Overview
overview
3Static
static
3audioplaye...in.dll
windows10-2004-x64
1audioplaye...in.dll
windows11-ltsc_2024-x64
1dartjni.dll
windows10-2004-x64
1dartjni.dll
windows11-ltsc_2024-x64
1data\app.so
ubuntu-18.04-amd64
file_selec...in.dll
windows10-2004-x64
1file_selec...in.dll
windows11-ltsc_2024-x64
1flutter_windows.dll
windows10-2004-x64
1orders_app.exe
windows10-2004-x64
1orders_app.exe
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/08/2026, 12:19
Static task
static1
Behavioral task
behavioral1
Sample
audioplayers_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
audioplayers_windows_plugin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
dartjni.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
dartjni.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
data\app.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
file_selector_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
file_selector_windows_plugin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
flutter_windows.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
orders_app.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
orders_app.exe
Resource
win11ltsc2024-20260709-en
General
- Target orders_app.exe
- Size 74KB
- Sample260831-phex3a1fle
- SHA256 5b9ad8b7406cac7d72bd261a3b914ee6538ce7b5de7b3fdd9137a9abf54c5a90
- MD5 6ce219f732c3df3f809c7d30ba4eb96e
- SHA1 2ee18038dca488256b1791c7d8489a1ae393915f
- SHA512 f00e009ce73f0cf47cc22242d88f4cd52a79c907af6cbcee0b550b6277e48506013d87a961a817604bd5a29ffb19ba5b89d92a252bee2234628b5f734023c8ce
- SSDEEP 1536:VVW7TNdf8iaIXKHW8wC/k6YtYGi1uVSZjo6vZG:VA7Zp8iaxk6MYGlVSmr
- TLSH T1C1735D57DA6650AFE35D8D78C9530905DE73FC864BA1A2CFA7800DDB0E26AD49F3E201
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3288 orders_app.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\com.example\(sub)Task Manager\shared_preferences.json
- Size 6KB
- SHA256 fc0289fabea9940bcde146b2417cf1e1552d94cafed940417a75267561808d86
- MD5 773162664a51086e178b6fce5c7d209d
- SHA1 53afed5e2051fb376f440c5892767e662ea93f47
- SHA512 aa3006aab3a1572bfb5d035a1ea78c32a71afcefdd238f866b1c7a34f43e7018f551a8182c42932c402056e8a4420c7d2642b8e8aa0146cd7293505e83cad860
- SSDEEP 96:WITf4k/re593rjAKMcKodnwrzI0YCC3rW+x+O7rUrh9fNKE7H1KuSKmVWAAiO9Ow:1febjzg1GW+LUrTBXlET5Oz2D7BQXF
- TLSH T1F5E1621EAA4CFD66D642DEFD2BFC6E755064C12A00A21C698FDCDA1C42B28B0DB67191
- MD5 SHA1 SHA512 SSDEEP TLSH