Overview
overview
7Static
static
3MekiksClie...up.exe
windows10-2004-x64
7MekiksClie...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-ltsc_2024-x64
1LICENSE.electron.txt
windows10-2004-x64
1LICENSE.electron.txt
windows11-ltsc_2024-x64
1chrome_100...nt.pak
windows10-2004-x64
3chrome_100...nt.pak
windows11-ltsc_2024-x64
3chrome_200...nt.pak
windows10-2004-x64
3chrome_200...nt.pak
windows11-ltsc_2024-x64
3icudtl.dat
windows10-2004-x64
3icudtl.dat
windows11-ltsc_2024-x64
3locales/af.pak
windows10-2004-x64
3locales/af.pak
windows11-ltsc_2024-x64
3resources/elevate.exe
windows10-2004-x64
3resources/elevate.exe
windows11-ltsc_2024-x64
3resources/....1.jar
windows10-2004-x64
1resources/....1.jar
windows11-ltsc_2024-x64
1resources/....4.jar
windows10-2004-x64
1resources/....4.jar
windows11-ltsc_2024-x64
1resources/...16.jar
windows10-2004-x64
1resources/...16.jar
windows11-ltsc_2024-x64
1vk_swiftshader.dll
windows10-2004-x64
1vulkan-1.dll
windows10-2004-x64
1General
- Target MekiksClient-0.1.16-setup.exe
- Size 104.5MB
- Sample260912-v8236sfc66
- SHA256 a08d757631d1e4541a97014446b207f900a98a5d84b9da209a2cc265ae917b88
- MD5 1567d68d7280bbf69aff7d39b0fbdc62
- SHA1 1bd2ddbe8eca2472d9e11e837e269af519f1f47a
- SHA512 aa33e47003f29ffdc637053def9aafd98b2f24e6ce7ab8fcc74302b20a755d2e4cfd353f31f75d2f3bffcbc24c7657dad46f4c6bb4dbcea3d69514f56da5ffc5
- SSDEEP 3145728:0HawbNTGhT2VxxDxvX0ulRxZcTZYtCMOVVBd3n:WaaqTA7Zq2CME
- TLSH T1D03833042D07DA67C250E571A3C9E633A53E278E67161C4B2F38F06EAED40F796909B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
MekiksClient-0.1.16-setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
MekiksClient-0.1.16-setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/app-64.7z
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
LICENSE.electron.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
LICENSE.electron.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
chrome_100_percent.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
chrome_100_percent.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
chrome_200_percent.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
chrome_200_percent.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
icudtl.dat
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
icudtl.dat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
locales/af.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
locales/af.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
resources/elevate.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
resources/elevate.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
resources/mod/mekiksclient-assets-1.0.1.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
resources/mod/mekiksclient-assets-1.0.1.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
resources/mod/mekiksclient-visuals-0.1.16-1.21.4.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
resources/mod/mekiksclient-visuals-0.1.16-1.21.4.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
resources/mod/mekiksclient-visuals-0.1.16.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
resources/mod/mekiksclient-visuals-0.1.16.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
vk_swiftshader.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
vulkan-1.dll
Resource
win10v2004-20260911-en
Malware Config
Targets
-
- Target MekiksClient-0.1.16-setup.exe
- Size 104.5MB
- SHA256 a08d757631d1e4541a97014446b207f900a98a5d84b9da209a2cc265ae917b88
- MD5 1567d68d7280bbf69aff7d39b0fbdc62
- SHA1 1bd2ddbe8eca2472d9e11e837e269af519f1f47a
- SHA512 aa33e47003f29ffdc637053def9aafd98b2f24e6ce7ab8fcc74302b20a755d2e4cfd353f31f75d2f3bffcbc24c7657dad46f4c6bb4dbcea3d69514f56da5ffc5
- SSDEEP 3145728:0HawbNTGhT2VxxDxvX0ulRxZcTZYtCMOVVBd3n:WaaqTA7Zq2CME
- TLSH T1D03833042D07DA67C250E571A3C9E633A53E278E67161C4B2F38F06EAED40F796909B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app-64.7z
- Size 103.7MB
- SHA256 49868a14fcb68e8535a41f2edb8cd7b209e9ad566ba263c6ae3bae9cdee1df52
- MD5 4d877fc3b57157c753076d23b9fa2d78
- SHA1 379e883503a4b62154342903d602619866c879dc
- SHA512 1eb1ae2a34582a0114c5e92730acf424409d0705afcb4ef9714d39e32ca0a1785ab80b87055d5ccf73dbee4855ac0b2d713b66a537b7f9befd8c0669bf815893
- SSDEEP 3145728:pawbNTGhT2VxxDxvX0ulRxZcTZYtCMOVVBd35:paaqTA7Zq2CMG
- TLSH T1283833082D079A77C254E5B1A3C9E632963E274E67161C4B1E38F06E9EC40F796D0EB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target LICENSE.electron.txt
- Size 1KB
- SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
- MD5 4d42118d35941e0f664dddbd83f633c5
- SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
- SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
- TLSH T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target chrome_100_percent.pak
- Size 148KB
- SHA256 a659ee9eb38636f85f5336587c578fb29740d3effaff9b92852c8a210e92978c
- MD5 83ec43f2af9fc52025f3f807b185d424
- SHA1 ea432f7571d89dd43a76d260cb5853cada253aa0
- SHA512 6ddca85215bf6f7f9b17c5d52bd7395702515bc2354a8cd8fa6c1ccd7355a23b17828853ceabeef597b5bca11750dc7c9f6ec3c45a33c2106f816fec74963d86
- SSDEEP 3072:ez8JCGIdTwTPagr8o9RHi/T9P1L2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:ez81IdT8agr8EC/T95K18Gb0OV8ld0Gq
- TLSH T179E3E1D3B3F4ED3DCB9716B7A2260072ECB3466D0692124B168AD4752A66B8CCCC47D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target chrome_200_percent.pak
- Size 223KB
- SHA256 2c1b3e4b8a0cf837ae0a390fca54f45d7d22418e040f1dfea979622383acced6
- MD5 dc48a33bd20bfc7cacfc925a84b015b6
- SHA1 8dfee88fd1dc77f89ad88c19146fe3ab45e43f3c
- SHA512 1d54eb5d2ba06af0ba8f6b491b0d43f178a48ac82cdf383beb265e732ddfc06bca9692003fdfce56f7f00af97f29acf046c73b891b8c561610098f9626eaf05a
- SSDEEP 6144:coDQYajN6svyA6nI86ur8EC/T9ugx5GMRejnbdZnVE6YoppO4:cVfjN6svyA6D4B79a6edhVELoXO4
- TLSH T11E24F1C7B3F8DD3DD9630AB3522A01F1EDB2113905B6560F57CB9C347999AC988C9283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target icudtl.dat
- Size 10.0MB
- SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
- MD5 ffd67c1e24cb35dc109a24024b1ba7ec
- SHA1 99f545bc396878c7a53e98a79017d9531af7c1f5
- SHA512 e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79
- SSDEEP 196608:+SPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2Y6U:++wkpHiXUxY/iJ53IWhlVjEeIZU
- TLSH T160B63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target locales/af.pak
- Size 520KB
- SHA256 c56cb2841ee2e40fbdd6b7e293a1ce74bd10fd500465fcf99d1e07f8d69f8ce7
- MD5 fc32a6b72fc91e1be9c2c9d2ea586ec3
- SHA1 5d439600cff26476d8715b778881f5735356d723
- SHA512 b34c7390d4a15936b1f74f42fa91ccd0ca0587f0dd630096c9a16ec77756e2137d9e49ab1ebbf703c8ce6f56f110d5bb3333b1ebed51779d1bb2460b203a7250
- SSDEEP 12288:WEG8+ocurcdy6VGycsaja+H2Jyngae5Ig1eo0vMIlgL2pQ+FXZG2vt2pslFd5/51:WC+ozrc86VZBaja+H2Jyngae5Ig1eo0N
- TLSH T1C5B41C0AEB80173D09A076D6BA0846F7FB9CA26CD770B2B6DD9D823105A6EFC117D1D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/mod/mekiksclient-assets-1.0.1.jar
- Size 21.7MB
- SHA256 57acdf4cc210615e3cee5f0efa848dbb13568e66d9a38a67daab5b52d0746381
- MD5 64910ccbe8ca724c6dd2f46a8e71b0d7
- SHA1 f1583a78ec8ba46162bf7ffe04f3f04a98974d39
- SHA512 94bd692201e7722339edbd278e105c6ce304b5fe0ddbe30e2351c858a8c70db6dc43acea3907bcc4d4a1c3ab5de5342969f36b0bc156ec3059472f3156c987b3
- SSDEEP 393216:EFlgK2Ly8ym4kTcKhpOOe2Ukw+ygs/Fwop2tWURpzFG4UBdX7:ET+hH4QhIOeFkTtopPURl0TJ
- TLSH T1263733BEE8CBAC94C4321A3CC36D4D53F315280DA651F4EBBE5543068DEBD21478A6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target resources/mod/mekiksclient-visuals-0.1.16-1.21.4.jar
- Size 542KB
- SHA256 5deba36d323a6fd65ac15ba2bd3bed8eefc35f97072271271a4d44dd63a7dd57
- MD5 f98313bb1ac908f6b7147f50785f8992
- SHA1 a79297ba73d7205df49d169cb50299ce91a19aed
- SHA512 ae4ccd905672084c8396de0805484a703d07b905c606e0b8204d90d1c6a57a0837534a6e692b9924980e13bb73501c3f6e98c4f703be2721186443d0db825e55
- SSDEEP 12288:ucz9KQFXSG0S2XIyVT9AavW7KQE4Y7yWJy2hhYojWgzN:ucNCGkVT9AFe4Y7yYykhYZgzN
- TLSH T17FC4E12FBE9EB47CDC43423A9014C0A3F6284A94A55278AB5DD80A5F9CDFD67130F98D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target resources/mod/mekiksclient-visuals-0.1.16.jar
- Size 534KB
- SHA256 b4a5c5ff624edc532c9e72c573a42657d1caf6c0b85c77205024cc8ef60c796f
- MD5 5b19dafdf5dd870bd837d8ef21964072
- SHA1 9ee4263f679d294033296237a1430a8bee13c2e5
- SHA512 8d359fa0a76bacb1675f862429da8aa5f83cf5fef05116cc97e33bf4568485b99c1a692bd37044c8607aa3bf92c27ecbcd3319d51368aa3cb2417c43794770b6
- SSDEEP 12288:X+sVnnDEoLaRuT9rAtWmBrYiYHWFs/+YRgYhmVJJrn0:XJxacT9EcgBYHn+FYhA30
- TLSH T161C4E12FFD9EB43CDC03413A8125C0A3B6345A68A552A8AB5DE40B5F9CDFD67070B98D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target vk_swiftshader.dll
- Size 5.3MB
- SHA256 409a0fa76f055a87ae70434414586d144502beb25fa3004866ee70abd9a8547e
- MD5 5633d5211bfbbbd2b0493fcbd492f5fa
- SHA1 9ad2466751880fa0acc1dc6af2693d975dd9e307
- SHA512 8eb5ab1ddb1dc42eb323a163af6b4521acea5194909ed39933710bf3fecec5f50f070c20df57a89f4528076fbddb0fa0c27de3faa7b4a249637be00ec3bf396d
- SSDEEP 49152:YaNFNu2naDoYXAqk7ZSrblOR5HAlUDv/FelNotSOnaHJcF5C7d6mrI0VI2fa2E+B:762naMskwtEMaQPJnymh
- TLSH T1AB463803F2858099F05DE579875BA623F632B8811B72B6DF52A01F192E77FE06B39701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target vulkan-1.dll
- Size 874KB
- SHA256 f6c99137c3d6af45bc2262815867d6d37f5dcb0552caffc90cd77fb6561b7491
- MD5 a6e115dcfb063d0c06f8bef721166b37
- SHA1 8a548affa209f561e7eb8f51d5515aaec8c7bc59
- SHA512 ec5715c005cd2bec8ef2ed5af16c041d56d5e1175342c285e4c2d693a88cc86bebe83ec7d59ba3c37b91f1b5e99879532aae9a7fe68fe7ab2c758d649e034062
- SSDEEP 24576:l4cMT4Bv88wonwyHp9zDp6Z5WjDYsHy6g3P0zAk7TKr:l4bo3/nwyPzDp6Z5WjDYsHy6g3P0zAkP
- TLSH T1E8157C23E6648669E4768034C9D24A03C9F274921725B9CF02A84718BF6FFF47B7DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10