Overview
overview
3Static
static
3DWANative.dll
windows10-2004-x64
3DWANative.dll
windows11-ltsc_2024-x64
3Setup.exe
windows10-2004-x64
3Setup.exe
windows11-ltsc_2024-x64
3TokenGenerator64.exe
windows10-2004-x64
1TokenGenerator64.exe
windows11-ltsc_2024-x64
1AdobeIPCBroker.exe
windows10-2004-x64
3AdobeIPCBroker.exe
windows11-ltsc_2024-x64
3adobe_caps.dll
windows10-2004-x64
3adobe_caps.dll
windows11-ltsc_2024-x64
3customhook...ok.exe
windows10-2004-x64
3customhook...ok.exe
windows11-ltsc_2024-x64
3AAM Regist...er.exe
windows10-2004-x64
3AAM Regist...er.exe
windows11-ltsc_2024-x64
3OBLRes/ar_...Q.html
windows10-2004-x64
3OBLRes/ar_...Q.html
windows11-ltsc_2024-x64
3OBLRes/ar_...Q.html
windows10-2004-x64
3OBLRes/ar_...Q.html
windows11-ltsc_2024-x64
3OBLRes/bg_...Q.html
windows10-2004-x64
3OBLRes/bg_...Q.html
windows11-ltsc_2024-x64
3OBLRes/bg_...Q.html
windows10-2004-x64
3OBLRes/bg_...Q.html
windows11-ltsc_2024-x64
3OBLRes/cs_...Q.html
windows10-2004-x64
3OBLRes/cs_...Q.html
windows11-ltsc_2024-x64
3OBLRes/cs_...Q.html
windows10-2004-x64
3OBLRes/cs_...Q.html
windows11-ltsc_2024-x64
3OBLRes/da_...Q.html
windows10-2004-x64
3OBLRes/da_...Q.html
windows11-ltsc_2024-x64
3OBLRes/da_...Q.html
windows10-2004-x64
3OBLRes/da_...Q.html
windows11-ltsc_2024-x64
3OBLRes/de_...Q.html
windows10-2004-x64
3OBLRes/de_...Q.html
windows11-ltsc_2024-x64
3General
- Target Adobe Premiere Pro CC 2019.rar
- Size 1584.3MB
- Sample260908-2ab8esysew
- SHA256 d1f616baed576cac19e8d41deea2f1d9fe9d2f051ef590a8928d1c1fdf8d01c2
- MD5 55b043dbaf6a78addb358bef8df03015
- SHA1 3ec4d8e79cef973731ed0b05a44d3fd3f1d2251f
- SHA512 39b3405cbd9db944a8ea089cbedb034e9d791440138a2c12d4d3726015610c4e348559803b081f66856d48d20607d559eeafc06ec7bdf41b6baab5de8d0f5b1d
- SSDEEP 25165824:aXZFuORsnNsGxX2tkQEFzgqd2ant+m+vmhxZVo6Vn3fROsVjZERR3GAXxVTD5dK1:Oe1f91bt+lmzomvROog2AXxBD5d3a
- TLSH T1A80A33B5D186E486BCC427CC088D6D6E0D7B5B41D836C9E68F553E012FEE12806EB7B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
DWANative.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
DWANative.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
TokenGenerator64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
TokenGenerator64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
AdobeIPCBroker.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
AdobeIPCBroker.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
adobe_caps.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
adobe_caps.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
customhook/AdobeIPCBrokerCustomHook.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
customhook/AdobeIPCBrokerCustomHook.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
AAM Registration Notifier.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
AAM Registration Notifier.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
OBLRes/ar_AE/ConnectionFAQ.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
OBLRes/ar_AE/ConnectionFAQ.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
OBLRes/ar_AE/LicenseFAQ.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
OBLRes/ar_AE/LicenseFAQ.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
OBLRes/bg_BG/ConnectionFAQ.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
OBLRes/bg_BG/ConnectionFAQ.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
OBLRes/bg_BG/LicenseFAQ.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
OBLRes/bg_BG/LicenseFAQ.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
OBLRes/cs_CZ/ConnectionFAQ.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
OBLRes/cs_CZ/ConnectionFAQ.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
OBLRes/cs_CZ/LicenseFAQ.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
OBLRes/cs_CZ/LicenseFAQ.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
OBLRes/da_DK/ConnectionFAQ.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
OBLRes/da_DK/ConnectionFAQ.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
OBLRes/da_DK/LicenseFAQ.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
OBLRes/da_DK/LicenseFAQ.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
OBLRes/de_DE/ConnectionFAQ.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
OBLRes/de_DE/ConnectionFAQ.html
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target DWANative.dll
- Size 709KB
- SHA256 7c98a3355befeb9cc1bf656285d3f7896c46e79bde7c7f52ec8711529a812ece
- MD5 f7200f5db772852d49f0a12f57a6589e
- SHA1 e471d6ab55bf7ca9939c2bc411c06c3563a211a3
- SHA512 ea80e1b94f9ae7e13d6dcc401abd821261e0d48a7299f3131cb07f52d511fb81825021c9d761f48ea8a38e3fc8651b55beefb07408f39fc735924b7d218f063c
- SSDEEP 12288:wZVUXWd1L20BEpTnDHWdtvit9uVWEZp2A1RhRe6v1Tkhj94d2dwBSi:qCXWXS0B2TzetvM9oNZZ7Re69T+94d/
- TLSH T159F47D52A6D2C13EF4EB21B1967D2B3B1C39B826133485C7B7C419998E705E2BA3D317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Setup.exe
- Size 394KB
- SHA256 528dcea2b62e96b112fb5825b651bba5de65d9455fbc40dabd2e94b900bc7297
- MD5 4c2e4b210a8de1999922c1d2d0beb93a
- SHA1 c328f9bc451bf07b41e1eb13efae82691e941d86
- SHA512 562517ab08a10246ad264357672c3f2b78ee54a78591b73571cb91ecaa2dede249ac3c5fe1cee1debbf959944fea968a5ec8881beda45f9d39cc7667dbfc41a3
- SSDEEP 1536:U0Khuz0qx0vrvCDA8L+i+ccZE7Cs8jcdNd+963bvqxTw5GYA5NGPd7LPhjre:U3rnYX+/E7nN+63uxTr5NGd7T5re
- TLSH T12E84568171D0C48AE96B09725A3AB93030E2FD9E50BBCD0D679D7F2906B2351549FF2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target TokenGenerator64.exe
- Size 116KB
- SHA256 2bfaca52eeb0a84e268e367321a536570cf5c0cb114e2362fe77ceb044c0a01c
- MD5 716633bfb1e36d136865cc9cf2f71577
- SHA1 f7c0e0a052b2632c151a5588bfb409ba1e4900fd
- SHA512 e3767d3c1737f970377fffbb04d39bf9ac636987c1014bece3ff5095b93c42c61b1dfbcc006e4b9dfa7ef16e306120d13cb33b2d7b20d7db76338aa5f0cc1de7
- SSDEEP 3072:0EWnqDRPbvPTiE2O730cwt9WVgPIqWsEbOD3:nWnqDlbXTn730cwt2Tqlrj
- TLSH T192C37D4733F810F5E4B7D27889F64646E7B2B8668775C38F1260465A1F237D0AE3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target AdobeIPCBroker.exe
- Size 1.0MB
- SHA256 4659141b6c6722c4f9c1d479525f66481508397158c2c8d576668ac145e5e85c
- MD5 f0c7401da2771989bac423f74cc696bf
- SHA1 7645c5c8f7872f4950163d3304e26d8afde21b48
- SHA512 04ac9c32362e22def807cf23f941924a1091d80bb7ffedf7ee70d7794fadb2d49e383a432eb1828efdd6d66af604918979d057a5a80de1ade0f45075aad12e5e
- SSDEEP 24576:XKTqOAWulMLMqMW5oXz/mbJvGNEa8I5bq/tFJa1VqINWiquESAeF6Xo+ctKEE8:2klMLMqMxDSvGj8I5WBaiwqqKXo3rE8
- TLSH T10635AD21B6418074D6A28176497DEBBA483EE6304B3556DFD3E41E3C9E300D16B7B3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target adobe_caps.dll
- Size 863KB
- SHA256 5e74bbc5a9fe635ede341ed7175756407af1b8b4b529ff33bf13b0859298b537
- MD5 486c87e1d3a7187a1c369be0e4fc8d8c
- SHA1 607a1e6bd17f8ca09ed51b3053a29a9e24117075
- SHA512 07ffb7c171b94e41e9c7e6a4f45fb7826446315ed91cdf11bef2042bb09421584694b3c4bb9b63070693a4726ae67ec6931f2689d1a335643d0f0db40d005d5c
- SSDEEP 24576:Y7ccVdxSdEgIHyq1Q9UfaUqM20jWT8NotS:YYcT6dkruKqGjWT8N8S
- TLSH T1A6159E92F682C071E9EA117091FA5BBB4C7D7A27472580DB62D0289E6D309E3773F706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target customhook/AdobeIPCBrokerCustomHook.exe
- Size 197KB
- SHA256 b94c2b46e791c14c596f312e56bf9a684960eb542976f5e9254ab9e41e6c6e33
- MD5 070aa7b5f2e2180330d927f040f5f93b
- SHA1 9b6d14d1dce586e60199e1c040831f45468cd493
- SHA512 72be13564ec635fa34e9806221ac71def6497255f3a1bbca258b763d73875dd57effd1629cea17df8041825cc2d1a6a2b935607aa750e0d5ccbf3e2fbb6c64a9
- SSDEEP 3072:DjetgAXQLGOyYJI++TNHWtGm7B8xOVafniAg0FujoDLXV5UGbcC7g:DjeAy+UN2t3AOa3JbcC7g
- TLSH T1A0145A1174D3C472D073553518F4EAB66A3DBD610F258AEF67D80B2E0F782D16A32AA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target AAM Registration Notifier.exe
- Size 262KB
- SHA256 3a437a7401c9085cc77bd715282c862645cc4c28ce1b9ac282e3107145dae53a
- MD5 28f9d71a30c9f9b9965f7eee064eac07
- SHA1 ded4fea87693cb61d9ec49eaf914632724d4fb2e
- SHA512 b8908cdc7cbabf036f3d528cb197cbdda0d47cf8085966ee8f445cb3841578c8d2f5bdd96e6772ee9e23d2ca5acf07e16eb641384b0bdf80eac2d906d19fa73d
- SSDEEP 3072:BAiblH8gK/Gi+KSqWUgwnySSYGXvNdy+6M8vbwNPZJtznrlV+rMj5NPweaoOw:BAiblHPs8wn2YGXvahvmPlZVo8NPwMt
- TLSH T186446C2077D18D36F5A316314DB9977A463ABC651B2191CBA3B43A6DDD307D28E3032B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OBLRes/ar_AE/ConnectionFAQ.html
- Size 11KB
- SHA256 d8b820365e17237d8e08b478c2637451097c8e84408d0dbd14ccfe3508086d3a
- MD5 e8d6ed9dfd168040856585c3e491920c
- SHA1 7267961d3e2906cf98a171c985373655dc77a6a1
- SHA512 39a6490ce66df765af731ca31bfaeb11590616b551efe79c320655171a1e69b9b316fef7505555781ac4f9a5c57e031f084db047c100607e9f3663416c3711a9
- SSDEEP 96:VJinKsPCBD0hdtHvFKR8n+x9LEZ6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqSO:tBcE8n2l8o5CfzIKYdqSp82KzqEXEw
- TLSH T15B322F32EB18050AF0E655D971B222957458DB49A30354B6F077BE2ABCCB9F733C126A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OBLRes/ar_AE/LicenseFAQ.html
- Size 17KB
- SHA256 9409ea79c89cfc5c93896a0eff9214d12d4852330c5c07ad8384ba34876bab25
- MD5 c0e7bde62780c17aacc2dd7a364725e9
- SHA1 3452000e41b83b4a194f2e7e68fba36db8e6fb1e
- SHA512 8bd625c44518ff10b395e4f64e252dd315f7ac59eb99e1141c2c22366fe29844f39004924fca1f81d80b26a4bd592fbb4343111cd98547b1d53f1e63a5dc2125
- SSDEEP 192:tCcYB8n2l8o5UrPKpp828ZuU6/jxUoQgp5ojiebm:tCb8n2l8o5UrPKnVfjxNJJ+m
- TLSH T1BF82FF21EB281406B0F648D9B166129464A4EA4CA3165875F1777D7EBCCF8FB33D036E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OBLRes/bg_BG/ConnectionFAQ.html
- Size 11KB
- SHA256 6e067e7b49cfc00cbc022b224b66645c1e766d0f0030308a09ce7d38769bcf81
- MD5 c7a1c7ad22f55945883f6088598ddad2
- SHA1 03fdbe3f8a7b35f22647992e92cfd9dbfb040266
- SHA512 f4522246fea0ffce242be2ec4f415465d36741f7599a55f20a2cc8ec8d941c21d9c44212788bc628a784105929864a3040ec31f9e915ba2c501295d3509ae456
- SSDEEP 192:W9wq8Tll8o5CfzIKYdqVgWiaqTRFqGr9Fxt9cD+:WF8Tll8o5CfzIKYdagWnqtFqGrbxtCC
- TLSH T1AC424022E7181989F0F25AD5B0B216516474DB49E30364F6F0377E6BB8CB8B737C2266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OBLRes/bg_BG/LicenseFAQ.html
- Size 18KB
- SHA256 e1cc56aa044e6a17fed1b468bba2abbbd4be0be1e9757f1db3f1bb7d25443255
- MD5 015be0e6ecb2135ba75e4904b9dc15da
- SHA1 d015b1f200355d58f21d4a309236c7d19756c319
- SHA512 6702d60fc1a2e8d2d848674006a3a8ec9b2d65cfa9f23b7175f69324a5f0d15883882a6aee90c4ddff044eb4de9ec112220b15d63bab90f8038a31e66bd8b828
- SSDEEP 384:WN8Tll8o5UrPKygW7ombH4ocO05FgyL5APYX:WN8Rd5NiombH4o+XAI
- TLSH T1EB822022F7291489A0B54ED8B1A713546464DB48A306A8B4F03B7C7ABCCF4FB37D1369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OBLRes/cs_CZ/ConnectionFAQ.html
- Size 11KB
- SHA256 706cea3ac5229ba42974a5dc2d98e1fcaf5984be605d3e52b26a1b5bad382d34
- MD5 bc21a0d2dd6bf447543cf973992774c5
- SHA1 9314e664da60951cd1f4ab4f81ceecb2f37d6ead
- SHA512 7b25620a07812100353d02ae481fbb942cb0ac83fbde39a2fe949e54e3e657da46f4baa66fffd0f0c96abb6e461999a578962da63a3b6aca144434ddcc186f02
- SSDEEP 96:VJinosPCvu6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqg:Xjq8Tll8o5CfzIKYdqVgW4dACQg6oJ
- TLSH T151324232E7090549F0F645D9B0B312517868D749934794B6F0777E6ABCCB8B723C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OBLRes/cs_CZ/LicenseFAQ.html
- Size 17KB
- SHA256 441b86951a7169c29e02372bc48cf7c39dae7f8e43339ebb64e6bb0dc0fbac8c
- MD5 874e53d2bd349b1f98b08367b6dc8c3b
- SHA1 f2febec8fc4153c6335362ff93c2da30ec3c02af
- SHA512 c9819d64a1d2490db7b69eb0e6e29ce12f6b16a794ddafca8f3c681cd6615fed1da6b86c4f85e7c5023d7fbb7b4608d683b4ce054263e4b03348d864ae1e767b
- SSDEEP 192:XKUO8Tll8o5UrPKygW9B+CFzp5somVKBhNNntL:Xu8Tll8o5UrPKygW9B+CF7sotZlF
- TLSH T167824322FB280415B0F649C9B0A713946464EB4CA3569475F07B7D7ABCCA8BB33E1379
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OBLRes/da_DK/ConnectionFAQ.html
- Size 11KB
- SHA256 74542227a4d048728bacaa55f40ecf75a9f2bae2c1ece220e880173ad8d34e0d
- MD5 e5385a09f8b439becbeb8c4fe5b04092
- SHA1 9cd97ac38f39646e972d5835f6f57e469f24cc76
- SHA512 8bf27adbdc608497ac7aacc1ac6d1529fd3192c242d3cc4aa07b6c62f888862f551464a4843591697ee0353ac8f5e9a948e5ebb31324dc36341b95cad43baa18
- SSDEEP 96:VJin+sPCD6hatUvmFDn8T3I95Nh6l9ucio5t2Tf4meO/jgRzeWjgRLYTWjgRLqbE:dEq8Tll8o5CfzIKYdqVgW9oow
- TLSH T125424032E7190619F0F649D5B0B222956468D749D31354B6F0767E3BBCCB8B733C22AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OBLRes/da_DK/LicenseFAQ.html
- Size 17KB
- SHA256 3fb08a864591f2b78ce205f340ee580f6a7c72725847870123413c7c13ccc5bb
- MD5 2470698e1ebe7b8966f420bdd23bad1b
- SHA1 f90f662a23c9f194d8ebf17472bc76b095d9fd0e
- SHA512 87223f5464a36d3e6cfbbd92bf68c66dd47f9ec6bd26a21b8df7001eade8dd1459d2e5c2643dc1960399b78cdeddafd507bfdc308c5e54b3e79cc537fa499119
- SSDEEP 192:d9UO8Tll8o5UrPKygWmlzBSkeHt9sUf49ZCEiY0MXHL:dL8Tll8o5UrPKygWml1yNfnYn
- TLSH T1A3823322EB280415B0F64AD5B16213A56498DB4CD31658B5F07ABC7AFCCF8BB33D1369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target OBLRes/de_DE/ConnectionFAQ.html
- Size 11KB
- SHA256 416d9d4c1cd083aaddc82060092a11a6545fa2f5cb9b70f7966c8b6ec623f4f6
- MD5 f5f4a59c696e5a77349fef6bb0400bbb
- SHA1 250fdb37f3ae90ef76159edd31da485f3c490c07
- SHA512 c7e5faaf781df7dc6106915ff5b0477745b3f6d1af24df94130c58603daf34e0135e65bcdd88a849415ed415e2aef295072bbebc2e4143673e14d6c79a08ceda
- SSDEEP 192:dF9q8Tll8o5CfzIKYdqVgWtL0QRp3oz7FljvKLvAoaZP:de8Tll8o5CfzIKYdagW5CnFsLm
- TLSH T11D427332E7090509B0F256D5B1B212A17468D759D31364B5F077AE3BFCCB8B727C226A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10