Overview
overview
7Static
static
3ManagerPac...84.exe
windows10-2004-x64
7ManagerPac...84.exe
windows11-ltsc_2024-x64
7$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDIR/INetC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ss.dll
windows10-2004-x64
3$PLUGINSDI...ss.dll
windows11-ltsc_2024-x64
37za.exe
windows10-2004-x64
37za.exe
windows11-ltsc_2024-x64
3ArCave.exe
windows10-2004-x64
3ArCave.exe
windows11-ltsc_2024-x64
3FileArchiver.Core.dll
windows10-2004-x64
3FileArchiver.Core.dll
windows11-ltsc_2024-x64
3Plugins/7za.exe
windows10-2004-x64
3Plugins/7za.exe
windows11-ltsc_2024-x64
3Plugins/Fi...ip.dll
windows10-2004-x64
1Plugins/Fi...ip.dll
windows11-ltsc_2024-x64
1Plugins/Fi...ip.dll
windows10-2004-x64
1Plugins/Fi...ip.dll
windows11-ltsc_2024-x64
1Plugins/Fi...ar.dll
windows10-2004-x64
1Plugins/Fi...ar.dll
windows11-ltsc_2024-x64
1Plugins/Fi...ip.dll
windows10-2004-x64
1Plugins/Fi...ip.dll
windows11-ltsc_2024-x64
1Plugins/Sh...ss.dll
windows10-2004-x64
1Plugins/Sh...ss.dll
windows11-ltsc_2024-x64
1Plugins/pl...es.dll
windows10-2004-x64
1Plugins/pl...es.dll
windows11-ltsc_2024-x64
1Plugins/pl...es.dll
windows10-2004-x64
1Plugins/pl...es.dll
windows11-ltsc_2024-x64
1General
- Target Matcha-External-347269.zip
- Size 19.1MB
- Sample260831-mwpnbasxfw
- SHA256 83b0380ce4f852958743aa614df77a0f0230f531ec6c07f848196dc1f9c8be44
- MD5 c0b4ad3b33d6f9f650820ea94197a7a9
- SHA1 060f42fa2f4c0d1712982f54cf98fe290086ee67
- SHA512 f5a13a6fbcaec70eadedd12f7b0cf202da837441d6b5d3c88044697fa77792ff0fd0bfc0b3e0625d2e6220cda326ae1100217ca20a88341eef5bf270c167d14b
- SSDEEP 393216:6VAJ946+6cKcN/bsvXhy8Z+XnRDzbzobq7xuPCbbpmBx+kAC4:6VAk63YQXhyM+3tjFKWcWkAV
- TLSH T1681733D64FBD4BA729C03762CB503A369DF74E8852606488F4FDE23C21DAE69115E3C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ManagerPackage_3184.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ManagerPackage_3184.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/INetC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsProcess.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
7za.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
7za.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
ArCave.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ArCave.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
FileArchiver.Core.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
FileArchiver.Core.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Plugins/7za.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Plugins/7za.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Plugins/FileArchiver.Archive.GZip.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Plugins/FileArchiver.Archive.GZip.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Plugins/FileArchiver.Archive.SevenZip.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Plugins/FileArchiver.Archive.SevenZip.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Plugins/FileArchiver.Archive.Tar.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Plugins/FileArchiver.Archive.Tar.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Plugins/FileArchiver.Archive.Zip.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Plugins/FileArchiver.Archive.Zip.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Plugins/SharpCompress.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Plugins/SharpCompress.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
Plugins/pl-PL/FileArchiver.Archive.GZip.resources.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Plugins/pl-PL/FileArchiver.Archive.GZip.resources.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Plugins/pl-PL/FileArchiver.Archive.SevenZip.resources.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Plugins/pl-PL/FileArchiver.Archive.SevenZip.resources.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target ManagerPackage_3184.exe
- Size 113.0MB
- SHA256 f7b9a92f45d6c4fd590ff11407b5f5d1c803b805ffc28d77f57af73b9af54409
- MD5 6e0289a5a547a7bb92039794256901f3
- SHA1 09bf13c081066e25f47c488c6aedf8c10b9d0aae
- SHA512 af76ea9f0f49bfdb050b927f31ff9383529a31e47be6ea4ed43d68384ce36ca4f186316687b1e67302e63c3bd92c6bdf064bb30460e2f58d283b61fec157764c
- SSDEEP 24576:O+IByHloptmC+OM9J/mary7Ui4M+0rrMqHtNlQFx4N:RhHctL0WWyY7A
- TLSH T13D4823A7CBD1E7BFC62992FD91A0AB4914C2CD06487E491BDFC3661D12F6EB428543C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/INetC.dll
- Size 43KB
- SHA256 f19674b7eb8fb49a9f117816e7db85173c017582c7a9d20ad816929b4c4eff41
- MD5 5afa8a910a993ccb1cfbd2612fde1ee2
- SHA1 9227d0c54f6696281cfb341ef84c4890cafc63b8
- SHA512 28bb8d74862c6688115d11ab09480f1f4b1b9350fddc34b02f1bc7094498fc73573977505da3317adc5b00c9c83aa41f8c6c46a3b3d2cb9a2dd56c9bbd181cc3
- SSDEEP 768:s4RgW72i213M0s9Ac0VMHoaO9gG1zQBWAC1Ax:s4KW72iw3MJ0eo371cBkAx
- TLSH T1EE135B8197E952E2FBB9463074B76E62553EBC245815A08FC337268CACB2351FD2C367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsProcess.dll
- Size 141KB
- SHA256 73047d88e6fc5f58643e6827f43fb8f09ade98ec9d8ec9a8ea4b55375cf370e6
- MD5 cf880e1e0dc2bdd77e31ae3c9590ed62
- SHA1 de971adb675c1d54ac557d639b8f8a385e0c29c9
- SHA512 ed393b03c68df685253f8696e4fb2704576aff73f45832ef8e2552bbcfe2bc446fb30fd2566887c23a09aa2499628ac3713492324d88d0bce481220e3bb1e92e
- SSDEEP 3072:FPn7qn8B6MH506oR2wdA2N0Igi3vclr2nwNNAkD2tY:xcMeu2Hd/bajQY
- TLSH T1B4E38E01B4C28071D9BE193818648F769B7FB811DFA89DEF675405BE4F746C0EE38A62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 7za.exe
- Size 592KB
- SHA256 a2caa9ae4f080fe16e061d70c145bbef4aaee6946bd840a6d344b1eebc3ac293
- MD5 ccb2802eb20b49ec868f38bc6591edd3
- SHA1 c7322389f45fa204d0b98f64476f1473dfb8577f
- SHA512 29694d9a4d342f7c2f06007eefa71c23bd0d120329876b58dd92a5dccd6389a05fe2dc43ce74e40781d51663a1f7f8b353edf3b54bbe4e27e49d90f7261716b4
- SSDEEP 12288:+4x2QX9pJg1XDdaKTEcILJajcPVL+3wtD42j6GNEcQbECNdN08VrGr8GrBQmKz/N:+rwFpcEJnVLMd7MKtu8mHwT
- TLSH T1BAD4BF02BBC2C1BCC63224304E396716E1BAFB6447268AC763D41F5E5E351E17E3A6B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ArCave.exe
- Size 839KB
- SHA256 89675ffa63fda41a40e39e575ee8b072616776476116a2edc13448d7678eb959
- MD5 e913b2fa2191f0d369dc8628c243b020
- SHA1 d6c6844c59c506d4fabd6428f3e06e7f477117c0
- SHA512 8f3eae5e832df6c38f7f5a2bb6a9d6560a00114dd0f75d0835175d575e8b23da2bd1325f4e1b1bd6999cdefb96d6e9ce5c48c4930b7398527cb6761a61a66f1b
- SSDEEP 6144:10fYkoYP2NekCqOALfitLoDP+wvuv3rLTDrJtpgzphdoDP+wvuv3rLTDrJtpgzpc:10fYk5eZ9ndeZ9nxf4
- TLSH T10D052993368A2290D8A9CD36071D1F9233717E336B5CCB5D2254776E99B2213CB23ED6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target FileArchiver.Core.dll
- Size 67KB
- SHA256 cca47be3de20f63c2f8001d895fe286edcaaf8c209905ea3c04310ad36b12379
- MD5 f0fa29246ddf474070bbc36b7f8b8577
- SHA1 c9cca7e17094e8f730cdb727ed634adeb922c164
- SHA512 f42cdcd62790bd0e23b15edbb53499880df2f327e2c8535b076392e062330365218f51dca745f341f5c313fd4a8be0a747e677bf3aee062082531893d4157800
- SSDEEP 1536:M9VCg/aKyPPX8O7Z+xPok2IqgAheUYeP1cBkA5:M9VCg/ONYxP0I9qY1B9
- TLSH T199635C6123AC4733DB8F56B8B47111450BB1D2669817F3CE19ACB2E63D9339A17A21F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Plugins/7za.exe
- Size 592KB
- SHA256 a2caa9ae4f080fe16e061d70c145bbef4aaee6946bd840a6d344b1eebc3ac293
- MD5 ccb2802eb20b49ec868f38bc6591edd3
- SHA1 c7322389f45fa204d0b98f64476f1473dfb8577f
- SHA512 29694d9a4d342f7c2f06007eefa71c23bd0d120329876b58dd92a5dccd6389a05fe2dc43ce74e40781d51663a1f7f8b353edf3b54bbe4e27e49d90f7261716b4
- SSDEEP 12288:+4x2QX9pJg1XDdaKTEcILJajcPVL+3wtD42j6GNEcQbECNdN08VrGr8GrBQmKz/N:+rwFpcEJnVLMd7MKtu8mHwT
- TLSH T1BAD4BF02BBC2C1BCC63224304E396716E1BAFB6447268AC763D41F5E5E351E17E3A6B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Plugins/FileArchiver.Archive.GZip.dll
- Size 18KB
- SHA256 7b9c1315914a29a0c2cf4dc58e1b0538340cd7fffef2795c64e2cd69e4031106
- MD5 850291c3e1e21e99c727d09e8d96e0e6
- SHA1 a607c00bdd65f28627361e3062f30c89dcdf9ec1
- SHA512 b656027d0b3f49ec646a1c2831cae25297eac76623584d08332fc3de79227580f5440f4549fa32d8fd1ce0b5b4ce613e10c432866ff8fec690bb914a62823bb2
- SSDEEP 384:b4NRZigs7d2WaZ4UyFNyuAFtEC58dAG6RELCG9GtSzR0T:bAPdZ4HN4x49USzo
- TLSH T12D820745B2D84327E8AF1B7ABDB1220007F0E7A18836EBD81DDD61C56F6776109623F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Plugins/FileArchiver.Archive.SevenZip.dll
- Size 41KB
- SHA256 f582cb2826fdd2ae578337c6df42b7ec8911f8e39c91ebf8c3381c3c21060e5c
- MD5 fc448703f2e239fd438498ea34d0bfe0
- SHA1 57a0ab990022e16b70329490faf0173c7e7e3f20
- SHA512 420201271e86695c4bbe95c5928dee499d298335fb90868c3f4d2858792cdaafaf5a8de257644f12d4bffa8ff278a411b510aeb51bb51ca5b6e50247e3f8c7e5
- SSDEEP 768:MKnC2uOaZxyqRobiumc/sE/PSjOPaCHdeN8pSz7f:HC2+QqU/PS/rH
- TLSH T11913499467EC8323D6DE6EB8A570451903B1E29B2917EFDA5DD8A0E50C273D04AA03F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Plugins/FileArchiver.Archive.Tar.dll
- Size 16KB
- SHA256 27457b7021d2661e77e2f55fca7bf8be119852d39588163d1b2a44cd4ccd27d6
- MD5 9e349344bd8ff2d3b00c07cd107ad002
- SHA1 66765557fe5cfc2b1c38dcb00dbc49df16c141ad
- SHA512 3e66129070348e42f9b712d4e53381632cddb9dbc3759af07c15fcbb1d535274c92670e594e22c6bb0de2c5ba4a14a44314745ebc0d50ca7b29002192f0cb4a4
- SSDEEP 384:Hc4C90vjw+2bzSlLuIzQaAtEC5DUknJTErCVbrvazgCq:Hc4B0xOlLDs1hXizo
- TLSH T1BB722922B3C44323D8EA2775B8B2268507B2F792CC03D7DC0CD9B1D69F267640A512BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Plugins/FileArchiver.Archive.Zip.dll
- Size 22KB
- SHA256 f999acef86e0716257b7535279d4c489d45d69cb9ed2a3e7a5ef0d35e6fe318e
- MD5 9938fe0603716c75198d615a33cf0b55
- SHA1 03a0c3ca4c9328a1dadb7b46a25440d7b97c53fd
- SHA512 b96d40a45aad93ec0dd913ed706bb45a349936a0b728d3a4ee9b51262e8a3d08c34279711acd2c616c1f71069c9bf527a03eb185caf2bc60692822592f7184b4
- SSDEEP 384:e4jabH21l8B0R5J4eu+u55LAcKRJtET58a4GkETC3WZ3NyNRJSzRw6:nn8+bu+uQcrZkWyXSzB
- TLSH T195A21A9573E84336E5AF4A74AE71210803F4F786A813D7DD1D9C60D92F27B900992BE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Plugins/SharpCompress.dll
- Size 467KB
- SHA256 934af71ef473f827ff074c49aacc41b24183ddbf7a63fac9700226d58a023eac
- MD5 3e8cdb89c169d80217a4fbd739268ee2
- SHA1 368b3142a4acfcb621d49e9c46cbee274d5200c6
- SHA512 f8c2097b431f9952ab01272131735339ebed9a35156ba6e6c57d7c3a88a9c8ef761eabef0467b40370b916cf5479f84e73ea5c6ea156fd9313ba97be0b400408
- SSDEEP 12288:98EOf/jFNxvLWmMKnbwcJtgCkxKOieXOt+9:ojFNxvLWOGKyXOt
- TLSH T188A45C1A1FF46B2BE4BE47BE8072886493B4F0566E4BB79F5AE066F52D73350C804247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Plugins/pl-PL/FileArchiver.Archive.GZip.resources.dll
- Size 3KB
- SHA256 91e2e2c0df4b78425f72f9006337fa8c5f533522d1b91fc1d76af054e2a883ce
- MD5 ff757ab95015b8377e229dbd6188f6bd
- SHA1 0ee751a86b973f573184ee6b1bd04e905eb9f945
- SHA512 e5b3a8ebb2be3aa3c795ff0868b9cdd6be5f10ec00aaf33a0813d585055c9448ff1b8b839e4ca1646fe80a1dd7a8c9164608cd09b549886525ee86760b17287b
- TLSH T18E713E0323E40336F9F30FB268B393426669FA60DD73C7AD05552329AD726608DA0F71
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target Plugins/pl-PL/FileArchiver.Archive.SevenZip.resources.dll
- Size 4KB
- SHA256 9c3033978fd8b9964f654e54a5f3f8ac7b9cfc589d7369bbcbadcd3f2311ea26
- MD5 29e69bbd1140fcab6c9b868eae875d96
- SHA1 1aca79027b1face5b60a9c02a5d62db36201a72e
- SHA512 5757d9feaa8d39422f5d6128784650b9239dcecc1c77f2e24b705200882c5303f37238e3d4f785cbe814ed3be5227dc8fd34b4d22d9d12189f76d1aec285bcfa
- SSDEEP 48:63JHAx1i8DAe8s8y8J8O8AKlt4chKVCV11KAQhWlQzCF:egKKltbh7+
- TLSH T137912C0263F80335F8F60FB1AA7253064678FEA1DD3287AD055502686D72A50C9B1F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10