Overview
overview
3Static
static
3audioplaye...in.dll
windows10-2004-x64
1audioplaye...in.dll
windows11-ltsc_2024-x64
1dartjni.dll
windows10-2004-x64
1dartjni.dll
windows11-ltsc_2024-x64
1data\app.so
ubuntu-18.04-amd64
file_selec...in.dll
windows10-2004-x64
1file_selec...in.dll
windows11-ltsc_2024-x64
1flutter_windows.dll
windows10-2004-x64
1orders_app.exe
windows10-2004-x64
1orders_app.exe
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/08/2026, 22:09
Static task
static1
Behavioral task
behavioral1
Sample
audioplayers_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
audioplayers_windows_plugin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
dartjni.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
dartjni.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
data\app.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
file_selector_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
file_selector_windows_plugin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
flutter_windows.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
orders_app.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
orders_app.exe
Resource
win11ltsc2024-20260709-en
General
- Target orders_app.exe
- Size 74KB
- Sample260830-128v2as1ex
- SHA256 5b9ad8b7406cac7d72bd261a3b914ee6538ce7b5de7b3fdd9137a9abf54c5a90
- MD5 6ce219f732c3df3f809c7d30ba4eb96e
- SHA1 2ee18038dca488256b1791c7d8489a1ae393915f
- SHA512 f00e009ce73f0cf47cc22242d88f4cd52a79c907af6cbcee0b550b6277e48506013d87a961a817604bd5a29ffb19ba5b89d92a252bee2234628b5f734023c8ce
- SSDEEP 1536:VVW7TNdf8iaIXKHW8wC/k6YtYGi1uVSZjo6vZG:VA7Zp8iaxk6MYGlVSmr
- TLSH T1C1735D57DA6650AFE35D8D78C9530905DE73FC864BA1A2CFA7800DDB0E26AD49F3E201
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3572 orders_app.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\com.example\(sub)Task Manager\shared_preferences.json
- Size 6KB
- SHA256 e8815d0550ed2bd0f739d0875fe8fc901474b46220d416bfa7ff197cd1f02ca8
- MD5 cd774c812cafe465715d8da20542f4ae
- SHA1 d5b6121950d822e7120b3a3a62ff896f00fb2298
- SHA512 e401405595eee3902b45e840ea979f264f0514b14a06cdb01c9b6cf185ca9003ba09c5182e4175c3611857b4ec5ced08a58a562ffa76049077d671680c6debea
- SSDEEP 96:WlTTiOk/r/593rcXMcKodnwrzl07CC3r5+O7rUrhdfNKE7H1KuSKmVWAAiOdOOAF:6uN/bcXgapjUrHBXlEf5Oz2D7BQiL
- TLSH T1EBE1711EBA0CFD66DA82DEFD2BFC6E755061C02A00A51C698EDCDA1C42738B49B77191
- MD5 SHA1 SHA512 SSDEEP TLSH