Overview
overview
7Static
static
68a9006cfae...a.appx
windows10-2004-x64
18a9006cfae...a.appx
windows11-ltsc_2024-x64
3VFS/AppDat...ep.exe
windows10-2004-x64
7VFS/AppDat...47.dll
windows10-2004-x64
3VFS/AppDat...GL.dll
windows10-2004-x64
3VFS/AppDat...v2.dll
windows10-2004-x64
3VFS/AppDat...de.dll
windows10-2004-x64
3VFS/AppDat...de.dll
windows11-ltsc_2024-x64
3VFS/AppDat...DME.js
windows10-2004-x64
3VFS/AppDat...DME.js
windows11-ltsc_2024-x64
3VFS/AppDat...nch.js
windows10-2004-x64
3VFS/AppDat...nch.js
windows11-ltsc_2024-x64
3VFS/AppDat...dex.js
windows10-2004-x64
3VFS/AppDat...dex.js
windows11-ltsc_2024-x64
3VFS/AppDat...ort.js
windows10-2004-x64
3VFS/AppDat...ort.js
windows11-ltsc_2024-x64
3VFS/AppDat...ync.js
windows10-2004-x64
3VFS/AppDat...ync.js
windows11-ltsc_2024-x64
3VFS/AppDat...fer.js
windows10-2004-x64
3VFS/AppDat...fer.js
windows11-ltsc_2024-x64
3VFS/AppDat...ate.js
windows10-2004-x64
3VFS/AppDat...ate.js
windows11-ltsc_2024-x64
3VFS/AppDat...kit.js
windows10-2004-x64
3VFS/AppDat...kit.js
windows11-ltsc_2024-x64
3VFS/AppDat...lel.js
windows10-2004-x64
3VFS/AppDat...lel.js
windows11-ltsc_2024-x64
3VFS/AppDat...ial.js
windows10-2004-x64
3VFS/AppDat...ial.js
windows11-ltsc_2024-x64
3VFS/AppDat...red.js
windows10-2004-x64
3VFS/AppDat...red.js
windows11-ltsc_2024-x64
3VFS/AppDat...ate.js
windows10-2004-x64
3VFS/AppDat...ate.js
windows11-ltsc_2024-x64
3General
- Target 8a9006cfaee227415eeef0d645183ca423c80b9a8181e35a57bec71468e72daa.zip
- Size 141.8MB
- Sample260910-yfs7cavfqb
- SHA256 8a9006cfaee227415eeef0d645183ca423c80b9a8181e35a57bec71468e72daa
- MD5 1a66cfd2472301486f24b91a813f32d2
- SHA1 8c20d3a80732c07a1d4f2a5a4b229b6c7f8a0fd2
- SHA512 959cd8f9a10317a0d79b52f003d1c2991a2c777101c63b06e69d6ccef238ca3f754223b120fa35bc5735bf96c3cc8bfb06e0a804bca8a0d6a1187bd3b2c587a8
- SSDEEP 3145728:eTRZHEfqcw/qTE4OuVqm2hyLzblq76AapzhBrlm1NxnmJP:8HEFCqQruB+yRqMpdBosJP
- TLSH T19668338890F4A19AFF0A1473B7D6E0F65C579BE118D2D9D2132802CE053AC19BB57B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
8a9006cfaee227415eeef0d645183ca423c80b9a8181e35a57bec71468e72daa.appx
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
8a9006cfaee227415eeef0d645183ca423c80b9a8181e35a57bec71468e72daa.appx
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
VFS/AppData/PKeep/PKeep.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
VFS/AppData/PKeep/d3dcompiler_47.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
VFS/AppData/PKeep/libEGL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
VFS/AppData/PKeep/libGLESv2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
VFS/AppData/PKeep/node.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
VFS/AppData/PKeep/node.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
VFS/AppData/PKeep/node_modules/asynckit/README.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
VFS/AppData/PKeep/node_modules/asynckit/README.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
VFS/AppData/PKeep/node_modules/asynckit/bench.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
VFS/AppData/PKeep/node_modules/asynckit/bench.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
VFS/AppData/PKeep/node_modules/asynckit/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
VFS/AppData/PKeep/node_modules/asynckit/index.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/abort.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/abort.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/async.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/async.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral19
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/defer.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/defer.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/iterate.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/iterate.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/readable_asynckit.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/readable_asynckit.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/readable_parallel.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/readable_parallel.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral27
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/readable_serial.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/readable_serial.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/readable_serial_ordered.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/readable_serial_ordered.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/state.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
VFS/AppData/PKeep/node_modules/asynckit/lib/state.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 8a9006cfaee227415eeef0d645183ca423c80b9a8181e35a57bec71468e72daa.zip
- Size 141.8MB
- SHA256 8a9006cfaee227415eeef0d645183ca423c80b9a8181e35a57bec71468e72daa
- MD5 1a66cfd2472301486f24b91a813f32d2
- SHA1 8c20d3a80732c07a1d4f2a5a4b229b6c7f8a0fd2
- SHA512 959cd8f9a10317a0d79b52f003d1c2991a2c777101c63b06e69d6ccef238ca3f754223b120fa35bc5735bf96c3cc8bfb06e0a804bca8a0d6a1187bd3b2c587a8
- SSDEEP 3145728:eTRZHEfqcw/qTE4OuVqm2hyLzblq76AapzhBrlm1NxnmJP:8HEFCqQruB+yRqMpdBosJP
- TLSH T19668338890F4A19AFF0A1473B7D6E0F65C579BE118D2D9D2132802CE053AC19BB57B6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target VFS/AppData/PKeep/PKeep.exe
- Size 2.4MB
- SHA256 478992fc2d0af1d5723755f7510361b8e51076395491356c7e97c8a6bf1cbdba
- MD5 7cc84286aa9515b092336af6e431ccee
- SHA1 99d4efa371c806f0b4926cda6db1ea2380a85a28
- SHA512 7998d68699b22412016261e11080bb7f746a90dcea5e446645b38dc48f2f318ff2b58354819ea32261345550a150012a00a76728319eea5c8944e7e431ae6456
- SSDEEP 24576:fLPEHN9Uz0my16dSl6lGTSc1t2i3abUH/wxN2R1I60pSGW23bHXCeb4TY6c1+bft:LKwvaz2i3Eowb29W+Yh+brc00K4wR
- TLSH T1C0B57C03B95D91B4C80E2172203CEB3A6D245E154B27C9E39FD4FD993AB53C225366FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target VFS/AppData/PKeep/d3dcompiler_47.dll
- Size 4.0MB
- SHA256 af8934f48cdb8bb173cea698f2f098081e20f7651b6cde2727413d44263e8bb3
- MD5 f620e01181acb5cd313aeea81e6cda65
- SHA1 fbcf1b4ac1b3b5a1311e72ec6c52b66ca6b3dfc9
- SHA512 ee98ab79e3a043fdbed7dfe300b388394aec6e1e6834e66740360e00c8ad61feb402556bf3d958976d9256095c7bca8bc87c34f52d3bd980c7d11b4af82c64db
- SSDEEP 49152:xlEaLLznrGiwdkHdA/UMo2h5XttSdY8f2W0z0oP0Qi0Cd5Y3zH4En8++DrBxDjP5:xW8WL9cdBRkCAzhngDrBxfqHGH
- TLSH T138169E31FA428172C8CA05F066AEB76A957D9B30173844D352D0AD79EC702D36F3AB97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target VFS/AppData/PKeep/libEGL.dll
- Size 406KB
- SHA256 e9842ca6fd2024dc9b9d336c9efb070235fd1c1736ebb3809bb461ee2c488f04
- MD5 64f2c3611640543d002bb0d387d8accc
- SHA1 7a15aa09246b7aa0353ec660ac6c57950cd4d9b8
- SHA512 21acabeeb62fff1994b158af1ba9a85b9a0e421991c28c83b86e06bbe98addcc31de00540208352ae18674999d6843b7af05888d4fc2371098bb398ff093e0fc
- SSDEEP 6144:v1yvISIaRkux6M5iKLSRZLPxXe8JjLjbp/PPu/wRWvl3+tug2z4hP24EjbRS:9y2M5iKLSRC8JjLJPPUwR0y3qv
- TLSH T1D3949E417992E4BDC42B21B2101EE3641AB97C600B348DDB67D88EFB5BF02D25931B7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target VFS/AppData/PKeep/libGLESv2.dll
- Size 7.4MB
- SHA256 561f911d8d50c85c56fcc8d949bce2cd5a13c3aaaff9472b6e253c6474833c35
- MD5 2a226d25aee41a5e6d94d7f897685da2
- SHA1 b327b5adb798908307a74891613d2ffad47f9229
- SHA512 b98c4a9bd13dc6a5775c90558290ea60c6f435bf47f59a90fdae89fb7982fbe28a8f94fec6a9e045055c64ec7b16dcaa76f0be90edad37255891419badc6693f
- SSDEEP 196608:RSBGKCRDriAK9WPcy4/sKqayDGJBciMRzb2qT//DY5Og+oDQSHp7:hKCRnC8cN/sKqmJBciMRzb2qT//DY5O0
- TLSH T1CB769E10A211D178DC0621F1A51D7B3E5B644F2E4B268AC3DE899EBC2FB05D35672B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node.dll
- Size 20.9MB
- SHA256 6332426a214918ff1ba7c5a932359afbc18b152c87276bed68ae18694a41f766
- MD5 01df8870575ac9c536fd42873ecf673e
- SHA1 3a6f1a60e9f66db2fbcc08541382e76d3f5ac7d2
- SHA512 010d238ebc5c4c700971f73f735e92af699ca2a9d9486d02b30ffab578be9a74518192eab4b3e92a53ef80969379891cc7d94f41ecd5da3df6a2408b3caabc55
- SSDEEP 393216:B/pVEfkhq6AK+p2BKELKLLCXOKQkNZbf0y4s5t/LB1ZxX7CX:BEpAmfCXjAFs5pLzX
- TLSH T1CC27BF40F7E31170D5A352B4022FA33A6B36A9036B34CEC7F69C49A41FA36D05576BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/README.md
- Size 7KB
- SHA256 be5bbf9c6a02774a397f2ace8bcfb1a34d052723d8474bf3e46e0623066c8701
- MD5 dc78573e1426b4686546a9a0e3dc123b
- SHA1 030a12b4b2a9151538e9491d3a4f23dfe9848f32
- SHA512 76257a4fa2ea50b3cf72339b5a01c2ff8f07a744f746ac53874c5a14d3c97373fed4f0b1292550bb372c664d9bb112a653aaae264a1c61262952113e85f3b936
- SSDEEP 96:IyZQGglQBM8Gk+aGtMZHEWKpF0Bpns4+l6ZHEb6KtfpfqxEmHEWKSnQfs4+LHEWC:SH8G51MVvBpw16uixXtnQcaV74y
- TLSH T158F1E8271A811A984112F0ACB23EBD8FFA4AC093CC9FF893B4DC9A5C37D89571675598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/bench.js
- Size 1KB
- SHA256 b6c4a058c4fd03900f3786ef216322d57553ec83998e19b6d557dc39acfd2f9f
- MD5 1f35225bb5de1e68d061869daf5d5ae1
- SHA1 8dacd95640ad3d0ae47aebf5bd1ba4d83f6a1f1d
- SHA512 18f7ea15e4d492bf65cb28d5cf3cf991f80d0a00a82d53afdf089d45c6e3ab9064ff9a12e124c8b0202fb640a200b72b62166c675d6e1557fc4a8db5c1a70be7
- TLSH T12F21AB4815F23270A1373679872FD56F72B38943181C9862B99C81C60F9AB169827EBA
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/index.js
- Size 156B
- SHA256 397441fd78b69d7bdaaa48a0f354c8d07086a24414655b0601ab4f0c26e15f2f
- MD5 80916e2018297eac89a0765e9300ba11
- SHA1 9201eacd2650642ff12a8af5fd1dbf7dc7848bee
- SHA512 41c948693ff71feeeecc31fbfb4b210231a9da914541893dcf76522a301a3ab6a7109393e0f7bdb916aae817b573ffd521d4f32f44c166427cdb7139565b5e9a
- TLSH T169C08C871FD066052203AF84D6400B283122E407410C39A0788C349D63C86C80F24E9F
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/lib/abort.js
- Size 497B
- SHA256 2c64e26dbd17f4c5ee9e017a098cda40e5eb2234a89cfeb46287f6378b74a66a
- MD5 884f70260b904535b3b46bca66d3901f
- SHA1 440629b13ff27be58720005cb549f38903d80737
- SHA512 2fb2e2b5548da581101eef16ebb201e0d03d54d28b0ceec2bd0f46b3b4a776358af6068323da64c348a4c553dca31cddb5bb4f45db6fd173e54aa5d71088bb61
- TLSH T12FF09E3BE121B1278D2B6870C58F54F8AB5F4265E263E9462446DAF80E2C03A064EC24
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/lib/async.js
- Size 599B
- SHA256 cc91aca5b66788252bb01207ec797419eb4add90b88740395e818d12fc77bf87
- MD5 336705ea47367dfb6c0048d7c28cf0b5
- SHA1 c5d0ae608872e8fcc47a465d51564b6576c49401
- SHA512 009530fc7b936783b8c08f83efc065b4b49b6eba10ec493a5725527d98b889a19ef0e98ae732d3812967d9bd31b3d1f062577b260945d9363c34c5c0ffa4a61d
- TLSH T19EF02288A6A323518873F3EB928F8329623CE5021C2C5C83718CC3D01F644A89B87D9C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/lib/defer.js
- Size 441B
- SHA256 91e4ffb114b4d60af8da177eb388d507a13dc9bc449f68e2d4912083cbc2b1f7
- MD5 296f8804b9d809f53e081a97e5cd1c3b
- SHA1 751e8dd7ef7b877d05e66eb8782f95ae78351c4b
- SHA512 10d223011ec6ab8226a4dfa5f1a3a4c14c2740368d5453605333a23fdf52a9fa55163a29379c937f568212725b11dfa006488d7df4cc4d25ba47b60d6b511a83
- TLSH T154F02B2C6879B992921F807581AF505918E9C9271348E422B45DC5F21F90C3C3D97ECE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/lib/iterate.js
- Size 1KB
- SHA256 1ed503336dc4f4b252852c45f8ea0b3b8eb9eab90dfa11189d9d00de888010ba
- MD5 2f5c56d8b3f766e65f8868c9a77d4233
- SHA1 219e4942b78515ab728825d33473715c246fd081
- SHA512 1b1aaee5b768cb949869f4c76707eb6331acef0086ce1b8a618fb26a4cf2e5e39aa0ed5e02bc3d631b80bd251b9103fc4f219bf0a0a4bf19d30459e48b041d65
- TLSH T14431FC317442155B0E5F7267E28F57698F19C00AF6AAD583308E9FA4FF6A1340B1C979
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/lib/readable_asynckit.js
- Size 1KB
- SHA256 a23c413a059f4422ce03f22cd2a373b2fa6930ac47cc103a0e7e26a6ee6d0602
- MD5 0d8b205f6525fb75a2f00febc0a39ec8
- SHA1 6a883852b3639a6c4a7e7e4fdefa2bd08c6ecedf
- SHA512 f11f089b504fbd98ddfb1152244e8b5a44259f4708badb3406c9f72bd330a4f4412338e2d1cfbdc48228ef31680b1d7306ae7e37ca51dc5f07c5d21a8d642eea
- TLSH T1DF31138425B925226B53A0F9AB6AAF87105DC023540EC855748FC3F45F769BA0A31EF1
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/lib/readable_parallel.js
- Size 673B
- SHA256 d254fc0dc21eb4608336a462592b44cbbcab954d3b6904a26a4766e03dcce202
- MD5 7e31bd9c72421785a2f962cca13a0dc1
- SHA1 55538262a65702eb61a29e2ea3a20637490f96d9
- SHA512 a82072ff53e56c0f2412d7055ce51937ad684e8c5eaca61b4098c804efaffcca85fa57891a66367f07ff537c39e49c6ad01bdffc53963bb5ce17e14d5d5b2691
- TLSH T1700197122A637904419AB3A2E0C2873B8B65C314C80E60B1808EEF98FE016984A52F3A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/lib/readable_serial.js
- Size 655B
- SHA256 b79637514db671ef3dcecde523017542c19e63f8eb93c5a5ab42b2f05bcc9a9d
- MD5 bc62c09129a9a512a6a20c173ced3a12
- SHA1 05bbc69be79b76f58faeb2805697ea9469c60d89
- SHA512 4fac797281b903d00a106d02b1cf946b5270c9d557c08a3f1402a846b9076b03efcdb778c86f972dc6eaa9aab5078d42f10e6fffc852983158a928b53c863957
- TLSH T1ABF070171B63BA000559BBB360428B1B9B55C226CA0D51E1C4CEEED4FD555594F41C3E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/lib/readable_serial_ordered.js
- Size 941B
- SHA256 9ddda7cb6c54a672d8a7e8cdd029d44e35335f7fa6e6102daf0c9f60137b59af
- MD5 535bbfb2aaec7fd8b19ded7a053fc8ee
- SHA1 bf2240383cb36d9a191d5ed87abb5d8674ddd8d4
- SHA512 03de3103f16015a0384fe5f38ae72fccbc2e5569b1dab4929c1730b220ba423cc3288cbcfbc2d5883b74b757eef67861f90cb64e27a91a2bf650fa72c42b70ef
- TLSH T19B11712B3A13A500019DBFBEA1468F1B5B45C236D54E14E284CFDDA0BC4195D4F42D3D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target VFS/AppData/PKeep/node_modules/asynckit/lib/state.js
- Size 941B
- SHA256 9c3fe921ce1c205c62ce1cca97e1eb9335f3ddf066626a36c9a44bd59bd7a2db
- MD5 f753a1520562c93ad8a284fbe837f2de
- SHA1 fa825d1971532d33a039d634de8aed494c09c08a
- SHA512 d4ed3c76ebd0373b0f89f7cf234dbb847d282dd12c746b92e252c541abdc3d3349e11ada478524a3bf4faf2624d0b3a81bdf8b6f0daeb5a1b3f260c5844a52ee
- TLSH T120119C56B89A9C0F55C7903B0A1D9030E753C867741A7840BCCFDDB09F418B91B2FA0D
- MD5 SHA1 SHA512 TLSH
Score3/10