9ac2b96c8e892f1d00bc2f25eed1db4046ed0e9c399e7a7bb9c85883a656a4de | Triage™

Login
Reports

Overview

overview

3

Static

static

3

AcmeCADConverter.exe

windows10-2004-x64

3

AcmeCADConverter.exe

windows11-ltsc_2024-x64

3

gsapp.dll

windows10-2004-x64

3

gsapp.dll

windows11-ltsc_2024-x64

3

gsimage.dll

windows10-2004-x64

3

gsimage.dll

windows11-ltsc_2024-x64

3

gsio.dll

windows10-2004-x64

3

gsio.dll

windows11-ltsc_2024-x64

3

gspdf.dll

windows10-2004-x64

3

gspdf.dll

windows11-ltsc_2024-x64

3

gsui.dll

windows10-2004-x64

3

gsui.dll

windows11-ltsc_2024-x64

3

gzip.dll

windows10-2004-x64

3

gzip.dll

windows11-ltsc_2024-x64

3

iow.dll

windows10-2004-x64

3

iow.dll

windows11-ltsc_2024-x64

3

zip32.dll

windows10-2004-x64

3

zip32.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
9ac2b96c8e892f1d00bc2f25eed1db4046ed0e9c399e7a7bb9c85883a656a4de
Size 14.3MB
Sample260907-wfpg2szzat
SHA256 9ac2b96c8e892f1d00bc2f25eed1db4046ed0e9c399e7a7bb9c85883a656a4de
MD5 a76191417f1093f9428f2ca0b9d3d6a4
SHA1 657508d93770a3711e5648fdf53a19aa033392cc
SHA512 7bb9cb01c1de964a8092092281751f4dbc63fee1f68cdb6636982865fd2f7d0709b961ed943356fed4cc04d7c06cc557d804bd0bf8d32023a200f9db7c673121
SSDEEP 393216:NUsoJFYQ1XWRvyGZi+g+GOs/yO+X5kyG46ek+d+JDl:pojY+iyGoz/GeyG1ek+wJR
TLSH
T1E8E633CD9BB4ECC77B6C64767968A958C98D709F285C1A0D90A60C752CAF7CC732DC0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

defense_evasion discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

AcmeCADConverter.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral2

Sample

AcmeCADConverter.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral3

Sample

gsapp.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

gsapp.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

gsimage.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

gsimage.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

gsio.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

gsio.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

gspdf.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

gspdf.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

gsui.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral12

Sample

gsui.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral13

Sample

gzip.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

gzip.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

iow.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

iow.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral17

Sample

zip32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

zip32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  AcmeCADConverter.exe
- Size 2.2MB
- SHA256 ced6799b56680a8040f2c5554b091213c3990ddc1c7235787e494e79522d622d
- MD5 32c8dfde325088031f151fa57d03071f
- SHA1 f4f6d8bd57fa01e2b9263f79772ab1848e8ed85a
- SHA512 56f84b8917f0c2ee5d23b257bdfdcfeb9254a52f6000b631833fa86458a3150ad6785596fb5fe8c1fe39d1668cc7f282d1609db30e0920cf039273f3431c1440
- SSDEEP 24576:/S6GcRyiRb0voqe+JgvqJRtEhcLwqguomtvki6SRGGwyQMHk/tTQN+uFT:/jRrbq+iuikqguomtvkifGGIMHkVTQU
- TLSH
  T158A52901AE4EE3A3C7D580366C9FF66ECE047D929B1096FB2A603F1E95706D1683D316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion discovery
behavioral1 behavioral2
- Target
  gsapp.dll
- Size 346KB
- SHA256 dc5b7e28714786eeaa65efe67657cbf8b7c41021f7567e3d55510f04059304be
- MD5 cbb4494769a703395f66721c16b12b37
- SHA1 7a00d3c72e632331b6a626d98a47f13eef7a0dc3
- SHA512 f9b6eb507c5cbdc83093a7a5aa22c208608813c05d76db9c2d1329c4702405748002ef7ea26bed2fc744b1fe16c7d8c6b538aec82de5a0c34a32393c3d499dbf
- SSDEEP 3072:3ykEvudQGYpKb8QetbfbdXofOIWvv58FcGSFzfQxzKicRAsazxd7c8719MBRPCTx:37EvudapKYqSFsxzK5Daz19cR2Pp/7Q
- TLSH
  T197745C01EA019536E9FB14BBEDFD485E605CA631071C60D3E3C86C6B1F6A9E27E3251B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  gsimage.dll
- Size 625KB
- SHA256 a928f2ce0342be128429c589e651196b8e1c94eb172b8c1c885c49a7f9b23e7c
- MD5 c4f43cd116952c20f005767767cae803
- SHA1 293bfe212aaa311b7576c28e958b7bd817809be9
- SHA512 64ca3d2465a031fdced8c75458ffd24f1344c8b54de45bf7c49598f01f47300358131923026b7b12bad91bbce870b49f9c6d8e16859fdcc1fbef2c00b6bbc69c
- SSDEEP 12288:SGCbHx8xHS8McSaUbvMbD/ZLSpvZTqJhlWTm6c:S7HxuS3cIvMbD/ZLuZTqJhMTm
- TLSH
  T141D43700DEC188B3C8B5017195EB9665BA7AA6463B1AC7D7AB4836303F113D069B71FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  gsio.dll
- Size 27.9MB
- SHA256 465617bc8e67eaac01a373cf6d4348fd39adbb5b2f94cbe8391807960ba854ec
- MD5 80e880789991059d50679d68895a3360
- SHA1 ccc2a165ee7b395abe7b30e770c2cb0befbdbf73
- SHA512 f95f9cb3f2bc4013ac7b60cc6fb1d5de44381f667bfc7058596447072be708f52a2950d5b0f02de1e699c59cec37de4e44aa1e38e8cce2e43b559acfda2aced0
- SSDEEP 393216:WNzG96gp5neTBkHDSU9Rp4LrUUk4wTjUG86DKnR:WNVKcADSSp4LwUHwH
- TLSH
  T1A2579F51EFDBC1F1CB4B11F8157BA72DC42A966827380AD767251BAFA9322D03C36346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  gspdf.dll
- Size 1.8MB
- SHA256 976a84eee5a06629fa5f215a06067913795fa09d5b689e95e2b3abc747e2abd7
- MD5 7bea45d3a6b3f0f4e5e144671815f75b
- SHA1 6b2a5e4eef43a70b8a5b5b8fd8f27616e62e7987
- SHA512 62960bed4a0604f66cd1e75f3828163b9644052fe265684fed04da0baa3cee9d563252dad3586f696691a15a72849f4055715fe04af02449245381efa0fa8656
- SSDEEP 49152:uZ30kFT/7KKb3/32Z+cgVqz2/TZbUpc9LGAXBbU4:qdaZ+cgVN7
- TLSH
  T17595AF42B786C5B7D98E05BA0877973F5A3DD6040338DAC3E7902D9D9D211E2B53E38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  gsui.dll
- Size 1.2MB
- SHA256 dafb632dce9a791ac311b46b26aba666c1ad3047fcf1644075eda1a8863c3c05
- MD5 3f0cc0ce71c598764b284f39179a2d7a
- SHA1 3b5f890392105a76d7a547075b16cc4d3cde27b1
- SHA512 7f7030b7fe879412a3a0e94529bdb1ead4f0485ebd8fd5037d38f8a9746e37f4be3aeba7e258d69a3cfd7d821b788aef145daba78d85806bab98010b491c9293
- SSDEEP 24576:cEbEKkYnib8jBtA0PlOaoVLp0RUYOJ6kDE:XEKkYniojnDOaoV10RUY8DE
- TLSH
  T113451A06B601D066E9AB00B5CDBBE6EE5B247D614F6090D7B3C43B7E2AB45E3353121B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion discovery
behavioral11 behavioral12
- Target
  gzip.dll
- Size 76KB
- SHA256 2d08711f5bc0b41b1b0edf4230c34aafc03c9e20df37d37063e6462f90ad6aa8
- MD5 563b6ff175ecb9bfcdd72148788116c0
- SHA1 590e144787cc2e91dd82dc4874fa053af25b0db7
- SHA512 c9f0e3e322224c92b8376d367ebf1bb7cc97c86d4cfb1c247f4db9524a78354f0014a98963e2a8f2166170e13ca33db92fc478cc22ce2e5ede01e69951567c40
- SSDEEP 768:yCjgSG1riYU9QE/BBX01X8F4paOtA/dUc5/h+NJp4v0cHGtjzLn8xn56J7J6Ha:HcSG1riYUvr48F4pI+O/h+FKePu5m0H
- TLSH
  T17B739C117A40C136C05A193D552AC7725B7EB9301BF5C983BFAB07BE6F312D0A63638A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  iow.dll
- Size 221KB
- SHA256 602848077d0e4466f2a9fd2b51f492b6170ddad37d48629ef2572ddf9176d2a3
- MD5 20d297ad9df90a3530700e88ebd1cf90
- SHA1 68549f3e6c676d36239d59d924caa5c746b8f675
- SHA512 bd6cc270543f7761640845e7e8dbd54fffd494a64a7fe2ffc4564d95ffe2e5b6ebfc3071e06ea34ac229a3be92307173c10e740d0a71b68f930af0ed829f7e8c
- SSDEEP 3072:pCV3HdO35B3qHzwCGLVHs1Qy4+novzvc8tEmngpmP5ij/DYszgB:pI3HIz3qHzJGLFcnoLvcfmnwj9
- TLSH
  T1DA24391272D0C036D2AB36314967D77066BABC319EB1C70F7F94BE6D5E306919E2831A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery defense_evasion
behavioral15 behavioral16
- Target
  zip32.dll
- Size 136KB
- SHA256 ab2f003cafaf92c3364100372cd1bb0e58557494ff7cbbee518bf15a3415b291
- MD5 076d0dd688ddedd15b0d158fdaf74888
- SHA1 03098d9cc1367ca9ba424463b7d551d2726fcf2b
- SHA512 c03bd3250869210e085cbd3ccc85ac8d8a82e361ac047b12613aafad2804a2e8db4ad21f3a3e2b788508c241a8d5c256ffc6c1e396260bb2d01ffcd4cbad4574
- SSDEEP 3072:ePXslTD910MmmwW2MOHE6H522QRb2cuEOEooqO71zCr23Cn:ePXVmwW2MYD22QRb2qO
- TLSH
  T196D3AD837556C0B3E2D8063C14919B37EF7FA4615B069D83C754CEF61D6A0A1AA2E38F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

defense_evasiondiscovery

behavioral12

defense_evasiondiscovery

behavioral13

behavioral14

behavioral15

behavioral16

defense_evasiondiscovery

behavioral17

behavioral18

© 2018-2026

Terms | Privacy