General
- Target SmartPLS.v4.1.1.8 (soft98.ir).rar
- Size 179.5MB
- Sample260910-jh25pshp7x
- SHA256 709e7c3aead24a03f06f0e9f5dd8390852c7f86d83e0c9ecc5292c96cbe39a6c
- MD5 7902c306cf875d287baa219cad5442c0
- SHA1 d30a0622c342e3e8a2acdad5de76bf066986c18b
- SHA512 57323bfb903ccb629a396d5117acbe27b8f47724029bfe7541399bee2571ab4f46146307fc89571322e8bfea227685461715c88f89061b3d5eaa236a3f536d8b
- SSDEEP 3145728:hlg91lH27kGS4jPzv8Hs0xeDIUdLvrp+z+eCLEen6w+ojmD0Q38LEowhG:hlW+oxuoHPKIwLjp+z+3LEOw8QBk
- TLSH T16A9833E303BD672FB1B8D8EEB9D317D19FF650301EA4587240F7957822A811C989BAD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
SmartPLS.v4.1.1.8/Patch/Patch.exe
Resource
win11-20260513-en
2 signatures
600 seconds
Behavioral task
behavioral2
Sample
SmartPLS.v4.1.1.8/Patch/smartpls-agent.jar
Resource
win11-20260513-en
0 signatures
600 seconds
Behavioral task
behavioral3
Sample
SmartPLS.v4.1.1.8/smartpls4_windows-x64.exe
Resource
win11-20260513-en
11 signatures
600 seconds
Malware Config
Targets
-
- Target SmartPLS.v4.1.1.8/Patch/Patch.exe
- Size 8KB
- SHA256 19cc2a3f6cefe74914f7070013165baa8ea746949066e53bb9f3ed0ce3546f99
- MD5 493fc1e58242c278204f6ee27f0bd940
- SHA1 f91c7daaf2d0ffd156abc77167f13e058a585431
- SHA512 e9a9b858e63c831a6078180a9fd91251f59128416b423528fee26e9db1c7eea49c59b10aeefc41a59062db41d17f9a52760ccc83097e2c0fea51c4cbba5b5a79
- SSDEEP 96:7l4xhN5/Z0SK9Gy7WybtPmg3zfpgOuTzf6e8eQpT78q2fmqVVzNt:UkM4WOpVe8R8q2fJv
- TLSH T185F11041BBF91219F27F0B356D7646201A3ABD569D35C79E2085064E0E71E88C9A3FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SmartPLS.v4.1.1.8/Patch/smartpls-agent.jar
- Size 4KB
- SHA256 ad5086f6c6ee0456f210fd1961e98a2a6f0b0631a9172493393c5fb4e64a6d27
- MD5 60ef268c1af53bc1ddcbf8373c4a57fe
- SHA1 995257a586b8bfa4a3d7b6b1227ff86aedee4b36
- SHA512 ff09bc2f0a267e3990c258b1cbfb08f38ca640da7f6e4e58ca3b81e9e5eb97bcae5c96f415b6d899804f89184e7f8c50f74f0e3d24ca6fa456496b4f7bb662a5
- SSDEEP 96:H8QZDfoBoJIE4F0ld6/sLUxj4NQbkcC+RFqCeeWJMhs:HHBoB4KYYsIx7nNRFqHxJms
- TLSH T1F3817E3F7BA62C75E01F85363D9717B5C387C10B9C48594D37A50ED22719C719A2049F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SmartPLS.v4.1.1.8/smartpls4_windows-x64.exe
- Size 181.3MB
- SHA256 fad862b4bc54ea53d0e61e4d0775a94b8fcfc4e1eacfd1b6307f802144c2d6f1
- MD5 2bf786da1d110fa4802ddb9a8c40c40d
- SHA1 faa4f1da86fde2f45c00fb518aaeb2ca04ca4559
- SHA512 eae75efee832cfb3f7fbddd8ad9d98fadb8e968b8a20819e9be3eb8794cfcb53b415bb92adc50a14fdb856a1a7c1cc7669d6f77afc4b5bc8ac6791548b74c0b9
- SSDEEP 3145728:Hp+XVzx5pyYN/5g6+tjSmtr3pStrJEVjFX66kski6dGVxfWqOIZd2mtiZckzS8TB:XY55o55psyVjFXejbGzzd2mtmckzSYqD
- TLSH T15898335C277C55A7E6FE24798FBB620384632514930078EFBAF25B0A77337C13464A6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.