Overview
overview
7Static
static
3vgemu.exe
windows10-2004-x64
7vgemu.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-ltsc_2024-x64
1LICENSE.electron.txt
windows10-2004-x64
1LICENSE.electron.txt
windows11-ltsc_2024-x64
1chrome_100...nt.pak
windows10-2004-x64
3chrome_100...nt.pak
windows11-ltsc_2024-x64
3chrome_200...nt.pak
windows10-2004-x64
3chrome_200...nt.pak
windows11-ltsc_2024-x64
3icudtl.dat
windows10-2004-x64
3icudtl.dat
windows11-ltsc_2024-x64
3locales/af.pak
windows10-2004-x64
3locales/af.pak
windows11-ltsc_2024-x64
3locales/am.pak
windows10-2004-x64
3locales/am.pak
windows11-ltsc_2024-x64
3locales/ar.pak
windows10-2004-x64
3locales/ar.pak
windows11-ltsc_2024-x64
3locales/bg.pak
windows10-2004-x64
3locales/bg.pak
windows11-ltsc_2024-x64
3locales/bn.pak
windows10-2004-x64
3locales/bn.pak
windows11-ltsc_2024-x64
3locales/ca.pak
windows10-2004-x64
3locales/ca.pak
windows11-ltsc_2024-x64
3locales/cs.pak
windows10-2004-x64
3locales/cs.pak
windows11-ltsc_2024-x64
3locales/da.pak
windows10-2004-x64
3locales/da.pak
windows11-ltsc_2024-x64
3General
- Target vgemu.exe
- Size 66.2MB
- Sample260922-t1ga3aad99
- SHA256 9a6592c241b834e59cc60e9371f754c4d5573e2dfec411bcd2124e7c64362f1a
- MD5 e349a035036a450e728630f6fcc71705
- SHA1 233dc598c328b13c0c08391fb08f965acfdd33f4
- SHA512 51ade94130ff4a7e3c14481b98d6e1f52d4c0d02873f7d29a43fd5c01c8408e9c009d893a734c8bca2b3ebfa01ca7ca8dbfe0079638d31b10ec3ca7dd5a46dcf
- SSDEEP 1572864:k4gPXMo5xrX6zWBMby7rYjemXIdoddqdpCoJFsGLdhNkdG9czNIKF7:k4AcSIWBMbMr1m4doKrCRYjNkG9WIKF7
- TLSH T1D8E7336053400D3AE544D0FA41EC1A6BA296DF94FFDA246C6A5D39AC24787AE34F0CF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
vgemu.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
vgemu.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/app-64.7z
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
LICENSE.electron.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
LICENSE.electron.txt
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
chrome_100_percent.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
chrome_100_percent.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
chrome_200_percent.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
chrome_200_percent.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
icudtl.dat
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
icudtl.dat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
locales/af.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
locales/af.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
locales/am.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
locales/am.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
locales/ar.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
locales/ar.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
locales/bg.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
locales/bg.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
locales/bn.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
locales/bn.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
locales/ca.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
locales/ca.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
locales/cs.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
locales/cs.pak
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
locales/da.pak
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
locales/da.pak
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target vgemu.exe
- Size 66.2MB
- SHA256 9a6592c241b834e59cc60e9371f754c4d5573e2dfec411bcd2124e7c64362f1a
- MD5 e349a035036a450e728630f6fcc71705
- SHA1 233dc598c328b13c0c08391fb08f965acfdd33f4
- SHA512 51ade94130ff4a7e3c14481b98d6e1f52d4c0d02873f7d29a43fd5c01c8408e9c009d893a734c8bca2b3ebfa01ca7ca8dbfe0079638d31b10ec3ca7dd5a46dcf
- SSDEEP 1572864:k4gPXMo5xrX6zWBMby7rYjemXIdoddqdpCoJFsGLdhNkdG9czNIKF7:k4AcSIWBMbMr1m4doKrCRYjNkG9WIKF7
- TLSH T1D8E7336053400D3AE544D0FA41EC1A6BA296DF94FFDA246C6A5D39AC24787AE34F0CF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app-64.7z
- Size 65.8MB
- SHA256 1c3bde15596e3103acdfdb3abe2bea1f7726f360b57c58e0ab103c7c0e06c636
- MD5 4f8c104f6c62816f7f2985133c306c15
- SHA1 da028ab163b70a4a60fbb6defa6a79a0e38953d3
- SHA512 52b82d94f389d5e0948f811a86fe3426bd5a2561299d01a2cbbb519fb6b37784c8037f823925cf924945cf02b2f971c775f170b878a8f084f4a1212c0c33f104
- SSDEEP 1572864:84gPXMo5xrX6zWBMby7rYjemXIdoddqdpCoJFsGLdhNkdG9czNIKD:84AcSIWBMbMr1m4doKrCRYjNkG9WIKD
- TLSH T192E7331412041E2AC544D1EA45EC1A6BF21ADFA4BF9E387D7A2D39BC19AC73E3850CF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target LICENSE.electron.txt
- Size 1KB
- SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
- MD5 4d42118d35941e0f664dddbd83f633c5
- SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
- SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
- TLSH T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target chrome_100_percent.pak
- Size 132KB
- SHA256 86f6b8ffa8788603a433d425a4bc3c4031e5d394762fd53257b0d4b1cfb2ffa2
- MD5 a0e681fdd4613e0fff6fb8bf33a00ef1
- SHA1 6789bacfe0b244ab6872bd3acc1e92030276011e
- SHA512 6f6a1a8bfe3d33f3fa5f6134dac7cd8c017e38e5e2a75a93a958addbb17a601c5707d99a2af67e52c0a3d5206142209703701cd3fab44e0323a4553caee86196
- SSDEEP 3072:tezwJCGIekwf9W2bg3yhPaL2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:tezw1Iek+42k3yMK18Gb0OV8ld0GecQJ
- TLSH T185D3D0D7B3F4EE7DCA6756F7A62540B1ECB386280691434B078BD8752A26748DCC8783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target chrome_200_percent.pak
- Size 190KB
- SHA256 8c1ae81d19fd6323a02eb460e075e2f25aba322bc7d46f2e6edb1c4600e6537a
- MD5 c37bd7a6b677a37313b7ecc4ff01b6f5
- SHA1 79db970c44347bd3566cefb6cabd1995e8e173df
- SHA512 a7b07133fa05593b102a0e5e5788b29488cb74656c5ee25de897c2ba2b2a7b05c0663ade74a003f7d6df2134d0b75f0ad25e15e9c9e0969e9453b7fc40b9f8bb
- SSDEEP 3072:ADQYaE/N6Mrvy/3JP29W2bg3yhPaafR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+y:ADQYaSN6svyd242k3yxgx5GMRejnbdZR
- TLSH T1ED14E1C7A3B8DD7DC9670AB3662501F1ECB211395AB6525B03DFDC357A56BC888C8283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target icudtl.dat
- Size 10.2MB
- SHA256 f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb
- MD5 e0f1ad85c0933ecce2e003a2c59ae726
- SHA1 a8539fc5a233558edfa264a34f7af6187c3f0d4f
- SHA512 714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28
- SSDEEP 196608:hpgPBhORiuQwCliXUxbblHa93Whli6Z86WOH:n8wkDliXUxbblHa93Whli6Z8I
- TLSH T1B8B63803A2FB4EC2F9F76F31D8F452679527BD496E32805A11042F3B5C336908A65BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target locales/af.pak
- Size 447KB
- SHA256 6981249837ad767fc030edc8838878a5e493fb08cc49982cffaed16cfbeb564d
- MD5 917a688d64eccf67fef5a5eb0908b6d4
- SHA1 7206b01bbc3fd8cc937db9050dd8ac86cf44d8cc
- SHA512 195dbec8463cf89990232296c5c927e1501f0c2e01a7be7c6a6acae651853ce1edb23d639af65979b39a3c61979119c3a305acfa3aadf0cb93e241c5e57f4534
- SSDEEP 12288:/cqYYWk0o+wZiSMKVQ2uM2Z12JynA7PIrfsdgSTCSQ2fs37KQOb5t/tn6A/HiaHU:ynk0ofMSMaTuM2Z12JynA7PIrfsdgST4
- TLSH T120A42C06DB81273D09A07696BA0846F7FF9CA26CD770B2BADD9D82360566EFC017D1C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target locales/am.pak
- Size 727KB
- SHA256 12e9e1bec1c46e5ea706157726e17a4429acf288a5754fa183bd9b4cf7d3853b
- MD5 3cfd7c5bb92ab72c63e003208a9e4529
- SHA1 165d2f69ab6a6e237f0fec943b5577123cefea87
- SHA512 cd7c7837d758ea66abc871503cda6fe99ff45990405e60c1133e7c1f4cb29ee69723c9558bb2d3eccb42948da57351f4f095062616686ab2e255acd3c86236f0
- SSDEEP 12288:LMlGLQXTZou76VIx2TERZ3ej5dMNzLY5S9ZSVrBO0Pcx30jH8+F:Lc9XTZsVIxJRZuj5dMNzLY5S9ZSVrBOg
- TLSH T1F6F499547EF9F7570F8E8A19A4320E4E9594AD4652813C38C35AD3FC2B2EF1B4DDA218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target locales/ar.pak
- Size 794KB
- SHA256 3ca47b9c436723f837a53b2904b51efdf13ab6cad2f3ef4fe48a1115847eccbf
- MD5 3c2ab7363018db1f20b90acbc305cb4c
- SHA1 60b9cf453178ad0e60faf20d137a0c7eabde65c9
- SHA512 589beb3e95e93f30341933c9b9826210e6bf3e9c1ad8f113d9d8a98fa5a526f81e454ee3357fb55d60d67a4890ce33e964ba2fa810e1771a6b7e82746492313a
- SSDEEP 12288:EyBYh5/N/RaWH4gzWvwU5Twikcb5uNi3+D2qeTT:E3aR/5D+M
- TLSH T13F059BE21B2984720B56DF0FD1E23668D872BD23EB4BFC3124934A2156D7513E78E678
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target locales/bg.pak
- Size 828KB
- SHA256 a5eb7038ed956bad7704a722f05691474ff709dffbad92b8e31dbb869ad58334
- MD5 a69f6075863d47b564a2feb655a2946f
- SHA1 062232499ff73d39724c05c0df121ecd252b8a31
- SHA512 930ce3938aa02a8bcc609a64bd86b7e6164d63baad157a980fd079859a6bee5db87bd1f7a74a71108f8368bc9c6154bf14a2dba1abf269f572bc262614bcf1db
- SSDEEP 24576:T3ChsqKaElYMdAs1axUjHh373Zj93aAK5kVDgQwRunpKd2ao57JqueRSnQFwN/6B:TChsqKaElYtUjHh373Z53a1kVDgQw1dn
- TLSH T1270513A15B9A68DF0101F45F98087E093CEB94FE3FE7879241642DBD39F10B486BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target locales/bn.pak
- Size 1.0MB
- SHA256 87670ff2ceb1ebc38fce2c3b745ac965f3de5de3133d99ed33933a8f3e99d874
- MD5 d43ce80ddca3fab513431fa29be2e60a
- SHA1 3e82282e4acfec5f0aca4672161d2f976f284a0c
- SHA512 1d33ca9bacb91ef328f89a14777a704000bf30fe59aa1cbbbff34d8bad266c98d78c9e411e289e834e76eb721dd98934426a565cd5b3436d5a103abe37f7612a
- SSDEEP 3072:PAUxhq6CLf6bXs8iQ2Zc2EadKZ0ZfQ0/QeIyTtPukkBBbpUDDM5JiXldW:4K46CjYYZ82IypPubBbf5IlI
- TLSH T18A35EE209C6E91B2A8C5CDC9434C6370C5236E9B9B61F74DDC17A24938ADC3C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target locales/ca.pak
- Size 503KB
- SHA256 d9c45d55a9a5661063b9bbebb0615de8f567f3925d04fd10938da9617c6220e0
- MD5 2d30c5a004715bc8cd54c2e21c5f7953
- SHA1 fed917145a03d037a32abac6edc48c76a4035993
- SHA512 b3803551f53d290d8839789f829afc9c1e12052c81ba20d5e01fb3d2bacd5d1e97bd4c05074322eed17fdec04c9176c655076faec8a3aef17c39fb999e0c1fcf
- SSDEEP 12288:KhBp7kcELygV3z5PAF4N3Mw2juwHzejm0t3lvq8E9oCRaIs3cmlLEY2CJkEydROC:Khh4V8RPS9lMN4MZRg5P56iq
- TLSH T1BAB409239FC93B6744D2320AFB46C217F48CA9847B06D254F5AE1B1622CCADCC677AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target locales/cs.pak
- Size 518KB
- SHA256 397134d1834f395f1c467a75d84ef2e8545cb0f81e94dbe78b841fbbdaad802d
- MD5 06e3fe72fdc73291e8cf6a44eb68b086
- SHA1 0bb3b3cf839575b2794d7d781a763751fe70d126
- SHA512 211594c30ad4f5ca8813596b59751168c60dfa0d13f24f2aa608fce82d21c2de3de69fe007c4bde1602da8aa7ea81ec0f15e173abc1224362c36b493b425b425
- SSDEEP 12288:ljXB+Hdo1ryvJvtQW5EK8VPDNOQ3SCmPs:ljXwHO1uvJ195EK8V5ObCmPs
- TLSH T14CB44A1EEEA26425884002497FBE4128BC1EC3540B6FB5AB7CCF9D91217677E8EF4D58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target locales/da.pak
- Size 468KB
- SHA256 0b9da7bd6531a7ebe7d8188b320c0953adcfbaf654037f8265261a12e63d3c87
- MD5 1939faa4f66e903eac58f2564eeb910e
- SHA1 bace65ee6c278d01ccf936e227e403c4dff2682d
- SHA512 51588d2fe724e6c407724ea6f46883ded39397af744effaf672f75952a6a734e61e93e59f446080317f2a2b3fa1b45e7405f90fe0b226c44c9f3dd9a4e130a87
- SSDEEP 6144:+luvzrGLXfBlzV0qV5cU3sVEs7a7wlTwUJwa7obRR2vJub51NrXBDUd4JTGqfwI:+HbzszaoQR5rrBTpz
- TLSH T116A45A4B8C9C732F89AD4B65F3108DA7EB5D543CC684264FA5D8943A0ACFC6097BE1C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10