Overview
overview
10Static
static
10BCGCBPRO1100u100.dll
windows10-2004-x64
3BCGCBPRO1100u100.dll
windows11-ltsc_2024-x64
3BliceCtr.dll
windows10-2004-x64
3BliceCtr.dll
windows11-ltsc_2024-x64
3CreateMiniDump.dll
windows10-2004-x64
3CreateMiniDump.dll
windows11-ltsc_2024-x64
3FeatureSwitch.dll
windows10-2004-x64
3FeatureSwitch.dll
windows11-ltsc_2024-x64
3Microsoft....86.dll
windows10-2004-x64
3Microsoft....86.dll
windows11-ltsc_2024-x64
3PPUtilLib.dll
windows10-2004-x64
3PPUtilLib.dll
windows11-ltsc_2024-x64
3XMaxUtil.dll
windows10-2004-x64
3XMaxUtil.dll
windows11-ltsc_2024-x64
3bin/EXPSRV.dll
windows10-2004-x64
1bin/EXPSRV.dll
windows11-ltsc_2024-x64
1bin/ONBttnWD.dll
windows10-2004-x64
1bin/ONBttnWD.dll
windows11-ltsc_2024-x64
1bin/SplDou...pty.js
windows10-2004-x64
3bin/SplDou...pty.js
windows11-ltsc_2024-x64
3bin/VBoxCl...86.dll
windows10-2004-x64
3bin/VBoxCl...86.dll
windows11-ltsc_2024-x64
3bin/bug66112.js
windows10-2004-x64
3bin/bug66112.js
windows11-ltsc_2024-x64
3bin/bug67949.js
windows10-2004-x64
3bin/bug67949.js
windows11-ltsc_2024-x64
3bin/bug71882.js
windows10-2004-x64
3bin/bug71882.js
windows11-ltsc_2024-x64
3bin/catch_...004.js
windows10-2004-x64
3bin/catch_...004.js
windows11-ltsc_2024-x64
3bin/closure_001.js
windows10-2004-x64
3bin/closure_001.js
windows11-ltsc_2024-x64
3General
- Target #Pa$$w0rD__2024--0peɴ_Set-Up!.zip
- Size 55.4MB
- Sample260912-slchwsbj2z
- SHA256 639b46711f4669c16f35283c28173f1a7130b18bf4a3038c93580844b3d9f059
- MD5 8d6f490832036ef26fe214e112b418c9
- SHA1 c24f1b589c321bf4bdb9f7e946618c8c1a59b49b
- SHA512 d17a4a31a8c88f11a8a49e9bd21524e08a060aab581a7463c25270b06cc1b6af391eb01d6d76f07ac85f829d5d1491314a261bbf9834f8ffe44d9479ec22a60c
- SSDEEP 786432:OV6jfBU7mCpjJSIY7shp+fmB4zyYuEUWjHlsNpWSQU/eCnz1hyK8a67mmSn3AXcW:Zjolb/hp+fI4z0sj0pWSQ1q63huZ1o
- TLSH T1F6D73364EF980049F65BCF7594A5B32EEDB4C50EDBA2BA2FDE1C48101C222F65B27507
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
BCGCBPRO1100u100.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
BCGCBPRO1100u100.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
BliceCtr.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
BliceCtr.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
CreateMiniDump.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
CreateMiniDump.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
FeatureSwitch.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
FeatureSwitch.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Microsoft.ExtendedReflection.ClrMonitor.X86.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Microsoft.ExtendedReflection.ClrMonitor.X86.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
PPUtilLib.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
PPUtilLib.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
XMaxUtil.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
XMaxUtil.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
bin/EXPSRV.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
bin/EXPSRV.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
bin/ONBttnWD.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
bin/ONBttnWD.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
bin/SplDoublyLinkedList_top_empty.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
bin/SplDoublyLinkedList_top_empty.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
bin/VBoxClient-x86.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
bin/VBoxClient-x86.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
bin/bug66112.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
bin/bug66112.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
bin/bug67949.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
bin/bug67949.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
bin/bug71882.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
bin/bug71882.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
bin/catch_finally_004.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
bin/catch_finally_004.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
bin/closure_001.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
bin/closure_001.js
Resource
win11ltsc2024-20260911-en
Malware Config
Extracted
-
hijackloader
-
directory
%APPDATA%\USNO_32
-
inject_dll
%windir%\SysWOW64\input.dll
Targets
-
- Target BCGCBPRO1100u100.dll
- Size 4.7MB
- SHA256 d272ddff64fa79a9dcd965d5bd5fb5839705cea837397ea167aa3cc1f5217d02
- MD5 827f6705fcdf072e512172f64255ce5e
- SHA1 19fa45133abef1b7052250388b5c3e3d355b6c49
- SHA512 6a3ea037632d103717d79c2b49c2578100d7c8bca11990b61bc345e6e5ff837e7bb170173699f03b256fa90cfe40c4fd7dc2030f1c8b5a983290b8a6900c0f42
- SSDEEP 49152:96X4Si1b8x7tHI/q5tJy1Y8e+9Jjvjnz89YusOG805JJODHtgRDyQ401z9Cs4:9Y4Si1AIy5HyO8e+nv/msn5C50
- TLSH T193367C30BE7C0279C5DF95B69E3E366F4D5EAD50072842C75168385AB870AD23633E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target BliceCtr.dll
- Size 36KB
- SHA256 587a9cd8487a7ed9d220fd3c772852a761330524b5dfd7f2f3dc45d6fff45eec
- MD5 e2bf206e5164569500742637b5459402
- SHA1 dfe3efd6dd1b0872fc896a49afccbca326cb1bac
- SHA512 55d46ce1d7462be0325e33b8b143e2822aea148e31750818999b2e740540c4d90ac9ca7cd9403b4bb38e86b9ca2c524523a5a2c26fe0c4a5f3d00d79a65874aa
- SSDEEP 384:E0G+iQRTERr+Qml1pd3G/sys6da7jKCEono9rIwZZa:EKRTE1cG/suda7GCdno9Xz
- TLSH T159F26D2061D801B3F3A75970B8F76F1B6EBE7A6019B0C51BDB6146E62C213D0AD2B717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CreateMiniDump.dll
- Size 15KB
- SHA256 e6198c53a1999e30a620a6057b4efa3ee11193adcdbf3f343859f33eb8e0f4be
- MD5 2c3a7c4d149514fa57f2f6b41185ced1
- SHA1 38fddc0a01bc7dc32c856d61923e17cc87cd07a7
- SHA512 de42735c914e354e2fa6833638151424f2713a874cf45dfd9499962a90c90073b53595a18ee1e082154a64f5ac0d1055d2d8900292ec9e7f00369e8c1e4a78a4
- SSDEEP 192:5o88IvAcKi5U2ZOBBG+vBtV+3X3PV26A1Tp8Yu8nG8HD/w2OndRaT3wWFC:5b8Ivl5RZO/VbVinPVkt8SjHbsrSfM
- TLSH T12E7239E1A7A510E2FFEA0FF035F5D3934C393AA23FA6507B9291819718E0790F514769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target FeatureSwitch.dll
- Size 51KB
- SHA256 5f77da103105b72081a6c77a834f23e5c8c70b98834e57f883e733e6e63b6438
- MD5 560f231205e16cd3b8fa9ae1668b0070
- SHA1 c96cc4e280947be30af8ed03703f92e131434895
- SHA512 f91773987cb8d3d518094cd4eeca127a97ba5a7207b83dc08d9bc33da67ade074461b54fe414843fc9723a7a39ef29ddfca4582e8587a7edb6bf9f38cab7b4bf
- SSDEEP 768:TiyyUPQ30UWxfPugpf4YYA/Q1K6h0santEDpm4xeZ5vyOv+QVAVF7su:eAshLA/9m+6Ov7+F7Z
- TLSH T1F3333A0576958033E3A75A382AB4D2B58D7FB8422BF1509F2BA509BD4FB17C1D938336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Microsoft.ExtendedReflection.ClrMonitor.X86.dll
- Size 549KB
- SHA256 bef387e6684961effe3dfcce32359e3b5b7b6bbdf0d887ae343b1b72c8c369d0
- MD5 0828ff0ba7026f64338c74480a5154be
- SHA1 f3b8b599877293483e4494e9afbd56049666145b
- SHA512 8ea195637ee85d906f0620bb5536e29ac2c001ef1e0f6a3b0c0554d94ea4c9b48f67d8f77e8abbe293e001ab1163b7e73244a0bea114ff5eeb6cc57fb931bb64
- SSDEEP 6144:o2enyPYnBU3WI1MWfgRtH5snZx22O9MdNBiSVnF1g5gXxRmDxNuWYEUxCYA4ijEd:oXnyPQqWSTg1IjOMNBiYoNuWYEUxV6QP
- TLSH T1C0C48F1073E58175F5A92AB01C7AEB36887DBC240B21D9CBA3D4196E45F4AC19F72B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target PPUtilLib.dll
- Size 283KB
- SHA256 aa4e0509b93a8ae6f4203aebb57e51e4a886bfc92f5650d3941aa97f0924bb54
- MD5 f6832bd8caba758d758109ef5b31db78
- SHA1 157af71e96a98af67441c6b48b67b37d0c2a9719
- SHA512 6b750ce919eb83bc218017aaba5c7976e14d580b40ac20bf8986ed699ba2f91321c26783aeb5ca212c6f582ec2a1e26333af454925e3c7b26a46f05d4ea46ea6
- SSDEEP 6144:R6MpA+1jGatz2uIO8fGZT/TCg1mOZjv+9q0/G:hA+Y+z2LAbCAv+5/G
- TLSH T1DC547D6077658C37EAFE02349DBF6A1B952CAC510774C1CBA3589EAE68321C35A34787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target XMaxUtil.dll
- Size 63KB
- SHA256 47928db81d36550b84125df30055fe43d81aa7526e4855ba2d587ca9f2e0d805
- MD5 e8d2cb44f70f3a239b26b977d9ccf526
- SHA1 65365316d99bec3c2679460a232fc683c5e849df
- SHA512 e1a8bb8ded1ddab9d0944a576686404432a92c503499616fdd6b3397f171881698d89d15aad5cc5392db7b871ee763edae436797b7891d7b70005f7104191f42
- SSDEEP 1536:LC7rwJtwGQj8CIwHUpRSF83kgnJMhCbV5Owpww+LMM6CR:LCXc483kMMIbV5Owpww+4
- TLSH T16A532912BF598426E2F60175A97D2B9E342DB5265BE900CB63171F4D0C70AD3BF78B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/EXPSRV.DLL
- Size 506KB
- SHA256 f3e355f8c13864d36ab96584c0fbb1a765da4f4d104f4c7e45c4a8e74baee7c1
- MD5 f387bff7cae9f219c39452a4f864244c
- SHA1 7712fbec92dff744ea5900feceb82b24e0d24ade
- SHA512 3ebb130824c7f91aa02f6d32fcb3498208541cc445a6fa19bfdd1ef71cfe9ec14ce988fc4f862aa35aec29a7a9effdacdaf352fdf0d4b3dd8ae55b9eedc9ac87
- SSDEEP 6144:z5PmBFoNE0F+hxkiz+kSmhlLnPjUc6xo7cp75KRrRrIOsGmPp9GbbysmD8jlGuC:RhF+0f6ljj/ao7dRrFb29GMAj5C
- TLSH T16FB48E45B7641EB5E4AB8179C85B8A8AF6B17C564F20970B13E4B7AE2F33372521F301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/ONBttnWD.dll
- Size 629KB
- SHA256 0e5123a235eba15530e0028076a159355e80fa3a8591d4924f6abbf5a2366519
- MD5 e356385ee71330e7bbbfe100aadc4e4d
- SHA1 8ebf3edaee0af33ece8610be7ad6041d9373f9cf
- SHA512 dd8c8929a97203b208190e6fb5120aa8376fe8d88ce2f26258c0e7ffee780390e56406b27137375d7a0662115c58131e6109c791c33a9eea1ffb5979abdef5ed
- SSDEEP 12288:IzxgQtjuvIJCEPz85oaQHTj5I7XHgZwKhJAeCGgCrcEz:g83QHTqLHgZJJkpCrvz
- TLSH T1F8D4BF16FBA14DB3E16BC134C5B79262E7B2785D6A10C31F1A74AB6A2F337E05E19301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/SplDoublyLinkedList_top_empty.phpt
- Size 266B
- SHA256 4c42da75ab600f8c11cb8fbd76bbe702f0341a78e41bfa0936f7dc94faee68af
- MD5 30d5679002a0851f57a10c3644a25a17
- SHA1 6470d47e16a232bd3da4e085b1b9234a66d7060f
- SHA512 b97175e55f2f449783ec2c6f979d8bc6df2f2cbe67e24045dcdb75cb24631d94044a976956417962cd73cc96df915bf17c9898b392b9c6e17eac25a1a5002b6c
- TLSH T19AD02BA520CD891090F50870309A6261A758D39BD90C56609CA2462B26A58F16BDE3DD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target bin/VBoxClient-x86.dll
- Size 669KB
- SHA256 84b47308abc293515fa8b682d7ede3a53fed426a7073cfec466bcde681da715f
- MD5 8499bcb782e639b57abb8b503d410eb8
- SHA1 a4e3363a30c02fe999eedfed50a8dd200f4c46c9
- SHA512 344132b5148ce38174230efb51b0aaa85709bbe2f34c09ff47e9390324ee1139423717cc461e7f276db80fcb86a0509ca92cd84a18b7657d3da65c8fe427fc39
- SSDEEP 12288:BfWBgRdNVSnkjiLSRHhWsfl4GhW0TAZoq:BfWBgRdNUnkHWsfl4Gg0ED
- TLSH T192E4C472B645D9B3C94E2136984F674A1F75209A5F03A2F72788876F1EB37C03E312A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/bug66112.phpt
- Size 1KB
- SHA256 0228ef44c9dec475da522db0d10c43e9eee9bd9cfc888d7344917ca0187b3bd4
- MD5 bd491dda9773334f686ee8fd5abbafd0
- SHA1 cfc016f2132ac73bc67b17d1b2cdf29889fc40d3
- SHA512 5fc3f4abfbf29145ade2d6b4718adb5b6a5c37169abe0f6aa792aa72ed7317c5cfbb35b72a0a3f298aa1df91a2a48cb4ba4d59a255053d7882fa06bd309cf578
- TLSH T195210F90AD7A113AC1628EB9826ED091E3710E5F9298517336828DEE6F310A4FF5C797
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target bin/bug67949.phpt
- Size 2KB
- SHA256 98358f233f894856c9b94241e992add544eb9e748c6a9059768c076f37ec0239
- MD5 3dc7160326b8aaa2b52a66aa77a684e3
- SHA1 4283c1c903762050a95b73d8fecde839b0d58680
- SHA512 42b364cb243ace68cc53c0387f170250a64e3fb35a9f194694cbccde98e8587fc7b9899ad2d8fe513f6f22f67ed15dd15a708b9dc74567a465fb9435e7232d7d
- TLSH T1C541AC072250100EABB4863B9DA2531F7571825D13F1DA6CE61E827F38C9A942E7F25D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target bin/bug71882.phpt
- Size 314B
- SHA256 6fe240f4197bf2fc4a53b41c11b9ae6cc1b79e61bc9828e9f4b61b6546147a40
- MD5 c84c814679fc07d737373b65528fe9b4
- SHA1 85876e3252ff32078817d1045d2623c2cdf440e6
- SHA512 7c1ef2bed77b0a049d84cac611e1995d96b0dc31c5d0a11124777f4940b040f3a9e4dc4350c8e9611753a20ceb7494a29a876bc65ce445da1c5c8b3e8bc286b3
- TLSH T1A6E07D5D35CC44525AF51402BC0267B4E05B5B3902558F50D8170043BDFC4C4E0AD707
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target bin/catch_finally_004.phpt
- Size 680B
- SHA256 5e409f28a0e122fbac00fd90f383fe0c83f2076dd5c177ae5d255db80a38559c
- MD5 069d14db5f062e4928ab928ff13a1f72
- SHA1 6c2a2ebfb99ae941cbc3c45102a8c7e68527ff91
- SHA512 15d1e85cabb8e13a110bce98d0eae6916e81ffe1858a83a10a3907ffd8b1b02c9a4bf3ad757d7e13f9a4804e1f28d4837e718207224cd0457508620dbd26de14
- TLSH T12A01996CF9DB04A181E729300E0C360070BF4BAF47988EA4FC4EC5606FA0071A6FA1CE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target bin/closure_001.phpt
- Size 983B
- SHA256 ff57a78a533bea22c50d63bf067d30c5d072086588b859508fc6232ce266e00b
- MD5 662ef5aa6848d5b21cf6e19db6923423
- SHA1 20f8bc27e893be081d5279f4ccf11395a0cdaf5a
- SHA512 14a5656393d74cc10f59cca9574b76e9820b5bc59eb07154e0d43f0acd3221ef9ce756fcc2dd3f5e52bfea3be14a70941669e329c6031c3a1e64392082838bf9
- TLSH T1E01197C529E1D7024E6D7269691F4A24B86026A6038C9DD4FC8EC3F8EF201382DA31AC
- MD5 SHA1 SHA512 TLSH
Score3/10