Overview
overview
3Static
static
3audioplaye...in.dll
windows10-2004-x64
1audioplaye...in.dll
windows11-ltsc_2024-x64
1dartjni.dll
windows10-2004-x64
1dartjni.dll
windows11-ltsc_2024-x64
1data\app.so
ubuntu-18.04-amd64
file_selec...in.dll
windows10-2004-x64
1file_selec...in.dll
windows11-ltsc_2024-x64
1flutter_windows.dll
windows10-2004-x64
1orders_app.exe
windows10-2004-x64
1orders_app.exe
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
155s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/08/2026, 22:09
Static task
static1
Behavioral task
behavioral1
Sample
audioplayers_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
audioplayers_windows_plugin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
dartjni.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
dartjni.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
data\app.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
file_selector_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
file_selector_windows_plugin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
flutter_windows.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
orders_app.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
orders_app.exe
Resource
win11ltsc2024-20260709-en
General
- Target orders_app.exe
- Size 74KB
- Sample260830-128v2as1ex
- SHA256 5b9ad8b7406cac7d72bd261a3b914ee6538ce7b5de7b3fdd9137a9abf54c5a90
- MD5 6ce219f732c3df3f809c7d30ba4eb96e
- SHA1 2ee18038dca488256b1791c7d8489a1ae393915f
- SHA512 f00e009ce73f0cf47cc22242d88f4cd52a79c907af6cbcee0b550b6277e48506013d87a961a817604bd5a29ffb19ba5b89d92a252bee2234628b5f734023c8ce
- SSDEEP 1536:VVW7TNdf8iaIXKHW8wC/k6YtYGi1uVSZjo6vZG:VA7Zp8iaxk6MYGlVSmr
- TLSH T1C1735D57DA6650AFE35D8D78C9530905DE73FC864BA1A2CFA7800DDB0E26AD49F3E201
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2976 orders_app.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\com.example\(sub)Task Manager\shared_preferences.json
- Size 6KB
- SHA256 1885606ede1f27f73f410eeb239c41abc5090031b51715c563923d50985b0295
- MD5 0c5824228270f6a72488fe786a47269e
- SHA1 a68d62e595f343d273437dfa8b44f57f11788462
- SHA512 300ca02276ba779e06060bf397e34e42bf2644b8aaecf613a2c40bb690b56dace6553f97771418ffaf94f8618a40e443194b5045b2a1fcc0d664306ff60011cb
- SSDEEP 96:WcrTBk/rg593r0McKodnwrzcr0rCC3rePk+O7rUrh0fNKE7H1KuSKmVWAAiO0OOy:h+gb0gZZeqUrGBXlEI5Oz247BQJF
- TLSH T166E1641EAA4DFD26D682DFFD2BFC6E755061C12B00A11C698BDCDA1C42B38B0DB67191
- MD5 SHA1 SHA512 SSDEEP TLSH