General

  • Target
    Bambu_Studio_win-v02.08.02.61-20260820225108.exe
  • Size 409.1MB
  • Sample260910-v9s7naep5t
  • SHA256 8af94a386689f265d22fd420c6d9bc72d3da872cc2c28d025eef4dd6cd614823
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Bambu_Studio_win-v02.08.02.61-20260820225108.exe
    • Size 409.1MB
    • SHA256 8af94a386689f265d22fd420c6d9bc72d3da872cc2c28d025eef4dd6cd614823
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

    • Event Triggered Execution: Image File Execution Options Injection

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Target
      resources/profiles/Creality/ender3v2.svg
    • Size 255B
    • SHA256 bf923180d34cdc6995744965ad68d426baedd94b19f0438b17ea1b546be85616
    • MD5 SHA1 SHA512 TLSH
    • Target
      resources/profiles/Geeetech/105x105.svg
    • Size 12KB
    • SHA256 9165eaac73b90044558b56e5cff07b457ce22ed91a8fffa6e12ea91abf3abb87
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      resources/profiles/Geeetech/220x220.svg
    • Size 22KB
    • SHA256 f6bc7684a0d952e720dffc53003c0888e358c27931986cc8b8a7319c104d91dc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      resources/profiles/Geeetech/250x250.svg
    • Size 22KB
    • SHA256 468c5e0bf2f6f5ea026dead3ef473eb388602d932b342e02bc14ccc107e4b4a8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      resources/profiles/Geeetech/255x255.svg
    • Size 22KB
    • SHA256 fea3ea3f3e3d3619903b76c4a6a0e501b8e538e8ab9e4cc786746fe679f2435d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      resources/profiles/Geeetech/320x320.svg
    • Size 25KB
    • SHA256 d29061aa1ad0ae28b677a7d18bf4210c57ae68b4dea1610e62f761d07ccd3c61
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      resources/profiles/Prusa/mini.svg
    • Size 4KB
    • SHA256 1a316ce816f0d39dbd77e7f7507fed902043b5339fb3e6318a620bdfa2d92e33
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      resources/profiles/Prusa/mk3.svg
    • Size 17KB
    • SHA256 ef3feb294d467ce2ef4ecf11b4735f3c1754767b2254e020e70b2021e3239131
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      resources/tooltip/main.js
    • Size 992KB
    • SHA256 a4040f542802a7c939c6823986b239a334fffd4eadbb41961f051052e7ccdfdf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/tooltip/privacyupdate.html
    • Size 1KB
    • SHA256 2f8dcd9fed92d8ad4201edd0d16e992c1e9b3864b644e65d74de07329f8e6d01
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      resources/tooltip/releasenote.html
    • Size 905B
    • SHA256 1d89847ce1d0b065292613fd9c1386f5e16f8d87f37fb4fa082e0d599ca3c6d0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      resources/tooltip/styled.html
    • Size 905B
    • SHA256 b7fb47fc1486012b50c0eb891cfe525f740bebed1b6252881175f3fed69dfdc7
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      resources/web/device_page/dist/assets/index.js
    • Size 607KB
    • SHA256 04e51a643a256ba05aca48438d49805b36ad1486812286aa2d0b42cbf0d51589
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/web/device_page/dist/assets/index.js.map
    • Size 2.0MB
    • SHA256 9642f7712d4d87a5c246decc133c92cec006cb0bdf6401501d838b7fcb396107
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/web/device_page/dist/img/assistant.svg
    • Size 1KB
    • SHA256 d0fe56922178a27e1c7bbc3b9aaef31ce784fccf5ef6d6703b7a1264b6dffe7f
    • MD5 SHA1 SHA512 TLSH
    • Target
      resources/web/device_page/dist/img/device_add.svg
    • Size 996B
    • SHA256 63e59a33f2699cf13503d2a3e89ef731351ce50cbf748392d711566fdda31c48
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Target
      resources/web/device_page/dist/img/device_layout.svg
    • Size 1KB
    • SHA256 cf00f0b0717d82612b0b2cbc637f81beaf1f2fae23a8d854a4e4d6c17ff7967d
    • MD5 SHA1 SHA512 TLSH
    • Target
      resources/web/device_page/dist/img/device_query.svg
    • Size 881B
    • SHA256 ea0ba9287a0a786ac56d5c4470cf48e0ce48f9e9300e2e030ccedd48c2195a04
    • MD5 SHA1 SHA512 TLSH
    • Target
      resources/web/device_page/dist/img/edit_icon.svg
    • Size 1KB
    • SHA256 a90400260ff4f94b05598eee28e2154af6936a2d063aad056750667c7472e6e9
    • MD5 SHA1 SHA512 TLSH
    • Target
      resources/web/device_page/dist/img/machine_icon.svg
    • Size 233KB
    • SHA256 f448343a80670044481c25d3b5de56d36e9afcbed4445c37bd8fc9eb2a387234
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Loads dropped DLL

    • Target
      resources/web/device_page/dist/img/slot_icon.svg
    • Size 1KB
    • SHA256 a3bc4cf423df4d44cac2fc79df58e2181cea7100d5d1e2478e3557618a0646a6
    • MD5 SHA1 SHA512 TLSH
    • Target
      resources/web/device_page/dist/img/vite.svg
    • Size 1KB
    • SHA256 4a748afd443918bb16591c834c401dae33e87861ab5dbad0811c3a3b4a9214fb
    • MD5 SHA1 SHA512 TLSH
    • Target
      resources/web/device_page/dist/img/wifi.svg
    • Size 1KB
    • SHA256 f85c4654555be731378fabad9f7b3d2745a2c07ab6aec0f3ae89096edf8e959d
    • MD5 SHA1 SHA512 TLSH
    • Target
      resources/web/device_page/dist/index.html
    • Size 650B
    • SHA256 4cfa71255b7a0329c985190a0c0f708000ed6695d3753c891685ff5c6dc1bbd5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      resources/web/fila_manager/index.html
    • Size 26KB
    • SHA256 13c40340b5b7cb661c95eb2a06fa1a13e4d697b9e9974d2c74860caf54d12eea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/web/fila_manager/index.js
    • Size 60KB
    • SHA256 80422f21a5683aeeac91647bc778cf0e3268d9285c47234e115cc5d0371536a8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/web/flush/NozzleListTable.html
    • Size 8KB
    • SHA256 db83fa5c13e35a32bd3605f01c11d796124a0fe34f458e9ceaf87a9ac8f8e96e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/web/flush/WipingDialog.html
    • Size 21KB
    • SHA256 f8554aa3fbee278bb4210d24b66d7f73ff221f793e4d8c39c06072774397d452
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      resources/web/guide/0/index.html
    • Size 933B
    • SHA256 7fbf00b95433d0089c8b186fde4b794734e868c6ae6f5cd97f0cdb0347c88a69
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      resources/web/guide/0/load.js
    • Size 385B
    • SHA256 dfb1677a02348530e7b071099360f50c1d56068beb239baa49448096a5f18b0f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      resources/web/guide/0/loading.svg
    • Size 756B
    • SHA256 149347ba6049ed31eddb0845711eb35bd71fd4dc49eae729f5e35c3229becf20
    • MD5 SHA1 SHA512 TLSH

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
5/10

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation
Score
8/10

behavioral2

adwarediscoveryspyware
Score
4/10

behavioral3

adwarediscoveryspyware
Score
4/10

behavioral4

adwarediscoveryspyware
Score
4/10

behavioral5

adwarediscoveryspyware
Score
4/10

behavioral6

adwarediscoveryspyware
Score
4/10

behavioral7

adwarediscoveryspyware
Score
4/10

behavioral8

adwarediscoveryspyware
Score
4/10

behavioral9

adwarediscoveryspyware
Score
4/10

behavioral10

execution
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

adwarediscoveryspyware
Score
4/10

behavioral17

adwarediscoveryspyware
Score
7/10

behavioral18

adwarediscoveryspyware
Score
4/10

behavioral19

adwarediscoveryspyware
Score
4/10

behavioral20

adwarediscoveryspyware
Score
4/10

behavioral21

adwarediscoveryspyware
Score
7/10

behavioral22

adwarediscoveryspyware
Score
4/10

behavioral23

adwarediscoveryspyware
Score
4/10

behavioral24

adwarediscoveryspyware
Score
4/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

adwarediscoveryspyware
Score
4/10