5c7318d0c5d7a68a45ddddc7b63ef7155aa4365a03fc990cd6c7551fb0724ca4 | Triage™

Login
Reports

Overview

overview

7

Static

static

5

App/XYplor...py.exe

windows10-2004-x64

3

App/XYplor...py.exe

windows11-ltsc_2024-x64

3

App/XYplor...er.chm

windows10-2004-x64

1

App/XYplor...er.chm

windows11-ltsc_2024-x64

1

App/XYplor...er.exe

windows10-2004-x64

3

App/XYplor...er.exe

windows11-ltsc_2024-x64

3

XYplorerPortable.exe

windows10-2004-x64

7

XYplorerPortable.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...os.dll

windows10-2004-x64

3

$PLUGINSDI...os.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ce.dll

windows10-2004-x64

3

$PLUGINSDI...ce.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
5c7318d0c5d7a68a45ddddc7b63ef7155aa4365a03fc990cd6c7551fb0724ca4
Size 14.0MB
Sample260907-kmxlfssglc
SHA256 5c7318d0c5d7a68a45ddddc7b63ef7155aa4365a03fc990cd6c7551fb0724ca4
MD5 47706d3cd5dc28d74d08621d13c34fcb
SHA1 9452d92c110fd9d5be87306a0d3310c4bcab0f8a
SHA512 832af9c0135a27e41838ed530984dcea2f7158f0fa35c71f9f7b2b0f2b3d32b745561f0a8f3dcb31aea5fcb995da9a58941f75560f46682172c010c5b6a04953
SSDEEP 196608:gPpSH6UFg1I7Uoj0RvMUB2PWWUDfe+JR9QgsgaC5Ewlh8ZESD7sAbMq/u5TW:YSas7V7H2JR9qCyOhYTHsQJ/u5TW
TLSH
T137E6335968993A5142EDB1F3C36BB30CD4B362249767E773BBF2340E11AA58DB52021F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

App/XYplorer/XYcopy.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

App/XYplorer/XYcopy.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

App/XYplorer/XYplorer.chm

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

App/XYplorer/XYplorer.chm

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

App/XYplorer/XYplorer.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

App/XYplorer/XYplorer.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

XYplorerPortable.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral8

Sample

XYplorerPortable.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/MoreInfo.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/MoreInfo.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/UAC.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/UAC.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/execDos.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/execDos.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/newadvsplash.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/newadvsplash.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/newtextreplace.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/newtextreplace.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

$PLUGINSDIR/registry.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

$PLUGINSDIR/registry.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  App/XYplorer/XYcopy.exe
- Size 3.4MB
- SHA256 e335639ba441d6cc50e5f9f82157fa1844e491029cf4596a602b84688474f585
- MD5 02cee89af7e38e9bb6d12a7a45cbfe9f
- SHA1 2b3c1feb2ed2358af19dad3c020083479457cc4a
- SHA512 e80f79c8467211ac1bc98d39f58ae3eed9289b33ca88d50fe816c703a66d0719ed4e12a1497851b2e817ff144e2d8e518849fada7c8a636a0bbd5432566efdee
- SSDEEP 24576:tWTkrbpLsIXSMOj8Ldo3fwvqat+HAHvX2+EA6somRQq9bVxWUJsTuqC1dLuqsHfn:tWTw1dCM68XqeHvm7ds5QqocBC/abruD
- TLSH
  T1F1F595C7DEE184F5D741E1F945166B33C5303528E210AF12E3691A1DBA2C63EAE8DB78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  App/XYplorer/XYplorer.chm
- Size 1.3MB
- SHA256 4d9427cf7cc6aad291f313a4e7fb7bfaac81126e80e5ac7901ec4d044e4840e8
- MD5 90e25fef267dab73bbd563da14b52e54
- SHA1 46fc62f4d031174823041697fcfc818771a2d292
- SHA512 4591e870b9ae54eedf0b8ffcfe75b87007ffa4c784b683db1b6e172a59fa398f48dc83c080d89295f468adb64548b26e5b7ddaae75f7012a1b0b45c753bd77e4
- SSDEEP 24576:VoHNE9J3Vsfu98QsWr4rO+UDZkuXedYK9qaS04AxuuXJVSam+O:6H6J36u98Cr4yLWiK7qaS1AxuuV9m9
- TLSH
  T10B55335856877F83D261A6B3C5CB030C0A2E63D301D5D266BE2DB7EF016A78DA160DBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  App/XYplorer/XYplorer.exe
- Size 37.4MB
- SHA256 45e0ec9a37574fb90bb06810ca27ba17d5dbc58d1f2b4d6e005318b8207dd1cc
- MD5 0144d245148c551ade159d35d881d5e9
- SHA1 763db0bbc7c9fd011ea1e09d28c587ba26d4764d
- SHA512 23393d1d05425d74468e5fb50870eb303ecfe1f06116604e6ab42f9b5915ad0dbf7a331370b769c647900c541f76ceb3528c38fdd0a8287e94c45c4f18f60192
- SSDEEP 786432:tRKiWJsNtXqgMIe0+s6bqW5N+5a3PrKzTjTlFL4edQov4S9eFjA//Ljr2jIz3U/F:D40Kx3BF
- TLSH
  T10E873DC79FD1C5F6E780E2F945165A33C1303524E202AF16D36A0A1DB62C67EA9CDB78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  XYplorerPortable.exe
- Size 142KB
- SHA256 440543f8affc8204c3ac106570941b1bb4a41b31ddb31389882cb215a3520f10
- MD5 c115eef7c34c116a73784e0be5bb02c4
- SHA1 6c1993d1520b35019f0cb0ef2788660922f8f6ed
- SHA512 c58bb9d373b1ac5e7357df52f0a8223003d32a3ce90e9e963fb19d56f0eb23531602f619f6a4a695d1d4ecca98cfa85948dcfbfa11e03ac4472d248191db4b76
- SSDEEP 3072:lqeqOYEUXPni6aGOZDBgWssZWiU3tHoGjLJizBX0JpCV94:kEUX4GkDB4B9HoMszBn4
- TLSH
  T163E3BF0257D59426E8E10BB169B2D6339B76FE111474E90F63C0BD9F3A33A83D928B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  $PLUGINSDIR/MoreInfo.dll
- Size 7KB
- SHA256 227a4fc9408a44faa5eca608a974bd536814f97b8a4d28b4cac479727167b026
- MD5 bd393029cc49b415b6c9aeb8a4936516
- SHA1 c67fd92fffd18941bed41bfd6ac4f3b04fd123df
- SHA512 3bb8e5cf4bea7e8adaa62196e58fff9031f49fd4efa78e5bd3e4b9c4e9ba1523864567521793053595d90abec719761a5964ff3abe04b93b24d52e5ffa4c1f96
- SSDEEP 96:LEjAlUFPxXJugoImuaKbkBSEPTpsxKaVQ4Ad:gjAiFPxXJugoImJKQk8yxKaVVe
- TLSH
  T1EEE1603263F441EDF9DB0B346C334B291D75BC21EA21957F2691098D3DB1A44EE227B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
- MD5 bf712f32249029466fa86756f5546950
- SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
- SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4
- SSDEEP 192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/
- TLSH
  T1DC3229328B60C1F2D561C274496B3A3367B9761420B04D67DFB78446EC16AD66E3E327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/UAC.dll
- Size 13KB
- SHA256 c5ab2926c268257122d0342739e73573d7eeda34c861bc7a68a02cbc69bd41af
- MD5 a88baad3461d2e9928a15753b1d93fd7
- SHA1 bb826e35264968bbc3b981d8430ac55df1e6d4a6
- SHA512 5edcf46680716930da7fd1a41b8b0426f057cf4becefb3ee84798ec8b449726afb822fb626c4942036a1ae3bb937184d1f71d0e45075abb5bf167f5d833df43a
- SSDEEP 192:qP6KdXy+Yo7e1J8qC25a5mDFmCLGUCVGpU6uNck87I0S/TDqwyTq+:q/q3Pgd5mx6VkEck87ILCTN
- TLSH
  T1CC526C5421D84BBFD24156383ADB776346B9FB316C62818FC6A349CB6871693A93E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/execDos.dll
- Size 5KB
- SHA256 720be35cd1b4a333264713dc146b4ad024f3a7ad0644c2d8c6fcedd3c30e8a1f
- MD5 0deb397ca1e716bb7b15e1754e52b2ac
- SHA1 fbb9bcf872c5dbb4ca4c80fb21d41519bc273ef5
- SHA512 507db0bee0897660750007e7ce674406acf9e8bf942cf26ded5654c07682757b07c9eb767bead0966478abc554dc9a6461c4288dc35d12cacfadad4c128f1bb7
- SSDEEP 96:J++xDiP4p7t7dNOt3stxtRFFXxGD6qxlnKE6ttdH3r3:Rx9pJ7jQs5toD6Cln/6tt1
- TLSH
  T153C1E73AF2E409B3C2A806343EA6A42B17F9D02B071409B7876321CC6CD0DB8FE74256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/newadvsplash.dll
- Size 8KB
- SHA256 0a70cc4b93d87ecd93e538cfbed7c9a4b8b5c6f1042c6069757bda0d1279ed06
- MD5 55a723e125afbc9b3a41d46f41749068
- SHA1 01618b26fec6b8c6bdb866e6e4d0f7a0529fe97c
- SHA512 559157fa1b3eb6ae1f9c0f2c71ccc692a0a0affb1d6498a8b8db1436d236fd91891897ac620ed5a588beba2efa43ef064211a7fcadb5c3a3c5e2be1d23ef9d4c
- SSDEEP 96:/VV0Rwtvrm2nQujIvP9dir3UniV/zRzVR3rN3k8Jd18tsPcaqhx:/VV0KtC2yH9d83BzVR53kEQFaq
- TLSH
  T17702C73972C169F3D26B05F82D526B2E0FEEA035135650228B33A4DA3DA0353FD26747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/newtextreplace.dll
- Size 11KB
- SHA256 156b9b583399faf13c4d46b89339fb0f7f38dc847ac2d7872178d8e3998b9734
- MD5 b5358341df2cb171876a5f201e31a834
- SHA1 df34750ea5504274be5ff8ddd306b49e302d04f9
- SHA512 821dc42e24fa2d44a1d4d16b26c3da2688dac0fa44a266e38da2aff706c91440d83a87abc74131930e6c38a44a0c5e627db2d045375fde147e0edd3276f4b014
- SSDEEP 192:GGhRfigbU26niqo9m+9k15AA1NrW0QfaDx3nxNLr6s+:GIwgSnhv/IaDx3n6X
- TLSH
  T11832965F729645F6EA2259B00FCFF67B8E90C005402B4F6CB79A896CB933E84710D195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 d29afce2588d8dd7bb94c00ca91cac0e85b80ffa6b221f5ffcb83a2497228eb2
- MD5 132e6153717a7f9710dcea4536f364cd
- SHA1 e39bc82c7602e6dd0797115c2bd12e872a5fb2ab
- SHA512 9aeb0b3051ce07fb9f03dfee7cea4a5e423425e48cb538173bd2a167817f867a30bd4d27d07875f27ca00031745b24547030b7f146660b049fa717590f1c77e1
- SSDEEP 96:M/SspqrIYxLPEQhThvov3TE4/2Sa5P9QFFYzOx4uF3sbSEI5LP39sQvM:M/QUG7lhvov36S5FcUjliSEI5LuQ
- TLSH
  T1A4C1E5B656D909F3E41D00B83E31241F43FEE5260B7A03719E8B2AC61CD2AB6FD58791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  $PLUGINSDIR/registry.dll
- Size 29KB
- SHA256 acb79c55b3b9c460d032a6f3aaf6c642bf8c1d450e23279d091cc0c6ca510973
- MD5 2880bf3bbbc8dcaeb4367df8a30f01a8
- SHA1 cb5c65eae4ae923514a67c95ada2d33b0c3f2118
- SHA512 ca978702ce7aa04f8d9781a819a57974f9627e969138e23e81e0792ff8356037c300bb27a37a9b5c756220a7788a583c8e40cc23125bcbe48849561b159c4fa3
- SSDEEP 768:HsKZwhFkGOr0Ga4+8DFFHR4mmw5+64fuKwX13:HLKmGOr0Ga4+8DFFHRrmw5+m
- TLSH
  T117D20980D64091A5E4F678FEB7D2633B462D6BB00553A09713F33E57AD68704BB2392E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy