Overview
overview
7Static
static
3windows_10...64.exe
windows10-2004-x64
7windows_10...64.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3Uninstall.exe
windows10-2004-x64
7Uninstall.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3bin/ANN.dll
windows10-2004-x64
1bin/ANN.dll
windows11-ltsc_2024-x64
1bin/acyclic.exe
windows10-2004-x64
1bin/acyclic.exe
windows11-ltsc_2024-x64
1bin/bcomps.exe
windows10-2004-x64
1bin/bcomps.exe
windows11-ltsc_2024-x64
1bin/brotlicommon.dll
windows10-2004-x64
1bin/brotlicommon.dll
windows11-ltsc_2024-x64
1bin/brotlidec.dll
windows10-2004-x64
1bin/brotlidec.dll
windows11-ltsc_2024-x64
1bin/bz2.dll
windows10-2004-x64
1bin/bz2.dll
windows11-ltsc_2024-x64
1bin/cairo-2.dll
windows10-2004-x64
1bin/cairo-2.dll
windows11-ltsc_2024-x64
1bin/ccomps.exe
windows10-2004-x64
1bin/ccomps.exe
windows11-ltsc_2024-x64
1bin/cdt.dll
windows10-2004-x64
1bin/cdt.dll
windows11-ltsc_2024-x64
1General
- Target windows_10_cmake_Release_graphviz-install-16.1.0-win64.exe
- Size 7.7MB
- Sample260905-ak5tyaba24
- SHA256 46f3b8b412a79915cf8e08bdce6542401bd9efca98ce282f3c5c5b56211e1761
- MD5 3044a866f496821c4eb89e861ceefafd
- SHA1 446664a27d6a6731a8c3287dd2db6a58b051194c
- SHA512 bfd34a0ce08f57cdd1c7d8808b403c8c20fa73c00af05d4dfa6e215cba070a31806649304e7437e449a1e2b3e6114d85c8b38b6c1f3e5a56464968036421fc36
- SSDEEP 196608:OMsGXOIB/AJm0qdDMJcFUqgUsoRWPpGORO2z24:mY4JmldD72qzWPAeO2C4
- TLSH T1D0863358A3ABF383D2296A367BB35A9B4DF932534405D8C37FA021106FB5D50DE2D782
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
windows_10_cmake_Release_graphviz-install-16.1.0-win64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
windows_10_cmake_Release_graphviz-install-16.1.0-win64.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Uninstall.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Uninstall.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
bin/ANN.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
bin/ANN.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
bin/acyclic.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
bin/acyclic.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
bin/bcomps.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
bin/bcomps.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
bin/brotlicommon.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
bin/brotlicommon.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
bin/brotlidec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
bin/brotlidec.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
bin/bz2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
bin/bz2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
bin/cairo-2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
bin/cairo-2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
bin/ccomps.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
bin/ccomps.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
bin/cdt.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
bin/cdt.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target windows_10_cmake_Release_graphviz-install-16.1.0-win64.exe
- Size 7.7MB
- SHA256 46f3b8b412a79915cf8e08bdce6542401bd9efca98ce282f3c5c5b56211e1761
- MD5 3044a866f496821c4eb89e861ceefafd
- SHA1 446664a27d6a6731a8c3287dd2db6a58b051194c
- SHA512 bfd34a0ce08f57cdd1c7d8808b403c8c20fa73c00af05d4dfa6e215cba070a31806649304e7437e449a1e2b3e6114d85c8b38b6c1f3e5a56464968036421fc36
- SSDEEP 196608:OMsGXOIB/AJm0qdDMJcFUqgUsoRWPpGORO2z24:mY4JmldD72qzWPAeO2C4
- TLSH T1D0863358A3ABF383D2296A367BB35A9B4DF932534405D8C37FA021106FB5D50DE2D782
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 31944b93e44301974d9c6f810d2da792e34a53dcacd619a08cb0385ac59e513d
- MD5 5f35212d7e90ee622b10be39b09bd270
- SHA1 c4bc9593902adf6daaef37e456dc6100d50d0925
- SHA512 7514810367f56d994c6d5703b56ac16124fab5dfdcfbe337d4413274c1ff9037a2ee623e49ab2fb6227412ab29fcc49a3ada1391910d44c2b5de0adeb3e7c2f0
- SSDEEP 192:E4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjaK72dwF7dBOne:tn3T5KdHCMRD/R1cOnrja+BO
- TLSH T187622B55738488F3DBE2003E785237079B995565B4929ED2CA275FC6687B08D7EB2303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 a6919f5f3b53a9c8c015413babe7a9872491a2583e49bb3c261e60785c3c3534
- MD5 26836307758e048d1ce0afe754d6a972
- SHA1 23a8f45cf5e2ad78add3c4dd3b3cf15fffced2cc
- SHA512 aaf7cfbb9c6951b65bd377db401617812f1d47960a01ae99164183c642fbd8f1ce08720bc92d26b642da5433b80720dfcd96280a162decf678139966be132746
- SSDEEP 96:IgiqVPb3X8K8Kdr3gEq6nNdMk6Qiw290+q6LDtJ1tk3hhEl7y:IgiqVPgK8K9eIdE9B/t8hg7
- TLSH T15AF108BAF3C005B3CB8F86702853BF074B56E630535561A39B5341CA75D18A3ED38321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e
- MD5 fccff8cb7a1067e23fd2e2b63971a8e1
- SHA1 30e2a9e137c1223a78a0f7b0bf96a1c361976d91
- SHA512 f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c
- SSDEEP 192:xPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4v:g7VpNo8gmOyRsVc4
- TLSH T116326D5503504AF3E996863C00263B7FAF796A2095F14D53CFA394C0FE2E5C9AD38352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 943b33829f9013e4d361482a5c8981ba20a7155c78691dbe02a8f8cd2a02efa0
- MD5 acbda33dd5700c122e2fe48e3d4351fd
- SHA1 2c154baf7c64052ee712b7cdf9c36b7697dd3fc8
- SHA512 d090adf65a74ac5b910b18bb67e989714335e7b4778cd771cff154d7186351a1bebbc7103cca849bdfa2709c991947ffff6c1d8fdf16a74f4dfb614bce3ff6fd
- TLSH T19F81627B93E01DF3D4580BB700974CE7A2B5CE701751011F4A4B5A8A1190E37ECAEB19
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Uninstall.exe
- Size 177KB
- SHA256 962067398ff1b69f7e0237e7ba479f1fc8260253bd65428f0447be0d2b5d4afe
- MD5 40407e9c375b2783cf9c0b14b66ccb08
- SHA1 03ebbc68dc3080bc3d8fd12db5e94068cd108a87
- SHA512 0ba2b2f8934708a7eff78a2f62f6b4b20221ed61f2d351099e28bb5405416b2aedceca38fb673453eadbcbfb5a9f0fdc9424aca0515b00dfaba4503c854779c5
- SSDEEP 3072:Fde3GHdi4uoF8cGVIhf6DJzRZBYDp0GS1YH29WtdSHHby/GG0yyKQucj:Fgsd4DJXIHgyyyoKQp
- TLSH T12F04E1546790D466D1190A31DAFECBD3AB73F91111184B83FB44B72FA933A45ED2E382
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 943b33829f9013e4d361482a5c8981ba20a7155c78691dbe02a8f8cd2a02efa0
- MD5 acbda33dd5700c122e2fe48e3d4351fd
- SHA1 2c154baf7c64052ee712b7cdf9c36b7697dd3fc8
- SHA512 d090adf65a74ac5b910b18bb67e989714335e7b4778cd771cff154d7186351a1bebbc7103cca849bdfa2709c991947ffff6c1d8fdf16a74f4dfb614bce3ff6fd
- TLSH T19F81627B93E01DF3D4580BB700974CE7A2B5CE701751011F4A4B5A8A1190E37ECAEB19
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target bin/ANN.dll
- Size 831KB
- SHA256 8bde812752cd4f1a554437d3498ffcaf2400fa79574f941bb39e01c2fdd0c811
- MD5 4f1c5ac770eeb8f2c3fd2e3a773f9466
- SHA1 bef07d81e81f7b1e5b8b3bfeb54c2b23f1a27778
- SHA512 3a8dac31af15e6be33375bbfaf10e29fa4f26399652b0080c4ffe8ef8366b481f52c1f2182e98d42bce1ddaf81cda73fb94c8a4515c6c94d32ae7293a5c60bd9
- SSDEEP 24576:YbcADwpZuxg3/3GgEZADo9DXDXvZYPlu5mg:YNe4rDz/ZKU
- TLSH T115057D1A7A5841B5E137D03AC9975A46EBB1B8069B31D78F13E4036E3F233A15A7F312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/acyclic.exe
- Size 12KB
- SHA256 404741709c85b6e6f6c443da5d8b5b2492759f6afdf5b07d40da74beff6ae05a
- MD5 178b619d2fbc205d864864372193fe35
- SHA1 78b5982d17bc6a376566a1ec0abfe7918dfd2b9e
- SHA512 13899ef15487e900b3e98024c1692e280b9af585120e85e6f5f3af2564968626064c69dda6c8b31f9f3370fbd36eab320256f9a5f29e0f3276755ab06c14cff9
- SSDEEP 192:UqSHjuC8oKIPqxwzCP3fIv9Vo4qxfsQ5tfFgLT1:Uqm6Dfc8wAfIlVo48fsVT
- TLSH T168423B0ABB4708F9D525837188272D19F43AB73017B243DF9778A1191FB23D0AE66BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/bcomps.exe
- Size 19KB
- SHA256 cfe84895930e6069cf03e5b8238bfe9f139aa3ef1f4df176db9ae1b786fd2cf3
- MD5 c54c2d50d86799f80e6a3b7c19ad0490
- SHA1 9ce0926b997d347660f416cb1989259922f9cb48
- SHA512 57faf109dd40c2def010e158b1cf1415d380d76bb7ba6c6972399d3172e012de1a83ee7eddf55df5aad63c72c78d14fc871092339c2ceb23aa01a6950ea3aab9
- SSDEEP 192:HOhU+JF7VDigfCTOP5O/1N7CA9JsQ5vF3XC3/HzjywRUgXSdLXJaSsQ5tf4gIM:G/1PQN73CA3X4TjRUgWJaSsr
- TLSH T178924B49E7580AEFD137E174C112684BD0B0B61423615BDF8B9287591FA35C0BD3AF4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/brotlicommon.dll
- Size 134KB
- SHA256 018506599694ec21655b0f4bccccfa6867b1b6407718971da9f46ba0cecae6ef
- MD5 3ce2f23ef1117d07b86bcdf9ae727c03
- SHA1 ae2a3082348e45c72606badc0381df25ced29061
- SHA512 c01efd102fc0a365c2ddf4883741ee963948e77eff7fd7f503dba47f9aa75608288b6a00aab0c34d362f2acffbfac8d62869dea3b7b3e13e1dd4b525c71a61f7
- SSDEEP 3072:8vaA4lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxB9:8SA4AhdNorGvHdbi09GJ3
- TLSH T1F5D37BA1F3050736C26B227AE45A6BB9F33582B593670551B4A9026D20C3CE4873F7FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/brotlidec.dll
- Size 49KB
- SHA256 f8c378e342b59279eca07ce22bb94a4d9b0ed924181640ceac918989cd40a5b2
- MD5 f49f531c764127326902958aad152a55
- SHA1 5fc16c44db8ecf104229b8a9b253bdd08c010dab
- SHA512 f5d261ff642d96a13505a7a10d33cdbec329e6d717b1ed4dcf6351f22d15988e419789f6b2af1fef9b97b1f078aeae35df4bd054a00e3b1bd39b4522ace35902
- SSDEEP 768:N7+05FSiwjZef+O11S6q6/D/CIoazQxARbYs30pobF:N7NtiZC71Q6q6r/C6DF
- TLSH T1ED337D4366A64A59ED278138C777E25FE37B741E6344F3EB9290F5353F076A022B1190
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/bz2.dll
- Size 73KB
- SHA256 85e3be4d6bcbd3685b1a5362100ce8f907e9fe9dc92d6fa53703a8da9aca5cff
- MD5 dc3aee8e0253b90330235ee20efc8961
- SHA1 21c56811a10187dddd4b7ff677c0de3ebfd9d7e9
- SHA512 7d02333aacbe2e71c8d4d840278362e25c4c9c28523e709703c78d7998fa3fa6b3c3b39cb4a70c9643bd4e0925e212d72fb63d20936987206f6ee55ba3fa9b76
- SSDEEP 1536:ap1oVElL/Wp4AWuVZ4nm432P8/dB8j8UJ9zX2rE8:nmNurllP81BqJ9zX2rX
- TLSH T11E734B81B6A3AB7DC99B82354627070BDB35FD2C0B7117BB25A08B7B1F12B920DB5315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/cairo-2.dll
- Size 966KB
- SHA256 2a2738f1a4ac92f59367edfdd34ae67005ad7be9ecaf1bf734c3160bca25d9c7
- MD5 475efbffa3b35c5ed1bcebdef32ba5df
- SHA1 66397c89abb94cdad47d7956e20e51c5d2fd482c
- SHA512 3de5d8b77b16c4e10108ab0fcdf607162281ad5b3ee89d2c00bea1b1f1a75d1e597decbb928cdf65478843627b20aab7b974ff1761423e59b619b81704980163
- SSDEEP 12288:RmRGrkp5hShltfadWEPIHQrR15MSqXQ2TvEN5pdgG+bwDmpcWY64GGK/vs:RuKkw45IHG5rqZTvs5qbwYcWY64GGyk
- TLSH T197257C46E26501ECC467E07CD22BA217E7B2704213389ADF57A1CB652F27BE1767B312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/ccomps.exe
- Size 24KB
- SHA256 57a99d03aed0d9da44d867dc91382e7b8bf88dd9803d0013b05f569cc8d559e6
- MD5 f3a121efb1d694238f24fd955661c6f4
- SHA1 78f86d05a31dd00e562b4cf0bf904c225447d6a7
- SHA512 d5992180980b19858b28bb2a42ef15599db2041e3b094cc6f0029ef16974f8cd19b1405d1dc0b8cdd292f70007134b6ec32588e8934c6233ace963d845f6a921
- SSDEEP 384:OovyQAJ97VOjLoq69MGPzGerxDrlAT9OyS+nDBUsOWJeN:bJ0FVILoqLKz/lAT90+Gs9J
- TLSH T165B25C4BAFAD04EDF5678038C922182AE2B1748873A157DF4BD2D1150F27BD29739B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/cdt.dll
- Size 19KB
- SHA256 7f9d4dc775c6bdb43426a39d73a42cc84e3679090db0cac25158f7f90c74b84a
- MD5 2678d7ed84e5cdfe24d2e3a1432c11aa
- SHA1 ac6cfad1666731bb1a0b8dd02cfd8d17e0807fc0
- SHA512 610a2006f46d87188a1be57b44b1e7ee2af210cbfdd51912fdc79475d22c8260e97ad20e2d27b65c9dbdd169d5a41d961b8910018c96257cd35dbab57a8ad8df
- SSDEEP 384:NpWXFO9aKgKLI3cZNI18idO0GG9t92ttgljB:gIU5M7IWidO0hB
- TLSH T150923B9AF6A405A4F86AC13C893B5A1ED3B6B56527225BCF23C006AB1F23FC2557C741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10