Overview
overview
3Static
static
3audioplaye...in.dll
windows10-2004-x64
1audioplaye...in.dll
windows11-ltsc_2024-x64
1dartjni.dll
windows10-2004-x64
1dartjni.dll
windows11-ltsc_2024-x64
1data\app.so
ubuntu-18.04-amd64
file_selec...in.dll
windows10-2004-x64
1file_selec...in.dll
windows11-ltsc_2024-x64
1flutter_windows.dll
windows10-2004-x64
1orders_app.exe
windows10-2004-x64
1orders_app.exe
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
31/08/2026, 12:19
Static task
static1
Behavioral task
behavioral1
Sample
audioplayers_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
audioplayers_windows_plugin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
dartjni.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
dartjni.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
data\app.so
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
file_selector_windows_plugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
file_selector_windows_plugin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
flutter_windows.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
orders_app.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
orders_app.exe
Resource
win11ltsc2024-20260709-en
General
- Target orders_app.exe
- Size 74KB
- Sample260831-phex3a1fle
- SHA256 5b9ad8b7406cac7d72bd261a3b914ee6538ce7b5de7b3fdd9137a9abf54c5a90
- MD5 6ce219f732c3df3f809c7d30ba4eb96e
- SHA1 2ee18038dca488256b1791c7d8489a1ae393915f
- SHA512 f00e009ce73f0cf47cc22242d88f4cd52a79c907af6cbcee0b550b6277e48506013d87a961a817604bd5a29ffb19ba5b89d92a252bee2234628b5f734023c8ce
- SSDEEP 1536:VVW7TNdf8iaIXKHW8wC/k6YtYGi1uVSZjo6vZG:VA7Zp8iaxk6MYGlVSmr
- TLSH T1C1735D57DA6650AFE35D8D78C9530905DE73FC864BA1A2CFA7800DDB0E26AD49F3E201
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3168 orders_app.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\com.example\(sub)Task Manager\shared_preferences.json
- Size 6KB
- SHA256 e03c7d9ed0d356188a09c1fd20bfa4aaa9e60a4b2771d5ef334c060f0bd0545a
- MD5 0e52430f139f050e7c59f6617f109e9e
- SHA1 cfae340675c2ca5cc5be503c6768f53c8298c7d9
- SHA512 87de1567870aba81e045438e246cdd74d5fed39f75c5e7214c4107efe8fcf1b2d419a5bb4e3364384002d0be951cc5c36ba2c89c9fa7d4ca77ddcf8204e1db72
- SSDEEP 96:W3aTak/ri593rJMcKodnwrz3a0eCC3r1D+O7rUrh3MrfNKE7H1KuSKmVWAAiO3M6:nJibJgDk1FUr2BXlEs5Oz2k7BQ53L
- TLSH T177E1621EAA4CFD26D682DFFD2BFC6E755065C02A00A11C698EDCDA1C8273871DB67191
- MD5 SHA1 SHA512 SSDEEP TLSH