Overview
overview
7Static
static
3Aphrodite ...ro.exe
windows10-2004-x64
7Aphrodite ...ro.exe
windows11-ltsc_2024-x64
1Uninstall ...ro.exe
windows10-2004-x64
7Uninstall ...ro.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows11-ltsc_2024-x64
3d3dcompiler_47.dll
windows10-2004-x64
1ffmpeg.dll
windows10-2004-x64
1ffmpeg.dll
windows11-ltsc_2024-x64
1libEGL.dll
windows10-2004-x64
1libEGL.dll
windows11-ltsc_2024-x64
1libGLESv2.dll
windows10-2004-x64
1libGLESv2.dll
windows11-ltsc_2024-x64
1locales/hu.pak
windows10-2004-x64
3locales/hu.pak
windows11-ltsc_2024-x64
3AutoHotkey.chm
windows10-2004-x64
1AutoHotkey.chm
windows11-ltsc_2024-x64
1AutoHotkeyA32.exe
windows10-2004-x64
3AutoHotkeyA32.exe
windows11-ltsc_2024-x64
3AutoHotkeyU32.exe
windows10-2004-x64
3General
- Target aphroditekeyboardmacro.zip
- Size 151.8MB
- Sample260830-z7c5wazfph
- SHA256 6605e4661c480c8095b7c8277b5cec478b2dcfb89fb1ff38f8531189ccbf2dab
- MD5 8e3c35299a360d15a25be32f12d5fa8b
- SHA1 ec2175c39f4151c11f69b7b03ff9c80851db5b32
- SHA512 18810f70d7b63803bfe5153eb09fa10b4e834fcb5fa9bda4aae790b3bf46127e0c2a59682366405b242ccc722c7fa50158f1e3d52cc24efacfba58e68482f406
- SSDEEP 3145728:qovioGUJ1c2+Wr+Et00xNK/fDrbgvSEAL8F+a7uhKCBu/bfbUZ78yA4jCGDWTtm7:LzFiEa0xNK/rgvysiLu/cZ78yLIxmGYT
- TLSH T1157833ACA31A9FD3D4271833B7E05070D988C0A1ADE62EE0B31779C5D7221B5BB4A5DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Aphrodite Keyboard Macro.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Aphrodite Keyboard Macro.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Uninstall Aphrodite Keyboard Macro.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Uninstall Aphrodite Keyboard Macro.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
d3dcompiler_47.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
ffmpeg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
ffmpeg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
libEGL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
libEGL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral24
Sample
libGLESv2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
libGLESv2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
locales/hu.pak
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
locales/hu.pak
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral28
Sample
AutoHotkey.chm
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
AutoHotkey.chm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral30
Sample
AutoHotkeyA32.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
AutoHotkeyA32.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
AutoHotkeyU32.exe
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target Aphrodite Keyboard Macro.exe
- Size 164.7MB
- SHA256 d4fe96ef71f66c17e93c9c7ed3b0d01b0cd07c2e47686823ceae4fc57e8b4779
- MD5 1d0ceae6542455e691b5ba3f7e29dfbd
- SHA1 4e699ef7cc0d5fec8204935eb5841c78f1e0b1f6
- SHA512 9707ef6254ae0a69b458cfe1100cca092bf018c9dcc86dd4e65376197dc133f5f3be7a9ce162b8c49d9f02260f3f69d2ea20321f8f2e910389a251824153eb4a
- SSDEEP 1572864:JmIh9FimkfWTs6+LkanRWYS8a4lN+WTi6qSFK2u73JvPaKD2JsR2/tVBcpZOcrQD:hsFWY7ihS4kVP
- TLSH T154888C03F29650E9F05DD1B18B578236EA72B8861738A6DF175417262F7BFE02B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target Uninstall Aphrodite Keyboard Macro.exe
- Size 171KB
- SHA256 2254cff5bcaecd98c65f2bde8d4156e10740a8f973b1aafd23d7ae3b226496ee
- MD5 9cfba4740e18d99dc58bbcbfdd18920f
- SHA1 bbeb7bf56ec3757639b87d477634749fa91d44f8
- SHA512 b9f641ea271e888e01a2d5d8539a395fd293474634336e2b9f46240c5fe338a4dfe8efac92c303ec70f9dacd6c1a2c0be6bdb4112174ff297a7f0b68bce09ac3
- SSDEEP 3072:Kn77v00hEoDEtaujQCCZ/2rrZRJpP8s2adpa2MNUaq2tvhOEA1RJCir86SrSrvr5:K740IzQmrdtPZ2q2Uaq2t0EyL+2iaV
- TLSH T16A040120B7A0C533E1F74F740BB893AB8EB6F11169384F972BD0664C3956A95EC1E750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target d3dcompiler_47.dll
- Size 4.7MB
- SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
- MD5 2191e768cc2e19009dad20dc999135a3
- SHA1 f49a46ba0e954e657aaed1c9019a53d194272b6a
- SHA512 5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
- SSDEEP 49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
- TLSH T1AA367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target ffmpeg.dll
- Size 2.8MB
- SHA256 9d1eb0c6eb12bfa87e74a65c2fde5d61c4c93e21fb0800bbdccb6559527036a5
- MD5 14e00bf1d9d0df65f8b1a31240d474a8
- SHA1 f9fe033725b7b1b5c0efce7a14ed7ab223cb32e8
- SHA512 652724450296a739de802ba8fac482953146f37665718446e448a350295e1e7b09bd460835bcd0ac26b2e54bb9b791624a9eea11e6c96573c7c4aed22450ed14
- SSDEEP 49152:IF5qb84KtStWEK/Ju2lf3tAtiLHQVTf6yfcrhCHDXLl8+0LKSQ1SCu:IFvSkJXv+tiLAD0+D1S5
- TLSH T1C7D5AE07E6D940D9D01EC070879FA233F62134468B24A7EF1A9196252F7BFD46E3E764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target libEGL.dll
- Size 477KB
- SHA256 9cfc3001191e8b3eb9c96ba29e57e5bf9aaab264e83897e47cb968167a8a811b
- MD5 1dcf5ac3cb0dcda9c9679eeb018d01bd
- SHA1 bc21697c5665aab5eaaba61f55719d43328f7e7c
- SHA512 47d8769bf00cc7555479542abf5e0684799e424d9801dad8c6bd199680d9c40cfa2380d969515db7a0753cf6f3a9733b5afb931fe33863fe30a37092d8dc96b1
- SSDEEP 6144:o8hd1BSjuMmof2SEXVVfgV8hxN7h2NIIEOg51f0FticyQ:o8DXSjZmof2SEsmN12NIIE7f0FticyQ
- TLSH T1DCA47C15B79844A9E07BC470CA534652EE62B4960F65FADF0394923D2F7BBF81B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target libGLESv2.dll
- Size 7.3MB
- SHA256 80c2ef6ca6d0ff4877bd0c0bc082ff19c3a5002d53648bcf5f54368560f9a411
- MD5 51378647d290f3a08affa8454a3d59d5
- SHA1 32152a6677c82ea9e2e842baa907d708b46a6779
- SHA512 ca90f5131d95fdb1e4a5cb7cb2bbef08676f70367b255270871754f776937994e34258084bf46437b25e1745728c279594d64e0718643eac0ac00cfc43d2c53b
- SSDEEP 98304:1aUIRsMRk/yUt1ngliXWeamn0B8LfdAbvZ3gtT7:1anxRk/Pwzedpag1
- TLSH T139768D13F69640D9D05DC2B9DB579133FA31B8950B20B2CF2A9427212F7ABE06B7E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target locales/hu.pak
- Size 538KB
- SHA256 bab09c3cb80130a4a288642633c2b31ab08b1757466d9a468bc36d276079f002
- MD5 b93beeb1e35a29b310500fa59983f751
- SHA1 45c0b2cab4c4a820cfc2aed4b7236ddc79a0db00
- SHA512 249de5b8bd7c4755caa8b9552254d353b0d885b63bd5f7c6c8e29b3f4e447c9e8d6c0e88d5aaba0b898aa26880592b3904e19ca4797a2ac1dd757aaee782c37c
- SSDEEP 6144:0sTpI7ceE8WnOL42HPs2P0Ar7ky1XB5VwFZfpadYGDuU1gGse33a5gRFxztGateg:0spI7Y8WQ+AXB5VwAtj/3a5t+D
- TLSH T191C44C7793B69059B8AC179378647F15592E581BAE3B35FB28C3886D30A078D0D83CDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target AutoHotkey.chm
- Size 1.9MB
- SHA256 de37a93068ca25701b3413eab0f01fa1646d2dab0346d78494192e95d94ad521
- MD5 17d5e275dbc8278d888f7da1d681d7e3
- SHA1 245cd35e6caa42fdd3936d2122c7464c877d6591
- SHA512 041420c5fcba5d2fa5e2d549319948eb77b416cb32ce848218b2681f3bdb5a7ab50d795cfdabd068330f6a4f16812ae91564d654a958b0f0bb188d11890c4ad2
- SSDEEP 49152:7X6QKboATWz2KXn3H6p2HPIn5lfkwHiAUG8E8LbBpOh:7Xf6oATVKqp8Pk5lNHi1GCbBpm
- TLSH T15C9533D3822C8995F0DEADB51EDA64BBB605791C4043BA93A0DD41D0DBD9E3EB30463B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target AutoHotkeyA32.exe
- Size 775KB
- SHA256 6a98b438b67da7316e9251eb1a92cd5384a8349d239a77903f7282fa076a77c3
- MD5 fd94b77958305a1ac3eeac27ee765256
- SHA1 bdf7f5633cd529186c7c9c87c120a58c35515d2e
- SHA512 1e97ddbe9374513ec9a1f51313efb3621f81a309bf78982688b4c19aa389f0b422a604d8adcd84dc1ba28f44135d30edde06e32705fe02762e92cf2bbc725a91
- SSDEEP 24576:Xm5sulQV7Bf5eUHngzv3xynU96at5gxqR:N8QV7RZov3xY5
- TLSH T148F4AE51F68580F2D9E134B211BABB726939AD69133049C3B7A43D7D0E726C27D7A30E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target AutoHotkeyU32.exe
- Size 893KB
- SHA256 ba35b8b4346b79b8bb4f97360025cb6befaf501b03149a3b5fef8f07bdf265c7
- MD5 b6af97aa32c636c3c4e87bb768a3ceb7
- SHA1 83054af67df43ae70c7f8ac6e8a499d9c9dd82ec
- SHA512 54d2e806503f8a4145ee1519fc5e93cef6bf352cf20042569466f6c402b0a402bce99066decd7729c415cd57da7a9923a1b65926b242672731fe2f9709cf6920
- SSDEEP 24576:Kbi/QhDC8mY93kyw8hC2A5CxLbRpWrzzZyP4UMdg:1/QMnl5YL7WzZyQRd
- TLSH T15B156B52B3C7C1B2EFA219F3D9B553360939BC68133889C7B7D8382DC9A16C06A75359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10