95c74075432cb843c1a692e52e6d38982c8def4390f56e039f812c5bacb9d0ec

Resubmissions

28/08/2026, 21:24

260828-z889pstdkg7

28/08/2026, 20:52

260828-zn2dcssye17

28/08/2026, 19:44

260828-yf4cbaea567

Sharing

Copy URL Twitter E-mail

General

Target
wows-monitor.exe
Size 102.2MB
Sample260828-yf4cbaea56
SHA256 95c74075432cb843c1a692e52e6d38982c8def4390f56e039f812c5bacb9d0ec
MD5 cb715f3f05c69b5160103c6978b19444
SHA1 f03671e605af1dad7ac3f6eba305f2efdbafb87b
SHA512 e8f63ba5cab98009ebced90aa9a812cca0ff759803bd342b9979c69e52f915a6e1cd56582c4e014190419bf73c2c791301919dfd52a6609d5408d796f41a7d58
SSDEEP 3145728:lyZytZnw93ywE51EreDVOfpENoAHsFBNALyC7:UZ7ip51WeDVOUHs3a
TLSH
T1933833A0C084583F6C9E1D3E429E6FD577FA94BA0B25B99AC5984466F3C54CC03BAC37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  wows-monitor.exe
- Size 102.2MB
- SHA256 95c74075432cb843c1a692e52e6d38982c8def4390f56e039f812c5bacb9d0ec
- MD5 cb715f3f05c69b5160103c6978b19444
- SHA1 f03671e605af1dad7ac3f6eba305f2efdbafb87b
- SHA512 e8f63ba5cab98009ebced90aa9a812cca0ff759803bd342b9979c69e52f915a6e1cd56582c4e014190419bf73c2c791301919dfd52a6609d5408d796f41a7d58
- SSDEEP 3145728:lyZytZnw93ywE51EreDVOfpENoAHsFBNALyC7:UZ7ip51WeDVOUHs3a
- TLSH
  T1933833A0C084583F6C9E1D3E429E6FD577FA94BA0B25B99AC5984466F3C54CC03BAC37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  LICENSES.chromium.html
- Size 8.4MB
- SHA256 ee3b1ab8794c749673ce9bd2dd302f12d69f0a1a4adfe40a64247746cc311829
- MD5 e400cd908b8fb7c13985e2f5cc7a7044
- SHA1 bbafebdf5b067a7d7da130025851eaa52ec3c9d7
- SHA512 e7ca440f0e042d7fcfa99367426bf19899a2b227c6d7b6e2c25d4f1a40113250f21ebeaaf91067d8569dfbad1415d4fe3e5626d7254722f2778497fcb22e5d6e
- SSDEEP 24576:/UrV6CI675knWSgRBPyQlrUmf1C6C6y6Z6/678HqBMUpuQ:MsWKA
- TLSH
  T19F96A42F7B48037706C64262AB8BA5CAF21F903F3B561654344CD1681F6BA2583FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  chrome_100_percent.pak
- Size 132KB
- SHA256 24d92bbeb63d06b01010fe230c1e3a31e667a159be7e570a8efe68f83ed9ad40
- MD5 e4cbb48c438622a4298c7bdd75cc04f6
- SHA1 6f756d31ef95fd745ba0e9c22aadb506f3a78471
- SHA512 8d3ea1b5ca74c20a336eaa29630fd76ecd32f5a56bb66e8cef2bce0fa19024ea917562fd31365081f7027dde9c8464742b833d08c8f41fdddc5bd1a74b9bc766
- SSDEEP 3072:TzwJCGIekwc9W2bg3yhPaL2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:Tzw1IekZ42k3yMK18Gb0OV8ld0GecQ35
- TLSH
  T154D3D0D7B3F4EE7DCA6756F7A62500B1ECB3462806A1434B078BD8752A26748DCC8793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
- MD5 2191e768cc2e19009dad20dc999135a3
- SHA1 f49a46ba0e954e657aaed1c9019a53d194272b6a
- SHA512 5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
- SSDEEP 49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
- TLSH
  T1AA367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  ffmpeg.dll
- Size 2.7MB
- SHA256 08bf8e22d8d240bfa888bf2e51e545083be60e4817641c08a7d3c915ba08569d
- MD5 5a1440d4b339572d56f44bcde6aa024b
- SHA1 9ec8606de6ba93887670e3f747927e3f6de37634
- SHA512 e3b42da5c05ddb4b85228fee885215adb8f55da50035122f8317330516d2be851358eb0375832357763539884641220bdbca88bfb5ac5f34cf93dffe8734ec19
- SSDEEP 49152:R8h7ilnY895zc09Myl6QL3n6F+hTf6yfPvJr8PNStFwLluJMWykOFS:pn1H9MDCn6OFMWyBS
- TLSH
  T1FED59D07E6DA40D9D01AC170879FA233F62134468B24A7EF1B9196252F7BFD46E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  icudtl.dat
- Size 10.1MB
- SHA256 7c40c811d30d459dbf04a04c141b60eb4247cd58a008fb836605317df665748f
- MD5 62880b7d351a9f547b62b8da6c97ce25
- SHA1 057f11003013cfb3f1c63e6bdd4f2f9949ff0104
- SHA512 0d6f83175a91d90f4cc3ec4d9071b7acd0cd8ebbcc592322e46fde2adb7198e035af62c45a11a622f2a908e26d4dd8b8d1af023e634a74d0824d02c791ba3c1a
- SSDEEP 196608:1IPBhORjFQwCliXUxbblHa93Whli6Z86WOH:1kwVAliXUxbblHa93Whli6Z8I
- TLSH
  T17AB62803A2FB4DC2F9F76F31D8F492679567BD496E32805A01042F3B5C336908A65BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14 behavioral15
- Target
  libEGL.dll
- Size 469KB
- SHA256 5bad347c20c393fec607ce9c6721ff6c214e607a9afae3662fa78dc42eefd8ba
- MD5 dd827ad7dd7ccd90c2de005d7c6381d4
- SHA1 78177b34c76b6d97f40afd416a0c8104ecba7e1c
- SHA512 db853bca3e6c193a39a0adb0d00a88d14c6c51a76ad0ae106f9b85be78a2c3799cb18d6c5a6eddd3f513f5387306c406b6441a31297616106754a33bab966cf9
- SSDEEP 6144:eI9l960ewE3X883ZrzMkBmi12EvUGsADnIgHc:eClY0WM8JrzMIKODX
- TLSH
  T1F6A47C15779854A9D07AC430CA534652EE72B8960F21FADF0394E27D2F7BBE85B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  libGLESv2.dll
- Size 7.1MB
- SHA256 e0e07c02de2f6561f04e296871ca06cb2db325a7f0143b3e0d1505a1f68be7d8
- MD5 899a686e6e9e13252cd1a9241641c5d7
- SHA1 8b6056b83d3234407a0e5c1e27883e30f7d3265d
- SHA512 2e4e5f567e95400f2eb49c11d41e3d8654120011574d94c55c092a437cb7ae8222372ecc639133fc682b3fdb31f394ae96f0626e650c2c38c4eb10c9e7db9f0c
- SSDEEP 98304:tAgpTkR1+f1SlkWW6yAKwCD2x9Stm5H5wXVoJ:e9nSYxCdcKo
- TLSH
  T1E0767C13F6A281D9D05ED2B887579123FA30B8A9472072CF2A9817113F77BE06B7D725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  locales/en-US.pak
- Size 391KB
- SHA256 0364c73f320e441b03cb2afcaaca3ffbfac51a3559dcd0ff99a1accf82c7f762
- MD5 c9c2abcb04e1ad5f1a20244da8d595a8
- SHA1 89ca81da21900074a5ccdcdc852768277b2b620b
- SHA512 96bbf21174f56a111a2fc6ec024ab2f143945306797e77d773367a7fad42b7828ebb7b08d0dab76858d9fa340bf3205be403bc53df9e5e4e390058c94a751ffd
- SSDEEP 6144:1InAdQi32OqOMWvX3BO4XMP9ehWMIfaYRGrc55FSMnC/M1UwB:1IAdQqOONvXMyWMGv57SoUwB
- TLSH
  T121845C1FF744226A069352627F0956B2BF32D06CA36112563CBD812C33B7B66C3776E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20 behavioral21
- Target
  resources/app-update.yml
- Size 103B
- SHA256 a183fee553dd8222ff9383bf66cb54adc06b495c9fbce2169f231c0355686d0a
- MD5 b46746e6c3fe3536889d8d9edfe63506
- SHA1 1d49007569c646e30f3f8350538d4f4fdd1461c3
- SHA512 ba235e4749073d423e43476831570b301a320c3e22cce51730585c37de11625278e67e4740995cdd929856d8c765c36742ce161d7edcc216539f7d11465a23cc
- TLSH
  T1DBB012319600C01343723C313C025720B0CD8010F66BC92CC8D6D0688D238310B1F0A8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22 behavioral23
- Target
  resources/app.asar
- Size 8.1MB
- SHA256 bd01bb467a2808b92a1c86cef253b63ac364d0e4929b298dc050348744e98355
- MD5 b401c6412c2d40734c727989d21e1835
- SHA1 fba6f061282a152a7c4cd7beaea659c805de6019
- SHA512 ed1ff54b8adba301e6cfe3b9803f95a04b415322d09dea8efc7d697a03b4cf87546b187990c908d7eceed364868bf9df22982a92f4d5446224ce2448a587b189
- SSDEEP 98304:waKbPkmcXGnYmlYtWAC+CSICL89/h9rQJpNBVQXMAERe4:waKbsfWnrCtoFCL8h9UhB6Xlt4
- TLSH
  T18486D0DAB3E0B071C3D351B9803B1555F23E1859B508456CF62CEAE96AB98C9523BF3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26 behavioral27
- Target
  vk_swiftshader.dll
- Size 4.9MB
- SHA256 fac0fb613864b5fcad21b5dabb7162fd3c11fd761c4ddb80ef57d94237342aeb
- MD5 32e09c64943e115c05868a451ceebea6
- SHA1 496d79a5d9d6ab52c93a1c6747a96c18652ed5c9
- SHA512 ab82dcbd3bfa4aaee4a9fb9eaee210b221b6fdf96db4a259bac964638a4f8964a927c43d9215d5fe8f0d09f7343efb771eaab5fc36bfdcdec9629b00d231f10b
- SSDEEP 49152:Q6PkZFjKeDTIEvAvlo6coVQxa8sVr0yN1J+MuXy557nDOPNt7wpr30sN+05uQKYP:QNZFjAgpOz2VeCCAkEvkCvGZN9z
- TLSH
  T1EA364903B28581D9F05DD5B9875BA632F631F8811B6276DF42A40F192E3BFE02B39B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  vulkan-1.dll
- Size 917KB
- SHA256 af0534b4288dd27f458cfe997200094a121acf4e4320e1c317761c762b9127a0
- MD5 291cf47b098075135ced306a22041027
- SHA1 903efee96043861f55817df1a02e6edb1361d67a
- SHA512 6b9e5cccaf3582eee87a21806fd6b3c5718acb30558f5855dc47ad8469dec43c33f664c681bc329a2ba06c06fe1276df307aedfb3dc99f05bc813228b1c015bf
- SSDEEP 24576:NV9nIy2kwpHHPDnCo3A1XpQ66Z5WoDYsHs6g3P0zAk78G3:Bt2zNLnxA1+66Z5WoDYsHs6g3P0zAk7/
- TLSH
  T1FE155E139A944569D476C034C9C28607CA7178921B25B9CF03A85B09BFAFBF43B7D73A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31
- Target
  wows-monitor.exe
- Size 158.3MB
- SHA256 de6ba428cad52cc2e94c48e25a90c0c7f1cc2e86e580acb91007c726ac987e2e
- MD5 1a953c886fcacc3e09eb31422c14055c
- SHA1 4afe642df8acf58e960798d7c44a8a063969a0c1
- SHA512 f2770ff328ab401e051c2024ca35bbbe5c75ac7a1809341402cd4310cf5f073d83684137d5102abae5be6b2c80ba2bb10febe9e27277be8d335dde74e869c8e2
- SSDEEP 1572864:kM7iNiWXK0StuIgOHbb9ytd/hgalVr67OnpwteWxLa0ZX5uaiVa/of4+lFhYXlb:bnch/jpW
- TLSH
  T117888C13E29650D9F05DD1B18797863AEA72B8861738A6DF275407162F7BFE02B3CB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32