Overview
overview
7Static
static
5Viewer.exe
windows10-2004-x64
3Viewer.exe
windows11-ltsc_2024-x64
3Viewer/Fil...ss.exe
windows10-2004-x64
3Viewer/Fil...ss.exe
windows11-ltsc_2024-x64
3Viewer/NNTViewer.exe
windows10-2004-x64
7Viewer/NNTViewer.exe
windows11-ltsc_2024-x64
3Viewer/glew32.dll
windows10-2004-x64
3Viewer/glew32.dll
windows11-ltsc_2024-x64
3General
- Target cbct_xray-inf_2026-09-09_1148.zip
- Size 782.1MB
- Sample260913-gmnf1aff76
- SHA256 8ab74fa6c7fbbfa40ccf601e8d2505af8f3e39f4ae5541460b309007ab867257
- MD5 e08aff8a9a4fec7620ebb1f18812ec9d
- SHA1 2aa74a87faa2c93a25f56a9a9303cd051f43b16d
- SHA512 12d805023f2490d25c2fe3388b4302f2d2a7bb1a56b33a53756eaf9a6b777d9d8d4ea93b0bd1632ab08a2eda90eefda3686f1d289241b9bbcd2bdc42ac154468
- SSDEEP 25165824:kuf0VdPb4fgU3l8gi1CQTmQ+plifBzs+GpAlcxzp2sr:kld8fFWgQaoAVpAlczr
- TLSH T128893324E495B8CEE93B7130B576E60CA3E631F808CA491B35AC67B878C69D30755E4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Viewer.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Viewer.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Viewer/FilterProcess.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Viewer/FilterProcess.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Viewer/NNTViewer.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Viewer/NNTViewer.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Viewer/glew32.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Viewer/glew32.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Viewer.exe
- Size 187KB
- SHA256 698bdc8a461e2aad258f18bb7109510cf47fdd1fac98eede33f288a9c23525a2
- MD5 4c1cd2595016ffe06746cbb86e15f32b
- SHA1 c6ca978ad13a9af888d341947fa0d72e6d209aac
- SHA512 84f0a010ca3fb42e3d2be99a16da38481733cbb35ca039b20c9caffd629649472e5e2efa514bd5500fe7a91fcd7120065c05d0ee1c91b64dbe8aca7004124573
- SSDEEP 3072:kRQ+P4wCJMzH8smO0XU6wYzulOa+S3+4lBDzXFwOYkeH0izDaQnLtdNm7nDFKH8/:kRFaMH0PulOfepwKeUi3M7nDYDJsqUsc
- TLSH T1F414AE027AD2C471D5F605310D69EAF45B3EFB250AE14FBB37FB432A0E202C15D2692A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Viewer/FilterProcess.exe
- Size 34KB
- SHA256 50f3d97469cca2bc343df5effadd9636776855cd05a27e9bdfc3d53e186db5c9
- MD5 f56c9cb882ccbeb696014309fc97424e
- SHA1 89a65d7a96a2f9684a520a2f5cd1b1eb8dd6a941
- SHA512 feef53dea2c95d5ab2cf1e7474e351a6e0492323f11ae89d51d463cf5b17ce146d6f5b26c0ea80adbf9fc7e9d4bbfcf0cbf8beb3cba71af4489af6cc82c199ef
- SSDEEP 768:5yGF4EkffGcVBdpsJ0tH2wrNKQLlJyVN:cicV3pucHDAQ/yr
- TLSH T1C9F26C03AA634872D48252B1547DAFBBC1BFB7319B5253D3F7C08E690E241E1BD39616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Viewer/NNTViewer.exe
- Size 124.2MB
- SHA256 e65d8c2c9e558306fee07282a6eb2069ccd4d4d13d165f42d4f51b9a041fc089
- MD5 315cb434340cbac83c2c69b8633516ea
- SHA1 332b8c01616a1b6c71c0b140f0a9bbc4e451708b
- SHA512 442a4127fa4716f523a4922dae25060597af56a3a65cf195f51e16d0622a9a37fddb92068685b477ed1a263eb76c34e5aa4a08fe921203cfec900dd5148f2ad6
- SSDEEP 786432:hlALEXYD9DCF2fWhE58sOxsysVbROKC5bCYGyNwC/R:7eRDCF2oE5LdC5uYGyN3
- TLSH T17B580DA454AC9EEAFB29A1305414A49EA5E0D8D0D719B0FF30A1F8371071FF0697AF5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target Viewer/glew32.dll
- Size 773KB
- SHA256 43f56ad7b344c377d02f5d9bd66016d7bd32b1933d8953035520dcf7813559d7
- MD5 eb88533f6734d1d25876432855b24d0c
- SHA1 0e244acc9aad0cea6711ac35244f6102e8b38767
- SHA512 3062ab23b156ad0654f8195576b70c55d79749389e4bb88a4c98a6636c69d3f158b9be8e8b302c33b283eb5d3c20e06fbd9b6e75461b598160ed59bfe98bb864
- SSDEEP 6144:sTDWNfTCN6Vk8jakoDMgwIcbBbghhTZDkECGAuy+EUOU0TZ7ZXVXvJC4Aq0p6YW7:sTmXi8u9NyenEZbHHqSf2xi2VZJ
- TLSH T1D4F4EB38D1A859A2B85658088A063BCFCA1CFB33302876DD33CEEC5766799D6D1DC365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10