Overview
overview
3Static
static
3GLensRepor...ts.exe
windows10-2004-x64
3GLensRepor...ts.exe
windows11-ltsc_2024-x64
3GLensRepor...40.dll
windows10-2004-x64
3GLensRepor...40.dll
windows11-ltsc_2024-x64
3GLensRepor...io.dll
windows10-2004-x64
3GLensRepor...io.dll
windows11-ltsc_2024-x64
3GLensReports/_bz2.dll
windows10-2004-x64
3GLensReports/_bz2.dll
windows11-ltsc_2024-x64
3GLensRepor...es.dll
windows10-2004-x64
3GLensRepor...es.dll
windows11-ltsc_2024-x64
3GLensRepor...al.dll
windows10-2004-x64
3GLensRepor...al.dll
windows11-ltsc_2024-x64
3GLensRepor...ib.dll
windows10-2004-x64
3GLensRepor...ib.dll
windows11-ltsc_2024-x64
3GLensRepor...ma.dll
windows10-2004-x64
3GLensRepor...ma.dll
windows11-ltsc_2024-x64
3GLensRepor...ng.dll
windows10-2004-x64
3GLensRepor...ng.dll
windows11-ltsc_2024-x64
3GLensRepor...ed.dll
windows10-2004-x64
3GLensRepor...ed.dll
windows11-ltsc_2024-x64
3GLensRepor...ue.dll
windows10-2004-x64
3GLensRepor...ue.dll
windows11-ltsc_2024-x64
3GLensReports/_ssl.dll
windows10-2004-x64
3GLensReports/_ssl.dll
windows11-ltsc_2024-x64
3GLensRepor...32.dll
windows10-2004-x64
3GLensRepor...32.dll
windows11-ltsc_2024-x64
3_bootlocale.pyc
windows10-2004-x64
3_bootlocale.pyc
windows11-ltsc_2024-x64
3_collections_abc.pyc
windows10-2004-x64
3_collections_abc.pyc
windows11-ltsc_2024-x64
3_weakrefset.pyc
windows10-2004-x64
3_weakrefset.pyc
windows11-ltsc_2024-x64
3General
- Target GLensReports.zip
- Size 7.7MB
- Sample260831-pmccqsgd75
- SHA256 de2b185b50c0f701ccbc6dbdf3214d160563ca70fb2dedd77e129c6dba1b167a
- MD5 0c149ae38d583a8bead6c8aa6429b6a5
- SHA1 c96a095a81610c1ac7a2fc34903455ceb9734aa4
- SHA512 466d138d8b122b23cf49e1af7f57d10e48fb9ae2a349fb7dface357c3b9a18ffd7663afd90a22a1697b3c1f94d92e3646cbd70ba89411b9a1f035b559250f08e
- SSDEEP 196608:RAVxt5Waw5U+tyE4khLc50UA8KN1s5iJu6Ap:ROfEawy+tiU8w1EWqp
- TLSH T1DE861211F5692AD7FE41F3B50A0FCA28965DB327C7C9C8533C1E82453F4A7E02E5AA19
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
GLensReports/GLensReports.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
GLensReports/GLensReports.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
GLensReports/VCRUNTIME140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
GLensReports/VCRUNTIME140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
GLensReports/_asyncio.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
GLensReports/_asyncio.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
GLensReports/_bz2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
GLensReports/_bz2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
GLensReports/_ctypes.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
GLensReports/_ctypes.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
GLensReports/_decimal.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
GLensReports/_decimal.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
GLensReports/_hashlib.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
GLensReports/_hashlib.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
GLensReports/_lzma.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
GLensReports/_lzma.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
GLensReports/_multiprocessing.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
GLensReports/_multiprocessing.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
GLensReports/_overlapped.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
GLensReports/_overlapped.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
GLensReports/_queue.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
GLensReports/_queue.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
GLensReports/_ssl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
GLensReports/_ssl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
GLensReports/backports/zoneinfo/_czoneinfo.cp37-win32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
GLensReports/backports/zoneinfo/_czoneinfo.cp37-win32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
_bootlocale.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
_bootlocale.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
_collections_abc.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
_collections_abc.pyc
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
_weakrefset.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
_weakrefset.pyc
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target GLensReports/GLensReports.exe
- Size 2.4MB
- SHA256 0645e17a3dca64bae6a1690a13bcdb6eb428fc82c477a9a6b1d5bddae7a77da3
- MD5 7413b22f1c175583539fe1afe73eefbd
- SHA1 0a8d52bce0ca8ed2185a7891e002e3fea6b02bb6
- SHA512 37b2ba75bdac46a571ceb0f50c601c67ab534966d918d71f67c175f028b229087a59b3f190c38dce2e1c57ecf1e145ede5be9e76013e8e9edfd6230a105926d1
- SSDEEP 49152:HFw8bqOgG5UXnALL0BkrR6s+LLjKdBmH89hTGpVxbAQ9k+TwhjG1:HC8elG5UXeltvSLyBmc9dQVRAgrwhM
- TLSH T185C5233179409473DABD187399A1C2359E3EF930172194EB97CC4E7B6E20BD136BA12E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/VCRUNTIME140.dll
- Size 84KB
- SHA256 1b372f064eacb455a0351863706e6326ca31b08e779a70de5de986b5be8069a1
- MD5 ae96651cfbd18991d186a029cbecb30c
- SHA1 18df8af1022b5cb188e3ee98ac5b4da24ac9c526
- SHA512 42a58c17f63cf0d404896d3b4bb16b2c9270cc2192aa4c9be265ed3970dfc2a4115e1db08f35c39e403b4c918be4ed7d19d2e2e015cb06b33d26a6c6521556e7
- SSDEEP 1536:RPwKQRaeU5QsPWFP/wPENm2eK7oJnoUSgpAY8ODcDcm7cIs+4ecbV6iVBoA2r:RwKQRbU5P4XwPENm2eK7mnoUSgpAY8Oa
- TLSH T17A837D11B1C040B1E15608B612E99B23FA7DA3734FD94DCF5FAA5C8C1AB93D2A73425B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/_asyncio.pyd
- Size 52KB
- SHA256 43bb42f74d4236685e1db7bb38312731787ed981832cceb0930e409ad46eee5c
- MD5 081730558a7fd234216f569d040dce88
- SHA1 b19b48ca1afff7ae2365c3476c68eb25c0dd4da5
- SHA512 192fd987541289fb9e3ad3795e581c673d748119f5956c2c84013a8fdbeca44f15a211fec95d50b60c51fb928e834fbf3cff2a56edd01740a81c65204acdd84d
- SSDEEP 768:HZBeDHX3vKOYZD6cWPErkE4BO5nkaOGygqSupIusnwtIWDG4yP:5BmHX3voZDBWkk7RatJ4pIusncyP
- TLSH T163334B00B61076B6D6D666F073E607F357F6B8850BB500E3DBFB48E65B105D3A23A60A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/_bz2.pyd
- Size 76KB
- SHA256 c5b60eaf4bdf8cd9f4766f77951200ba80332f76fbe462a65300e495710c99ec
- MD5 5dedab6e47c950a6cb82680a0d415585
- SHA1 17d1781d9e5f0cc1b22ed4a81f67645cbb11ba37
- SHA512 90c2bd107c8f97a3420a5b349686dd1be363ffbb14113fcd0e84bd14268bb7000e50c91c5793a999a610ec00d706e73ac81f9e21f998bc539bb20b08ace59dcd
- SSDEEP 1536:6WdOR0H3HbILomue8YsAgU8kQbDZTaKFq8WlLGa6vsuXNy+WIBBN/hUcIg3f5Bkc:uebIfoZpxbRDOgTxxIu4VjtGRN
- TLSH T112736C45EAC2169BDFAA017422DCD129973DA6304348C3F3CF665C295E91FF3A538267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/_ctypes.pyd
- Size 102KB
- SHA256 261fd41068e65f544ca1279b0bd46b5b7287e40b16504b1eaa63a9f6719de8e6
- MD5 ebbb4515f7f9ac0ab8da31ab6eaaab2d
- SHA1 39c790e4b52f814ed7e6510b2f407ceb1f771f06
- SHA512 0b1b1a9ce6fa3db6a36dca1b52b76a766f8f4c42a2cee4a0b33f14ab931958cc070ccc00287f0781c9ef82413f8ff34a670c4ae78ef86a2d925a60fe3c6b8d18
- SSDEEP 3072:OSHL9ALvi0l+doEyXC/zsY+2yNIuVP3+Y:/JMqPQC/zsp2yD
- TLSH T1AAA36D42BA86B026DAC7D4BD73D6CBB1352F70544F7A14F36AA9048C41F49E35A3D38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/_decimal.pyd
- Size 214KB
- SHA256 c94e12e3eea72469e7070d7e0d9c444ecad1234950b3006864f83adc76a16119
- MD5 abe463f963ea8b30ac8e80f9cbc901cc
- SHA1 4d822c9a19c93ac08b5250ddf9e22fde2dbce3e5
- SHA512 1b48a1a3f7628003be90290db7340c313d3b4ff7f194774ffd7e5a96953b6d5195f4cbd231c17e7722bb7be1ad420104de267164fb595237e64d32d02108d765
- SSDEEP 6144:Eudv3/z+PgH/NQhg9sG3ZpDlqZUh3dbWRg1tm:Eud//zXH/NX9zpVXtm
- TLSH T110244B21A503F039E4E612F1A3FFA9FA81E9717443A684C367E50D499F506D37A7A38C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/_hashlib.pyd
- Size 31KB
- SHA256 23e4e24bc65a5ab78cbdd3081e7314fd5b9adf9ad597163716f06146198ef4db
- MD5 e5a58b1bc77e05be1c1808d5d9705aa5
- SHA1 0026bfbb6d020b8894ff4b4630415d0b5c2e3f32
- SHA512 e43c55882afe1e7cf376aa6a79da3d8f6007c54dc4bb2279efaee721cbd78bf1f4aa578ed7f519f1a7a5584b001b58eec8f68dc98729cee9fe21c864f5e93858
- SSDEEP 768:3rY1jLpG2SE1IdkZm59ZCOWSpIusIpHuCWDG4yfB:3r8jL42SEqdkZm9ZCtSpIusIFuHyfB
- TLSH T11DE25905FE5088F2DBF601B834D1D7637939FD300BA590C3A3CB85CD49AA593B63662A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/_lzma.pyd
- Size 179KB
- SHA256 050435d4b43d3a193682f21720ec98037c32947367a172c908fdaad0351b8dbc
- MD5 4e6aa16a3cd862f73fd112860f7c6c90
- SHA1 560d2a7948f3f20850dbb5fad5b827d00ef93c87
- SHA512 8ee8349e22bf5265ed58a76bf62e3399eff64ad51a6e8ef113eb6e5c41bc7e8c440ef27102c5d5038e04b1056b989d20738594bdd3950cf13d4def0f8b404255
- SSDEEP 3072:qrHtIsJfUmJbnAmhDaHymrTEo5sPcMS+BPkG23pS17tvtjVng2Do1WJS1zxcNt73:UtUmJbnAmhDaSmrTELM1WkcfXYOxAyII
- TLSH T1D804F5109950F0BBF6E20CFAD9675A7B8AF85625433115CB04CC1BACA70F7E6A931B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/_multiprocessing.pyd
- Size 25KB
- SHA256 15dfe9ddc84d4d8786bb47b220a47c014de754a5855fc3a427facd8160ff5d30
- MD5 01da8c8c5cc706031c4a8a0521885506
- SHA1 d715493f1e106ef4dd6975a9e414b7b99e4f8238
- SHA512 2ae0d1ecab3dff1b06b847dfab2a0e78fd1a5dd3a5b925c526e30c392942418dfaa02cbbb0334fc30668b3a4d76bb7a91a7552b4d259efaf54ee187ac8d31b35
- SSDEEP 384:bqfCIsQpmteNeuAI6kOyjVdEUlTlspcq9JZ5IukBL2nYPLxDG4y80tC:baTsZeNkkZjflBip9b5Iukt2WDG4yE
- TLSH T1B0B25D41BB1050F2EBA209B030F19D579E7AFB520BF4C5D32F6AC6410F615937E3662A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/_overlapped.pyd
- Size 35KB
- SHA256 88085db0f4793d2ea35dd5745d5b892180fdd8af244ddf3cfd182654184bda7b
- MD5 b58fc6926555029930d3e8699ee80f63
- SHA1 159918dc46de2b74f2f548b007e72ef9c46bf42f
- SHA512 d7480d66d75346b20cb63deb4ce3ad811914f3f6d4c6c20209a091d8e021d33993d4f3282a3a868f65cfa9a701a71aa114eb8d4e00612a631128cde269520374
- SSDEEP 768:JfHpnzcgRUaB8IaKkAvg3jKyiXlAtJYRIYvFIuJtbrKiWDG4yP+q:JpzRUaB8IPkQG2y2l06rFIuJtb4yP+q
- TLSH T10FF24C84B6084093FB97187475F16E23BA28F3E05BD094D7A76F824E4E515E3BA35329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/_queue.pyd
- Size 24KB
- SHA256 728267523c58071d6ddbfe5892f31a27a5f17bdbfc331a6550310e4a99b4cee6
- MD5 da018b3fd1038f675385601173081e73
- SHA1 eef0d8278d6ff516769aa447b805e327601a9703
- SHA512 4824e495683d36aab02decd62110dce7fd1e2e8f9ede4dc69e5616b0a59fbf9386d552a8a627e992f817220aa1cda54310ac88a9fa5200f9186ace61a2a18504
- SSDEEP 768:zqqdTY0pFAk5D9vOWJ6rnNIuqUbWDG4y0F:GqdTY0okR9vt4nNIuqU2y0F
- TLSH T1E2B26C41FB2054B2EBF344B034F69562EA70BA405BD488E3771A86501E657C3BE76A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/_ssl.pyd
- Size 98KB
- SHA256 23ba11d7c97fb805cf3449c0a0ad1cd74628a6c881fc7685af24b8d1e4a49feb
- MD5 7d0c317ca387585ac223ef73be0d55fa
- SHA1 15b3a8675bf73a755098027efd528c3263dfeb99
- SHA512 dbcca7d884b30d3db2bd84d50481c01dda94f4ba97a56770c4093f738ed79000475c07cdb3e5f062a71d943d1fec99f744dacd6a0e0c0da2216695e3d455ea44
- SSDEEP 1536:eglqA/m5LaIzYvsxfYZbpkf/QGoqIldihZpfEM5MxIu47KsB1yFvx9:eQqA/mh3zY0t3oDihZpcM5MxIu47Kscn
- TLSH T176A36D11F100AABAE7DE04F5B29117A76AECE110279594D3DBE719844F3AECF5A38303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target GLensReports/backports/zoneinfo/_czoneinfo.cp37-win32.pyd
- Size 27KB
- SHA256 bb0d2e9e5a35c3f9368803e22d3ebd3c9b56ba7b048dbced4191b9383caa725a
- MD5 eace7539dacfc651ad9b729fc612c421
- SHA1 b2e7f8ecf489b07b878166b80cff62a2ba378669
- SHA512 47d183be18f7b2b2562ab930de0b70e3f63140da6a29039b06eb755e4363c109879f2c8054ffbd71ecc3da3da94977f17bdee9d0c7aa26721a0644038b6f18ec
- SSDEEP 384:bCE8IqkjUjmEKz+rKQEPMVKyrHGyvFGrY5ndzBxorBS0vbduuriOZPs2UFik:bCzkgKzhPeKyDhGE5nd/oVjpnps2UF
- TLSH T11BC239026B4176EAD6CE11F573E397B759E1B888076380C3A7E219CA4A515C3F23D39E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _bootlocale.pyc
- Size 1KB
- SHA256 f5e8174eb4e88ddbad91d98fcda319bfc6a9fe6cb320308e86dcc84b4ffce5b5
- MD5 b8eec4d32399bd189f3fc70bc6074efc
- SHA1 93ad59b397d7ece7c33bae1bb188c17e70a6f17e
- SHA512 850b4040c7f814ee7491f82223a14a48fc5da36f94c9b61b8c2bffeac526e2fcfb763d2a1cb025e90d20bf65feacb6329330645002d2924b6f285f8b92002545
- TLSH T1D321E1422F41AC57FD05FBF0B645D32D4AF759184A2BB6461F07C26A2C0D2AD7D811C9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target _collections_abc.pyc
- Size 28KB
- SHA256 c8a5d0d2e600d95e737b193aa98651c2f6090e11c424ccd49a9ffa00a1bb7206
- MD5 12a2901ebabab648eae62b8003f9060c
- SHA1 b243621f2ce10bde2658bce1235804e2d26f6b9a
- SHA512 81f75cbdb25ac27d88ff3cb6284f2cc40f19f4a660893235e5b9b85723c28d2d9e7975435b5fcd4b48e41468d215440f1f5e9bc556ab98045e3bf944d301bc70
- SSDEEP 768:Rt89e6Xn6sQsimZlN7ZY4YhK+GRJ9htqmEpYXRmC5ipi:Rt89fHimtTGHcQT8ipi
- TLSH T129D2652572E16E67FC44FFF84226892CAA2A8671E30AD167740FD56D7E0F6C07D5C8A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target _weakrefset.pyc
- Size 7KB
- SHA256 ae1871a18f25af1e823c26ed9d226f4371c951cbc8104a4f1b30bc8a05f6d423
- MD5 04e3cd14e5d9aea8c317c95f0ab2b460
- SHA1 6b8ccddeb85b6c0bd8420b9e0bc0239f9fc40655
- SHA512 dfbe720aa8195fcc2c5c3c6b7a76339ad997f7e867ce629eb9c6dd75cd7d1377d0092b970b77b413e0ca1c2ee51532247e0f6e4b36e7d073f6e68f7a4a9f2612
- SSDEEP 192:4/+yKRUHtqqWe2qEqEqR4ZqaqoOqhRgqAsqnqX+qHqZqZJqtfEqYwCqJq1XMFWqF:4/1WUHtqqd2qEqEqKqaqoOqjgqAsqnqC
- TLSH T119E18AC8A199BD96F87DF3BC41D6021DB137423282DDA212743BD0B97BCF6D84D54899
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10