf83b82
- SHA512 cd81bf97516bbf544e102dba2884299ccf21df5323eca96a7789dcf72f859bd858182f6ab35a92445712bf6d5056afeb6406b7397608c98a30a3ca5d5572f111
- TLSH T1C4D0EBE8023F94D3702420C8E00BB6CC2630DEA118622A34F880CEBBAEB8CF14203C03
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/preset-plugins/dsh-tauri-worktree/lib/client.js
- Size 22KB
- SHA256 63fef64d10986411d429f97a594967908993fc3f58db9ceba9256e418e169d55
- MD5 709fcb4665003db3c911a24b1003b76a
- SHA1 565620f955fc4cf7e4f1b92c3d4afcc39d2f7ae4
- SHA512 2b69795b381de7d13eb6d6dfebfa1dbec52e58900a7e72a98b9d16cc4f95c78aef7e4d3ff77498d1696fe4638acb5b4825853931f46aec714e0fedbee5c9cd5d
- SSDEEP 384:3iASjk3sqT9X31V4+krSlZ2OQzukBlJK3/q3K3rsUFGI2Z+pJEUI7lVSwIzMzcQz:31AqT9n1W+MSb2OQzuCSPqa3rhr2Z+pY
- TLSH T105A23C50F275E939F7928BDCE2FF4B1993660C14F46C05A0926CCC3926E64D6326BBD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/preset-plugins/dsh-tauri-worktree/lib/client.js.map
- Size 83KB
- SHA256 04f0370c51b88eabff560384fc00c7cf081ccb42a26ff4e2433dbf4cdb7ac0cc
- MD5 2f22aa088ffa6c5056465f16ad8801df
- SHA1 d4f0421a5d351a188164fad0053f92b2cfdea3b5
- SHA512 0d20b075721a62bd2422b78cb0f1ef93cc3deeaa3d5a5bfd1d415b08e9bc1f04f79090c9841ec7c887681528881be91b051dde943950ef4eeb682be5881ced63
- SSDEEP 1536:coRLG00wEzwv4SEzIuMD3qW12ljH9t3woUo:cLuhENL
- TLSH T14F83C7645417F93F5A4B86FBAED34161BF65B44832940510BBDC842CF392F2CB1E6AE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/preset-plugins/dsh-tauri-worktree/lib/host/git.js
- Size 1KB
- SHA256 8ea7eccf8e7e1c2383b95cc8b08aefdc48a436b167ee7c4a6bc324d35f0405be
- MD5 4147f2285619ef761a65ce7b6d3f8a51
- SHA1 546a2f1fc5549c291e91ae4a4fa8d0be06797745
- SHA512 a931c213a7104c0970fba9dbdaf9d0d6c7146974c2a8819b87f562cf40bb36bf24a90e7f811bec2344d398704bfbd990c1bd599c6c7b905dec4ba0cb35283440
- TLSH T10721C1C5ADD3F12042537496AB0B9401F27AAD42391DF9A0F20DCB90BF5141CBD57BC5
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/preset-plugins/dsh-tauri-worktree/lib/host/http.js
- Size 1KB
- SHA256 abc847b1f854ba566a9977f6254a132b402ec98f4fb2e02124c4f19bc6e2fcec
- MD5 a0e6cf89a7017842d1f5feed87d584bd
- SHA1 ddc271aa393f72d893664a16a5ae48ffbc393612
- SHA512 fe734f668f8b29efe1bf82ced7362650abe694212ee7c7531034ac5796946157f849797f9bb943883d61ecf52491aad9d30acc2cf77a8973bbc8e86aebb7c8a2
- TLSH T14C317D497CF3586285BBEA2E010B891BA53BD41762ADCE52FB4CA3705F911B089D56C8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/preset-plugins/dsh-tauri-worktree/lib/host/storage.js
- Size 2KB
- SHA256 a88157c4cdae60623dc4bd3a4e31356ec4f006283ca884df7f2f35a3652df524
- MD5 e447e6cd50b56543a5259fc30b6a4011
- SHA1 72f46e625d5ee722596d63f88b2035e6be6add10
- SHA512 f47478df57c7d627a9c3a4db116c4ebb571821aae84185b78b9e43c05f05c777147f1178b0c8891abdc63aa219294f3facfe23062a1df800be0fce4646731163
- TLSH T1E0419E5A25F7AA20DBE16A15C32B6101372CD903730CF5B4B19CCEFE6FD56288493AC9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/preset-plugins/dsh-tauri-worktree/lib/host/types.js
- Size 11B
- SHA256 8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881
- MD5 e2ebd7ddedcadeeadbf819c35985c768
- SHA1 b878c11a77128e74c3cf15c93ef2ceddf2aa0b38
- SHA512 4ee1c88f8c3f4e4cd34cb6c00339bf9d6d036ff4ade3af49e871cc8966b84c729d8b75492acc6413c9a664ac00a57958223ac13c4229da8c62ebe6a53e4f783f
- MD5 SHA1 SHA512
Score3/10 -
- Target resources/preset-plugins/dsh-tauri-worktree/lib/index.js
- Size 37KB
- SHA256 71c9cd2004836d90ae750565f06614f52547d68de9c0ff4895b057d81580ff96
- MD5 a289536a6ff89bc16e229663bea6dd63
- SHA1 909a53ad34bc6948b7d005f4b909c7432d22c8a5
- SHA512 af2bf7382e367902ba9e7112cdf16193689a03f908f24aa4a9a43cb40b292a3d8a3bbe3e7e7c95cf70e6f383644ecf1a3a12cc9296dd52b505f8051fbc7e4c01
- SSDEEP 384:k4J2P+3UtnZg5uJnjRkVd1ADrGcCdG+8WBvSJ//uKNYnuNWs41n:kWE6uJNkVd1QrSIFCs+n
- TLSH T12703B7A83C63913196F6F504C76B1111E739842376ACE8A0FADDCA142FED51881BEFE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10