Overview
overview
7Static
static
3loader.exe
windows10-2004-x64
7loader.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3resources/...dle.js
windows10-2004-x64
3resources/...dle.js
windows11-ltsc_2024-x64
3resources/...der.js
windows10-2004-x64
3resources/...der.js
windows11-ltsc_2024-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-ltsc_2024-x64
3resources/...fi.dll
windows10-2004-x64
1resources/...fi.dll
windows11-ltsc_2024-x64
1resources/...zip.js
windows10-2004-x64
3resources/...zip.js
windows11-ltsc_2024-x64
3resources/...der.js
windows10-2004-x64
3resources/...der.js
windows11-ltsc_2024-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-ltsc_2024-x64
3resources/...der.js
windows10-2004-x64
3resources/...der.js
windows11-ltsc_2024-x64
3resources/...ter.js
windows10-2004-x64
3resources/...ter.js
windows11-ltsc_2024-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-ltsc_2024-x64
3resources/...ter.js
windows10-2004-x64
3resources/...ter.js
windows11-ltsc_2024-x64
3resources/...nts.js
windows10-2004-x64
3resources/...nts.js
windows11-ltsc_2024-x64
3resources/...der.js
windows10-2004-x64
3resources/...der.js
windows11-ltsc_2024-x64
3General
- Target loader.exe
- Size 67.1MB
- Sample260905-pctt2atgnc
- SHA256 2aa3bca54d0fd524714a153f1b4d246ef6b12c4b22112f275e89c608bf5f7507
- MD5 d9ca0401fc92e5107232397fb6533b25
- SHA1 137faf0c5adf5d99e8cf146ba82f8c09f333aa6d
- SHA512 f265c3c67d062c69d65136936cc8a27c7e7b428aae9028d543127723ab56cc41c8ab0eed6d1edfd1ef362cd167f8891f66ee779694411bd9c4538e7dacbc56f3
- SSDEEP 1572864:bLdk3TDBvIhAxrHi0XGCujmTJNsMWaCwTIqf9J5bf7:b23nRgAxrHiAuSTJzCwTJtbf7
- TLSH T1F5F73373D3055940F941ADB7D57C0E70B5872B99832F06F276DE27EEE0EAA418B8112E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
resources/app/bundle.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
resources/app/bundle.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
resources/app/loader.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
resources/app/loader.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
resources/app/node_modules/@koromix/koffi-win32-x64/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
resources/app/node_modules/@koromix/koffi-win32-x64/index.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
resources/app/node_modules/@koromix/koffi-win32-x64/win32_x64/koffi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
resources/app/node_modules/@koromix/koffi-win32-x64/win32_x64/koffi.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
resources/app/node_modules/adm-zip/adm-zip.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
resources/app/node_modules/adm-zip/adm-zip.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
resources/app/node_modules/adm-zip/headers/entryHeader.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
resources/app/node_modules/adm-zip/headers/entryHeader.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
resources/app/node_modules/adm-zip/headers/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
resources/app/node_modules/adm-zip/headers/index.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
resources/app/node_modules/adm-zip/headers/mainHeader.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
resources/app/node_modules/adm-zip/headers/mainHeader.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
resources/app/node_modules/adm-zip/methods/deflater.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
resources/app/node_modules/adm-zip/methods/deflater.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
resources/app/node_modules/adm-zip/methods/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
resources/app/node_modules/adm-zip/methods/index.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
resources/app/node_modules/adm-zip/methods/inflater.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
resources/app/node_modules/adm-zip/methods/inflater.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
resources/app/node_modules/adm-zip/util/constants.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
resources/app/node_modules/adm-zip/util/constants.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
resources/app/node_modules/adm-zip/util/decoder.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
resources/app/node_modules/adm-zip/util/decoder.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target loader.exe
- Size 67.1MB
- SHA256 2aa3bca54d0fd524714a153f1b4d246ef6b12c4b22112f275e89c608bf5f7507
- MD5 d9ca0401fc92e5107232397fb6533b25
- SHA1 137faf0c5adf5d99e8cf146ba82f8c09f333aa6d
- SHA512 f265c3c67d062c69d65136936cc8a27c7e7b428aae9028d543127723ab56cc41c8ab0eed6d1edfd1ef362cd167f8891f66ee779694411bd9c4538e7dacbc56f3
- SSDEEP 1572864:bLdk3TDBvIhAxrHi0XGCujmTJNsMWaCwTIqf9J5bf7:b23nRgAxrHiAuSTJzCwTJtbf7
- TLSH T1F5F73373D3055940F941ADB7D57C0E70B5872B99832F06F276DE27EEE0EAA418B8112E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app/bundle.jsc
- Size 1.0MB
- SHA256 4ed1f55274af377e491ab6be8091e2188cb7a18f5cf17b9603c23cc879554f74
- MD5 8f19c21bb6528f58c75dbe520d2b5af1
- SHA1 033db955199311ae4f4ca4faa0bcf3efe9d334cd
- SHA512 30dc528f4d4f59b81fce72fd423d6b3839fc0401d1d8b8fd0413876934daed4a823ed3e701dbeb049daa382f37fe0534e8c1d96de252251c89cc0c2fbcc85589
- SSDEEP 3072:TqBv4xaiLvYTaKUxXUzMGlQcaY0sTk17vU/ikv7UF02xntuUdbwU+6L:Tm8slDikv7UF02xtuW
- TLSH T1A23519959297D96CCB73124CCCFAAD0CD06538618E8D906EEE37664193EFA707ED0728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app/loader.js
- Size 183B
- SHA256 195136147a5049f4af25bc27f80e92a531373bc7ca667325f407f3fa79a13433
- MD5 30c835fbd9b01d0daa6cff7eb75d7e40
- SHA1 a52a408dbde427eec8c5545c7cc0017e468b7d90
- SHA512 e0bc6e474750f4d6d53bfd3c50861f3a638665082fdfb9c3eff178731d8d27dd6fd630ece58c3d17c5cc9de8caed8ffb29f794a3f074bb2c7809337ee4aca2d6
- TLSH T12EC012448761D45E51A192A5F158145738C3C05023059534C0A58ED95B86DD50A6586F
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app/node_modules/@koromix/koffi-win32-x64/index.js
- Size 52B
- SHA256 f9991ec70a0f775487ffadc2461d69edd1555e3d9bf80de0bbdd2eec7d245c49
- MD5 9ef0f57aa4c79713cd79def89909e55f
- SHA1 380b8f5c86294ef42f983464b04f98f16c44a9c8
- SHA512 997833faf54e78b3da0a25c31474c4038edca84e730834d4789b498421f479193d8166e36323ffa4f733518e9e779414471ba9b143babba0ea2f5d5104c36423
- TLSH T1BA9002461690F199A2684594D3D195022C85D4C01C094B0145058DE51C548808905CA1
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app/node_modules/@koromix/koffi-win32-x64/win32_x64/koffi.node
- Size 824KB
- SHA256 96d76a15753e6588abd7a4494985230b795ef8490eb0ebaeb255836bacf2b211
- MD5 6072c21ae391eb22694f632a732c2b31
- SHA1 f31c2e4d2850916c1003ff06c4732d177a6512ef
- SHA512 a105c21e8a0fce0452b5a8df39410404b8933ec6a8a0c23f6bb8d22b1beb481d6076a73aa77e4be4bf0d2eb22d5dfdfc652174727b8081f6a7482d7775c19892
- SSDEEP 12288:kBpfmrytFNXrfKh4tReyXeHlvW5JKck61mq/0yNs82JbdG:iOOt3rKitReyYlvW5Xk61mq/0Mp2J
- TLSH T1BE053A43E61A50DDC96ED1754F3BE221B461B849033DA997EA5CFEA02D12B7C233A374
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target resources/app/node_modules/adm-zip/adm-zip.js
- Size 37KB
- SHA256 ddc2c82e58df0054ab2f55153c09435ede4ff593b29747e850d3d22fb6eaba97
- MD5 e4001f89c3c31dd70df8ccf27c1063cf
- SHA1 a955bf9b849ed8690b73fd92fba64fc3e0133156
- SHA512 091bcef6fdd85fb9dc27849d007a484013bedddf6e29354b7f72e960f51ec318199a5aaf308ad6edde3e96bdf4888503b189ccc01d4109fdc5c0d84a300d4e22
- SSDEEP 384:go4Xg+1yf94EAOOLl4ElSFRcgc+EAZDISb+BwkfViCbISV+Ckah1QSqdCC/OctjU:gpg+1c4/4ElSFjEFwi8PILqdC92bU
- TLSH T16C03744A2DF2132145B3B7785B5F9004B214E52F621FCA90BD9DA3A43F9973856F1BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app/node_modules/adm-zip/headers/entryHeader.js
- Size 12KB
- SHA256 6ed1ec82e6124d71dbfb4ee6e5dd4c975657854354cf74741427a1862010a664
- MD5 c2ed7e225f35caea66e6d0d1fbae8b82
- SHA1 c790d906c2270442ffbf427f8f9de1eb229a1583
- SHA512 a9e3fa7e94168b8004376023cc72908cbb4a9da6c3af2553d31bb4c5d87ef9b1313976631d8b65d029fd904698968a5d4685837ae85112b0947830ec730cb890
- SSDEEP 192:ybbx3fxLiIEycM9pWPrVP/UBq6krvJgS+PYfXEflR0QhzBf:yFfxXTcM9pWPBP8BqzrvJg5
- TLSH T1DC42FE4E6AE321981E06A0E9CB27E2497757B0077906DB087F3D8345AF8CD3DA5F16C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app/node_modules/adm-zip/headers/index.js
- Size 94B
- SHA256 536e4b5bf009a3d9f6eccfbbc4157cb6de663d889e0826ea5f6e5fa17aaeb8bf
- MD5 64bc889b89f1c8a04a698a8f74e24e5b
- SHA1 68781da04cf1ebc4f03434ea5b2b65f10cca07e6
- SHA512 9eb207fa61862aebd9cc5a89f85757313c7f163ea0f5a15c16250f79845b9caa1d8109bc3e634a9ed3fb0616c71aed3005ace48eff0941518c778c3063613975
- TLSH T1BFB0128D55CB764911340745E119BC811447C0D56110C370BC00036F16C50DCF75E574
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app/node_modules/adm-zip/headers/mainHeader.js
- Size 6KB
- SHA256 ed5a2b3fc7c8a6937e07447eb3e55e08a0655d2f24fe04039e7008845d221a25
- MD5 1d625a9788b8fd936afe0556478d85b8
- SHA1 de9ef2213b47a8327bf182128c180d0d67e4e4a2
- SHA512 1ea4c24ebc8cc04ed69f50b909464cbe96dc0aa459a2834080361dba134a77d916fe2622ee3289b6e1e20abc53edbc74ed129817a09697a325f487a82e6eeb76
- SSDEEP 96:riX/hDe6p2ciGzYwfoH7gNJzPIrGhbySbfo0lYS5iJfPokt:ra/hDe6pPwjSbQOYTpt
- TLSH T1C1E1E08FD5A233491B1AE0AA278794156379B203BD19D70C363D93407F8CE3E95A77E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app/node_modules/adm-zip/methods/deflater.js
- Size 1021B
- SHA256 6dc41b2460594cfa5136b797653c166b2f7403820a40f2fca17cca35a5de1b5f
- MD5 41fd6791497f7d74ee56a7753e08da66
- SHA1 bd62d07bfe703da89172fcfeaa8848d6ba5c68b4
- SHA512 5f16aeb477321470986a8c9807ebf3b75e979e5fb34156028ef56f44f38c4f4d72d9d086784e9dfedeffa61f91f973b6ac7e7ba1730eebd86bb549de2dbb4761
- TLSH T13211F9489EF32194B21B7796C77FAB0D927480131C09DD153D4CE2C64FA4E38D19EAD9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app/node_modules/adm-zip/methods/index.js
- Size 128B
- SHA256 d67714f1a04be942f90be77069af3ff4214aa8ee84b26edeff3a87eb0d8e2dc0
- MD5 74d54dda1e050cad9b31da325f92fb01
- SHA1 683b0412f3bdb3ae54cd809e37f456dade4d046a
- SHA512 88ff974e69207c427ce1c9161489a275c4328ba392da65b268614fd5c66ef9feb10dafe1464dcc5873221de61bdb045dcf47092760c973ec06825158978df3e6
- TLSH T1E9B09B8B19F575D9E2D416C1D133D0461483C0E213408750F11D017B1BD30C4056F9A0
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app/node_modules/adm-zip/methods/inflater.js
- Size 1KB
- SHA256 7b62c190669eeefd6b2810a3339d9109ecb219f845fcd12ae93518beec35dc49
- MD5 9672a7960c9e33f661594b34d711c55e
- SHA1 d8823b04170c194c7cb9f22bbc4482832c537375
- SHA512 1d3f374e5bf8d068b9c42f83d18a988b1576ea119856619d5249c6ffee060e716bcda44ca4e0a85d9027b8e38b19b041760914d4b77cdb7875a0f9753971a255
- TLSH T1642180489EB3519A762B7394C77FA60DA274C0132C08DD057DCCD2C58F98D38C69E9C9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app/node_modules/adm-zip/util/constants.js
- Size 6KB
- SHA256 208e943a2e5faad056047f3c7991cce3cde637d8e272a564f2546210ebdf2069
- MD5 9557c90a448baec12cf2cb2f97e2c5a2
- SHA1 19ece17c4aed05723601ec510ad2020fb462cf52
- SHA512 433a683e049a8d2fa321e9cf6932c2f5075c83f1713a9d0514956310174ef2959d0c8378a039d27d0a34f321262f6cf7eee40066ca54da1b57c5483b6d00f089
- SSDEEP 96:Dtbl0W6xP0XM0gly+ESo5Etdt0f2cnHBE8WdQx8Z5h+IrrOnQTUlZmsA:DxyWCsXM06I/uSjG8WdQx8Z5h7rrO72
- TLSH T129D1F3A6A8C824536A01C850773EEEF2979DEF0B59645214361F4E8C2F0C97C7FA66C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app/node_modules/adm-zip/util/decoder.js
- Size 130B
- SHA256 73a0ebb00c4dce2124f07acf0b34374cb03a4384cccd1cd6f58aee27c35953d9
- MD5 36fb8dd4a6ffe2655530fd6c9c8cf1e0
- SHA1 85e85bf9a92432ab576876334e64b026ab3aa18e
- SHA512 f7e6e74931b368ef0c78f9ca6798b09ef9804bd4203b19269ba5fae0190aa59ccb5d972d8993f63f1925f042f0f0d4d730c667646be2041a9989b5e802c5d1ad
- TLSH T1B1C09B5674F0206241B7F1485565EF0F64C876651E05547739519BC4454C53474725D4
- MD5 SHA1 SHA512 TLSH
Score3/10