7e71f6e382df1ce4e97c3065c33a8591f0ab4bb5008e8a26263883792c2a8119

Resubmissions

10/09/2026, 20:23

260910-y6lj7agm3t3

10/09/2026, 20:23

260910-y54pdaxzc14

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.HEVCVideoExtension_2.3.8.0_neutral_~_8wekyb3d8bbwe.AppxBundle
Size 7.6MB
Sample260910-y54pdaxzc1
SHA256 7e71f6e382df1ce4e97c3065c33a8591f0ab4bb5008e8a26263883792c2a8119
MD5 54779971af7ef5cab6753a5147dfe8d2
SHA1 f82ed629f9d325c995885512acf87d8fb356e595
SHA512 209210b7157568fb2fe87ac1eea9520f8930fed7f8381faa43afd1ed9af8e034654083e662f5f8a839333ad6b4c24076927094f7b2a02c6fae3625baeaec9ef0
SSDEEP 98304:vcOtO527nc+JRkfqWgUJTHsnbrHWj98xxW4pabvMWjt/0WgUJTHsnbr4UxxWl6d2:17nc+wqWrQH2Ux72d0WrQjxJxW
TLSH
T1D38623D295420E9FDE30073782279E30A8298155FE928B9947B5FC7E98C7E908057F9F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery persistence

Malware Config

Targets

- Target
  Microsoft.HEVCVideoExtension_8wekyb3d8bbwe.arm64.appx
- Size 3.8MB
- SHA256 23345e85244d46c857ea46999d43ccdd837f0246f4abf353ac23a43fa56cb05d
- MD5 b5c353af61c2e825803148a20e9f4050
- SHA1 516798b3269db12b9b2f43bc6a3edb2812bfb1a3
- SHA512 8131f3048e8adceafed548cb4c682fe780da7a5c2c76416b8224fdf94944ad476a7816e47c0670fb3e80bad80eabaefa754696e61bb61472c0c3515b2f1563b5
- SSDEEP 98304:NcOtO527nc+JRkfqWgUJTHsnbrHWj98xxW4pR:L7nc+wqWrQH2Ux7
- TLSH
  T1C00623D79A424E6FDA70063B4527DB30A8188151BEA18AD887B5FC7F98C2D908057FDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  arm64/HEVCDECODER_STORE.dll
- Size 1.5MB
- SHA256 98620747b6c7605023b0971de6ca1c25a858c24c5953c6373b225272e7223c51
- MD5 a562655d5ed53f2c5873d6e174346f31
- SHA1 9705d9fc1bc0b030b4620c83d3a5ab7d2d3f861b
- SHA512 5dc0c1821cf0afb901970ad1327a6a3b0758e430aa57b62ca8ec6f639d6447e12757cba063a4a265bf2a23fda4bd8c10844db3d9bad3917747c6ea0c3fce45e1
- SSDEEP 24576:EVzJGkkWhd3fPtT5CImLFuQQ5Fy7HZoXm6sT4IxNBlqEBJTbBv:XWPbCIm51DxlqEnbBv
- TLSH
  T151659DA2AF4EB4B2F7C6917CCF7A8758302BF528D570D14B2156271BFC98BD09AA0153
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  arm64/mfH265Enc.dll
- Size 1.5MB
- SHA256 e662664fab5f7f7d32c6141c2e711d9ea18bd5eb6d32c67d84d6f629d523abdf
- MD5 eaa9a75a8f18f78c02abf61d40f582f7
- SHA1 ced910152f3de9868dceaacf8065b811bd4177dc
- SHA512 0369cbb9030e93080781060667c8408f5db4bbcc1cfd71080a1e16c23a7c699ac73f3538afdf305b427b1f97d065466433a2f5e4dc6796bfe6bbbee18a5280d0
- SSDEEP 24576:VQEeXePuOHNcYNeE3/DwLXFouvcFUTAlNR1oDUwbR0:VQEeXePuOJ/DwLnvTq1oDUwbR0
- TLSH
  T1A775BF875EDE6897E7C6E57DCD505A00303F747AC822E05A50833D0EED5EED0E6A43AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  x64/HEVCDECODER_STORE.dll
- Size 1.8MB
- SHA256 1d3b85f946127bc097fc7fd12022078bf903777ba23f61ab4c8e2443db770fdf
- MD5 34f6c2babdaeea5e998a2b2874795157
- SHA1 b2919766e1bb2068e4d15c5045c56374840f2df9
- SHA512 a280fa91d31b1c246cf98cded6c7ae62c655bc3c5ae5cadb0582394111f4ef3cbe05dcb160a6df92cb7f3a7940d9447e22671e847f65e7aa48579e230884f43d
- SSDEEP 24576:uFwiCHpI7DZF7gmNUlvkE7RuB+s38qNCwaqhbESerXwZUMPYXGs/EbPB+rde:uTDZF5OlH7QB78qvZURXLEbPn
- TLSH
  T108859D8EA1AA11F8D42EC0BCC16B964BF671341A035157FB92E0477D1F27FD09A3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  x64/mfH265Enc.dll
- Size 1002KB
- SHA256 f6bc752d696b608d8c8bd07f93dd23758104dc2eaad42e9c50676648f91c52f7
- MD5 d147820be2fb3435a80504700b8823c2
- SHA1 704a9c4fce5312c4dd193c72c55dd14fb618bfdc
- SHA512 5c0a9467c35738040db70642665682c97c5c1bffb1172c773b98f20bb1327bf5efc0628d52fe91142d385d0479cbdf2cb2902bc21039d18904ab0229ac8d17d7
- SSDEEP 12288:C40Cclww470X+u99zDGRYjkPG4Nk0Nud8jCElMxN6zQB2slwAz1AjyfDbS:klww4Pu7SK/0NutEwNlwg1AjyfDb
- TLSH
  T12525AE55E58610E5D5BB80B8CA6EA24BF7B57C1F031057FB2A8192295F37BE8533E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  x86/HEVCDECODER_STORE.dll
- Size 1.4MB
- SHA256 b72f79944eed418866c62c58966fb339f6b9580385632f87c39421d7ec683610
- MD5 6b71a0adfe30343b2529a53b7c9b6ee6
- SHA1 f5f89439319b3ceacd69a800c714aef2dc984d0a
- SHA512 328e294fe7be975960f4c7c5755b059cc0ce5ef7933ce692a9ad0430d5615a6794fcf8d88ab577283a7e07a09b55d6ccf84f23cbce1a5d9deedc9c0aaa7c8710
- SSDEEP 24576:xb/C+On6EXefUweFzHn4rvLme7asRHH8vqEsfpIRTTpUSqksG:xb/xADXYU5Fbn41Rh5eK9ksG
- TLSH
  T15A659D21F183D1F5DC8AA8F0521D76FAD42D0779036186E7A3C85FE5E462AC26B3076B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  x86/mfH265Enc.dll
- Size 972KB
- SHA256 0f277214ce8f658720ba48c9224b698d57bb7f7f11fa1e1cf2f132cbd54ebabd
- MD5 96b652a10a680bb2d7fdd5dfebd6d26e
- SHA1 397368d65a9e90be4ca80b02d9d679a4c554b17a
- SHA512 637cc958d5109b4e3e547bc74fcf40d2a5a97ddc6567336f3c1231d2691497d10e0fc6b8bd80a8b51794c0e8c466f68d28d17171566995c3c256430e584860a2
- SSDEEP 24576:ud1QjCglc/a/+ZgG8geRqGryudt+lt/JypuBR4yjpwCr8o/OnbkD:A1QjCgOZgG8geRq7pL4ymC81bkD
- TLSH
  T10125AEE1F88B1172D4C624B05A6EBBA3553C173D479042F716846AFCEC36AC25933B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  Microsoft.HEVCVideoExtension_8wekyb3d8bbwe.x64.appx
- Size 2.5MB
- SHA256 d6aea78bc59371303c064bdf7f37e6b41429525f9adba83eb04549ac3ca2e8c5
- MD5 e442bda09f1ef43c4271b51b22998c6b
- SHA1 871213a7fb3199967095c6e7c07cf22d3592cb9e
- SHA512 57e3d59faca65947349316ad7e9aa16e64ce0a1cd4ff2fcbb58b6313198421de328791e82168b1bcc531bca3957ecdd880aabf4873e2835a8fa29d1e2f3273b4
- SSDEEP 49152:qbNxMWbZ1Zz/0JVSsr6c4zZ05eTcrAsnbr2jU8daxdbnW1Eq1QGbBVOY6dp:qbvMWjt/0WgUJTHsnbr4UxxWl6dp
- TLSH
  T1FDC523D2A5420E9BDE30073782379E30A8188515FE924BD943B5FC7E99C7D90905BF9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

persistence
behavioral8
- Target
  x64/HEVCDECODER_STORE.dll
- Size 1.8MB
- SHA256 e1e77398bfe9407e94e4dc13cb3458dc346d7a13cbcdb04549a904cfc762f9e9
- MD5 b02d4914a36351e3844047d2b45dff59
- SHA1 ca4c09c32e2012765edd5e8fd37c0de37f56ead2
- SHA512 56cbcb520c91b5945b17a353e90f74b15f02905416f615077db1e27e8208d71e17a9b07ded2f501e85c1867fd40967b60b1082164ba91f05958604701be23413
- SSDEEP 24576:NFwiCHpI7DZF7gmNUlvkE7RuB+s38qNCwaqhbESerXwZUMPYXGs/EbPBS7Q4:NTDZF5OlH7QB78qvZURXLEbPc
- TLSH
  T1D3859E8EA1AA11F8D42EC0BCC16B960BF675341A035157FB92E0477D1F27FD09A3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  x64/mfH265Enc.dll
- Size 1002KB
- SHA256 9f5acdc892447320e448be0fed6728252797d6ab2c52f0d59e71b27bbfbe30f3
- MD5 881da01476fbc06ec14d7b54567b53b4
- SHA1 431efa3a32c61d9163d9263cfd6a5cf9c91652ca
- SHA512 f019a77d0f5a46d4578cc00959bdf58177844a5c8fe5ae168d02593ce54aa7ac7632d5625c2db5345a4db25207e4eccc24047a7159935816d8f50a33de842033
- SSDEEP 12288:p40Cclww470X+u99zDGRYjkPG4Nk0Nud8jCElMxN6zQB2slwAz1AjyfDbS3K:flww4Pu7SK/0NutEwNlwg1AjyfDbh
- TLSH
  T1FC25AE55E68610E5D5BB80B8CA5EA24BF7B57C1F031057FB2A8192295F37BE8533E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  x86/HEVCDECODER_STORE.dll
- Size 1.4MB
- SHA256 45a6773ace42b5c793f5f5e5fe08c2e2c1f544d5f78656d73b62d8525d28bd6a
- MD5 8816dbf2ccd7b81dd7ad57261c395335
- SHA1 429554ac2e836cb0d1bc59872fff6e8415e0a46b
- SHA512 a314c08c6e79f2ce03ab1f18c8a205ad5d737765e989fef3a6376b2b343d3ccfaf016cf1c6f253cb305ed432bb4d9482e51f3998da5fc2d54f03904fb9aca5e6
- SSDEEP 24576:Tb/C+On6EXefUweFzHn4rvLme7asRHH8vqEsfpIRTTpUSqksL:Tb/xADXYU5Fbn41Rh5eK9ksL
- TLSH
  T175659D21F183D1F5DC8AA8F0521D76FAD42D0779036186E7A3C85FE5E861AC26B3076B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  x86/mfH265Enc.dll
- Size 972KB
- SHA256 c905ed1f876212a5de6754270bb9ee5d647be4aa9e488c210cb336f907328c88
- MD5 71af33cd165a53345760068ce66d1062
- SHA1 9a7cb8712d89ecffe490f37f60f0d3273137058d
- SHA512 0c536fd6670978bf6471bc7d8b7582225d0e8d6f0afe675d351a4907c25c6759a43198ff199817695c042b4a3c0b7fe019d98ee9d68f2a4249bd8f80ef7e884b
- SSDEEP 24576:Xd1QjCglc/a/+ZgG8geRqGryudt+lt/JypuBR4yjpwCr8o/OnbkD:N1QjCgOZgG8geRq7pL4ymC81bkD
- TLSH
  T1F325AEE1F88B1172D4C624B05A6EBBA3553C177D479042F716846AFCEC36AC21933B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12
- Target
  Microsoft.HEVCVideoExtension_8wekyb3d8bbwe.x86.appx
- Size 1.3MB
- SHA256 0e87ab84986f3b9491a206938bb9f89c675c02a947c2c0c458d8f32509cd5334
- MD5 5864bc0117189e22e9e59d93e27e44bc
- SHA1 24bd4e763876a842aa5115c280506837e17aadfa
- SHA512 87407e105a54cb09b1871bfa4ee41d52c887b482cdddf599c9d0ecf8249e8a8f32b5081eecb2b27f064a3f37d9bfec1b583832ecbc87958973d1d1078918e952
- SSDEEP 24576:PbYb8S8Umaxdbfpp1E1Eq1Qdpxoj47PVCJO8P9B6cEP2QDJ:kbD8daxdbnW1Eq1Q/BVOY28
- TLSH
  T1875512D295020E9FCE30073782279E70A8298615FE968B9953B5FC7F98C7E548057F8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

persistence
behavioral13
- Target
  x86/HEVCDECODER_STORE.dll
- Size 1.4MB
- SHA256 c0f1823d062f137a9061288cc6ca384e5d9d4ed0b6a120d314d0d6aca1e8d6ce
- MD5 023f2cb6437bda25ab9b9e73ab581464
- SHA1 988c364b513ab363ca02525a9db5e4cd388751fe
- SHA512 aad0a3c7397f08c840f581d94a6a85030b1a3994129234d61517ea845976754091dcd11d6f8fbf9676150d39a9c5c9f9407362f7bb372b024669194632d452b7
- SSDEEP 24576:Bb/C+On6EXefUweFzHn4rvLme7asRHH8vqEsfpIRTTpUSqksl:Bb/xADXYU5Fbn41Rh5eK9ksl
- TLSH
  T190659D21F183D1F5DC8AA8F0521D76FAD42D0779036186E7A3C85FE5E861AC26B3076B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14
- Target
  x86/mfH265Enc.dll
- Size 972KB
- SHA256 5e9ed936206fefae5019c3be1ea5a6d13bf1e406fd6f0d3bf55d53515940fff8
- MD5 209ccdcd012b173277ed8c55bf394973
- SHA1 e8dea4095fe7ff3440c3465dc5be2c2b1e7edd76
- SHA512 965ec4cbf718d8c8ae82db8b13d2603c29b9437a02fbd31758d6ca4a34ad00554c86a810a2acc68cc2a52efe4a4a9669651ccaeeef155b6af4d55a21b493ec02
- SSDEEP 24576:Pd1QjCglc/a/+ZgG8geRqGryudt+lt/JypuBR4yjpwCr8o/Onbkcu:F1QjCgOZgG8geRq7pL4ymC81bkV
- TLSH
  T1A825AEE1F88B1172D4C624B05A6EBBA3553C177D479042F712846AFCEC36AC25933B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15