431dbff765dcbff85fdcac81f61fa1fb6963930f9de2cd4529d2014d24d9d406

Resubmissions

10/09/2026, 13:28

260910-qqxnhscq51

10/09/2026, 13:24

260910-qnb9sscq2y3

Sharing

Copy URL Twitter E-mail

General

Target
Deep Glow 2 v1.1.0 - Win Mac - Keyflame.7z
Size 10.0MB
Sample260910-qnb9sscq2y
SHA256 431dbff765dcbff85fdcac81f61fa1fb6963930f9de2cd4529d2014d24d9d406
MD5 f2db4503ed8013e2f2f56091efe93e44
SHA1 288154951b3115a4878064866c21ed01c392a723
SHA512 7752bc5f71654a95c03ffe5005cd475ba6b44dafcf0fbc8e3495cf47c9ac393431f44a85e5e8918b07ba6736c803e97ce8fdea3fc89dad76824d52efe7aa6fb8
SSDEEP 196608:faILBWG8qSiIQZ5FBMK2JQt5OISxQm56xSbkD7/pBmjH6O:fPLBJfXDWJQc06k7/C
TLSH
T198B633562263EF9F2786E7607F52343ECF87D39301662499A10F5217E2E759CBA01CAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Deep Glow 2 v1.1.0 - Win Mac - Keyflame.7z
- Size 10.0MB
- SHA256 431dbff765dcbff85fdcac81f61fa1fb6963930f9de2cd4529d2014d24d9d406
- MD5 f2db4503ed8013e2f2f56091efe93e44
- SHA1 288154951b3115a4878064866c21ed01c392a723
- SHA512 7752bc5f71654a95c03ffe5005cd475ba6b44dafcf0fbc8e3495cf47c9ac393431f44a85e5e8918b07ba6736c803e97ce8fdea3fc89dad76824d52efe7aa6fb8
- SSDEEP 196608:faILBWG8qSiIQZ5FBMK2JQt5OISxQm56xSbkD7/pBmjH6O:fPLBJfXDWJQc06k7/C
- TLSH
  T198B633562263EF9F2786E7607F52343ECF87D39301662499A10F5217E2E759CBA01CAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Deep Glow 2 v1.1.0/Documentation and Help.html
- Size 148B
- SHA256 7b3d915787cd883fbdc36dfd58d38f2fa022d1ef672654acacb1b10cac055dbe
- MD5 f5cbb6cad5ed6ed5c0b90ec85e7001d0
- SHA1 f2fa77a213be22ea742f3921514bb239b90509f3
- SHA512 0fb5592e9dce09e0ac924a1a156fa2b2365696996abd8331ddaa504d4cc8c213dde3aa6f81078d6c6c532335f5e54d42952cde4c120ff70c801853c02d5c6a61
- TLSH
  T18BC08CE71C13D10015A00840D8AAEA45902B42AD8080C0C084C2C1B15218F9BC91B3CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Deep Glow 2 v1.1.0/Plugin/macOS/DeepGlow2.plugin/Contents/CodeResources
- Size 1KB
- SHA256 0337be80fb74929502ad3f7fa68c9306cab648e06134639671a54414c6820f60
- MD5 a2d3180d264fc68d1c2cfe7a6f64b139
- SHA1 4478f2b3db0eba68e1b78f5fdaa5d782064390bd
- SHA512 ad7f64508b33f2747beec953c431189eef38d3ddd56860f6894ada7a8c09649776c8bbc8d66dd498906c64af21dadbfc454f3fcaa211310d68c84556bf26444c
- TLSH
  T1103194ED5B507194CFE1B5E883C0C86B6C7513EF97C36162208888D620D5B6A1B5563E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Deep Glow 2 v1.1.0/Plugin/macOS/DeepGlow2.plugin/Contents/Frameworks/libIrisBlurSDK.dylib
- Size 614KB
- SHA256 9619f8b3204a475c320fa3803452c64360319d0d481b2f9c1ac65c1ab388db5a
- MD5 2d83f69d8c34545aa14b847f7fa8964a
- SHA1 b166f065ef296b240209b3c02fd2ead1826c2c99
- SHA512 b3ccd18fcce400b7a0e3aaf1f6a15efe2f0afadf6c9ec13027d862729770f4e5fadea5008836e67501424190acb43ef0216be1f291c18b46d38517854e384deb
- SSDEEP 6144:xsIE5ES3d/OyA9Tj7k6xNr3ZO1uATR3ajhtblCiPRYchwI/6sb9/jYwdwpl6ch/+:WNEQ8yWS13stblfPiID7
- TLSH
  T113D47D23E7DC6805DB8B60B5630D8366A232FC208A7493F3B79197694EE5750DF1AB07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Deep Glow 2 v1.1.0/Plugin/macOS/DeepGlow2.plugin/Contents/Info.plist
- Size 1KB
- SHA256 20ecaa37122730696a8b4140d904128be8e59a98d08fdc726d51c249bcf57da7
- MD5 f98d46a3dd04609698f00d3f69e54a7c
- SHA1 95e005a672c4be525c27de10b1e68f6587de0b7e
- SHA512 2f347c2284d57949b7146dde4651e8d98b0b7630923cb095f46ff18bf2af51b6c7aa103b0e388844d997beb017771230bc923834a8b0bdec88832cb09984ecd2
- TLSH
  T15A2107F60E5C399D2CC152635BD6511E01DC61CC5C3261FEFEC65A2CEE1EC46A234AE5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral8 behavioral9
- Target
  Deep Glow 2 v1.1.0/Plugin/macOS/DeepGlow2.plugin/Contents/MacOS/DeepGlow2
- Size 4.4MB
- SHA256 b8c2689a4b63a2fe1848ba21adc7bbca724e51d81adbfe6049f7a916aef42cc4
- MD5 c20561cf6f7b6b0729bdc72a33b78cc5
- SHA1 557613e9fb64070153d318da4b3d5fe54063d3d8
- SHA512 512f0f941f99dcca73442e33b3ca23e77d8777a72a5abcdcc7baa706d5a1497735d5f823f1af296b346763f6e4de0dcca29d1844d4891cf9e2fb5baa791c1f02
- SSDEEP 49152:2WKWQvmyFMCRHnFFQS69j3wJglrPlC6pfeBP26PIn2Kj0Jgl9c2:E63rPiBP26E2Ke2
- TLSH
  T176269E13622CDC15C1C1B17CDB9ECBF6A512FC615520868F32A5FE2B7FA1AD1AA4D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Deep Glow 2 v1.1.0/Plugin/macOS/DeepGlow2.plugin/Contents/PkgInfo
- Size 8B
- SHA256 e13c5afd5f73acd972f0bc6472b86b8b0adf50bb82ed19a4680978469d45675a
- MD5 f28212d63481beda068ff70806cfbdab
- SHA1 d38311aede38e2f4365a07fe8483dd6d686b775b
- SHA512 f8032f1893d5abf5f8fb6ca8b2ccb15b526726faa059e44504e644097a4503ddc5366bdbc1db81a06502fc8793f9631648fe73b6abbb89f9f35df8f756fd5cea
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Deep Glow 2 v1.1.0/Plugin/macOS/DeepGlow2.plugin/Contents/Resources/DeepGlow2.rsrc
- Size 710B
- SHA256 b0bbbd96fcdc01fb5a1d01e9fbe4547c4ca0b5f17b9e78b8434ab9abb35af366
- MD5 31803fe5edd0cb5f66c6c2ad7cb423ce
- SHA1 d5a8a7240bf152804712dbe36948d9a786474f57
- SHA512 389432aefa0c4164c808625aed0f410aeb93ac0680ae13838a812d0c8ef5f2257652093fe0951764ff06d20442518b25eca61885e7a9070144a39d09cd0fe224
- TLSH
  T1DD01687283DABD77E0E8C1BDC1835ED579A0332D83B5C8A133D22060CE84691F12038A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Deep Glow 2 v1.1.0/Plugin/macOS/DeepGlow2.plugin/Contents/_CodeSignature/CodeResources
- Size 2KB
- SHA256 a76ed6aa62f696fe1c39cffd6ba28769014ae41d65914bd1f0e0c555b8246a89
- MD5 460352c8956c529fb8909aca78686f9a
- SHA1 ca36e89c9244256aefd6d542de3c98850f8b1d4d
- SHA512 77e5521dd5c3113465659da13ca8d43c1f83bbe8b9ddf9f7ecede424b6d061fe509caeaf1f52370275d663e064e8370e5ed26e3bde721ee3cd832682a5657663
- TLSH
  T116517CF24E4C1EF6048C2A370752284F54EBFBC69C7095328ED3A472FA61B47A7815E9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  Deep Glow 2 v1.1.0/Plugin/win/DeepGlow2.aex
- Size 4.3MB
- SHA256 b5099e20456b5dee53a3437551a3717c94d7c2b77a6ed1c0cd0cf0b5c6496107
- MD5 3c83c0709d33a67eae8cb5d401589b66
- SHA1 5f22d3a74e25e58805f0bdb1f0823d5c818aecd7
- SHA512 1e6a8c3b9a0e9ea2af335fe1b3cf60fae8d088f4716b225162d912dc8009351c34d2765f1dda633fb3cbc0089c341bc881e8ae36638e477433c40171c210b530
- SSDEEP 49152:NOjXBBt8yx2iQxbUm4k616LTYN+LT4l42glmcW:gXBBtBbuU+LTur
- TLSH
  T19E26488261DD80ACF157B13896966627A3F7BC0D1321DFDB52D14E3B1E6F6C07A3A281
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Deep Glow 2 v1.1.0/Plugin/win/IrisBlurSDK.dll
- Size 574KB
- SHA256 b28fa3d8775b58cbebbf942afd3297277dbb82c8eb729c6b4065c3623970727c
- MD5 cbc160b3e45f4d3d0702d127dfa5aad3
- SHA1 b0f8f27155753a781031bbde23b7ae0c0becc09a
- SHA512 50cb22eca47589d521947d7dc607e9dba382e41034b1a9fe2d17e1bc6e6fc597448d8a2d5c078a49a663592992c040ecae94972e117a140332b4e060b3588251
- SSDEEP 12288:x8mZFP6YrilepUeewr5bINY0OxGCOGt6FF:x8mZFi2iWUbuNP0O8Cz6FF
- TLSH
  T1F2C44A259D9A04F9E613A136D5636E9BC23AB4053362B3DFF19311112EFE78072BE385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Deep Glow 2 v1.1.0/Preset/Tone Mapping DG2.ffx
- Size 80KB
- SHA256 d917c5b76a670c13526733517e73807a7fdd21dd3842ca011c40bfea8f28a75f
- MD5 ec713b9a60ec7a9c0d26c6bed91b695c
- SHA1 83beb11ba96432c5bfa907a6a2b5803095c00c53
- SHA512 4a028834d42d40115e9bf5fa0e59a61e5e2ff67f815ac3d0a9213efbee03d4b0b397875a774554e1b0c5f103959fcd2bde7a816eaedbb963daaae55d9c51bdbc
- SSDEEP 384:vA/8ZmtRC3T8NPx7mE/aO7426eVE5WBT295JM0tBNP:vA/OeTZ7mwaO7A5W4JM0tBNP
- TLSH
  T187830AA13794E46BC5A642BF51177377A320260692700B263FDFE61F0FD868DA4397E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral21 behavioral22
- Target
  Deep Glow 2 v1.1.0/Script/Deep Glow Upgrader v1.0.1.jsx
- Size 26KB
- SHA256 fa90413fc8591d2ea7859ce42a96c59f113e15d9bc9ac33acba98da3155144c0
- MD5 03b8ad8e70a8bc0b90192411b0aa641a
- SHA1 071de09c34890b85ee15f6b17dc1a1ad7a05f24f
- SHA512 3dec60d80051a1e9a0281d392999cb9a4050d783cb05f49a9bfa4f202242c076217d5b4e4983033499c73735dddf0ab2036f37d6abefc732a93d596ed30576eb
- SSDEEP 192:S1op2oxCm7wf7S7G3mE5pcCip7yX+oZFfA5CynEZCYyICyiOCBKtxy5iyGZiSCuY:siCm2wQmwZQBopl4rfxRfyhEFN7efM
- TLSH
  T15DC264457AA32DB418D37235172F2840B27681533024CD60BA8FD36A4FDE265ADFA7E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24