Overview
overview
7Static
static
3StudyTrack....3.exe
windows10-2004-x64
7StudyTrack....3.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3resources/...gin.js
windows10-2004-x64
3resources/...gin.js
windows11-ltsc_2024-x64
3resources/...gin.js
windows10-2004-x64
3resources/...gin.js
windows11-ltsc_2024-x64
3resources/...tio.js
windows10-2004-x64
3resources/...tio.js
windows11-ltsc_2024-x64
3resources/...tio.js
windows10-2004-x64
3resources/...tio.js
windows11-ltsc_2024-x64
3resources/...age.js
windows10-2004-x64
3resources/...age.js
windows11-ltsc_2024-x64
3resources/..._j.jar
windows10-2004-x64
1resources/..._j.jar
windows11-ltsc_2024-x64
1resources/...ons.js
windows10-2004-x64
3resources/...ons.js
windows11-ltsc_2024-x64
3resources/...dex.js
windows10-2004-x64
3resources/...dex.js
windows11-ltsc_2024-x64
3resources/...web.js
windows10-2004-x64
3resources/...web.js
windows11-ltsc_2024-x64
3resources/...cjs.js
windows10-2004-x64
3resources/...cjs.js
windows11-ltsc_2024-x64
3resources/...gin.js
windows10-2004-x64
3resources/...gin.js
windows11-ltsc_2024-x64
3General
- Target StudyTrack Setup 1.0.6-beta.3.exe
- Size 111.9MB
- Sample260923-1tj7pseb92
- SHA256 dc26ee8fac2d6a323a92544f7ce9bb4ea0db87477c41d7d4b69e14c5fcd53fc7
- MD5 f852d78734cc199c7f1d3b87c3a37c0c
- SHA1 108985d9023df9633f71c96255150128ecd7bfb8
- SHA512 c7d60d278c022ae3d818aded29b3069096d2691d290aff5aa6ca4fec763fd56be165961dcf15c03133a659cc203c5174cbc2e585159a931ac0cffc118ef202b8
- SSDEEP 1572864:Hq4cMu/U1RESsuvvQutTZ1CdA0fnCo7eCctsD3m33b1+ga+24UOIOxXZNJhGcYG3:HqXMqkvQkZ1CdzuV33kgRMANJ/sIEeR
- TLSH T1F448336B390BC0F6CC291634EFA5D854A4AA1FA7475C8E3B7149F0F972F096C8A07953
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
StudyTrack Setup 1.0.6-beta.3.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
StudyTrack Setup 1.0.6-beta.3.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/dist/plugin.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/dist/plugin.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/dist/plugin.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/dist/plugin.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/ios/Sources/LocalNotificatio.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/ios/Sources/LocalNotificatio.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/ios/Sources/LocalNotificatio.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/ios/Sources/LocalNotificatio.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/Package.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/Package.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/android/build/intermediates/merged_j.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/android/build/intermediates/merged_j.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/esm/definitions.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/esm/definitions.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/esm/index.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/esm/index.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/esm/web.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/esm/web.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/plugin.cjs.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/plugin.cjs.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/plugin.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/plugin.js
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target StudyTrack Setup 1.0.6-beta.3.exe
- Size 111.9MB
- SHA256 dc26ee8fac2d6a323a92544f7ce9bb4ea0db87477c41d7d4b69e14c5fcd53fc7
- MD5 f852d78734cc199c7f1d3b87c3a37c0c
- SHA1 108985d9023df9633f71c96255150128ecd7bfb8
- SHA512 c7d60d278c022ae3d818aded29b3069096d2691d290aff5aa6ca4fec763fd56be165961dcf15c03133a659cc203c5174cbc2e585159a931ac0cffc118ef202b8
- SSDEEP 1572864:Hq4cMu/U1RESsuvvQutTZ1CdA0fnCo7eCctsD3m33b1+ga+24UOIOxXZNJhGcYG3:HqXMqkvQkZ1CdzuV33kgRMANJ/sIEeR
- TLSH T1F448336B390BC0F6CC291634EFA5D854A4AA1FA7475C8E3B7149F0F972F096C8A07953
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/dist/plugin.js
- Size 7KB
- SHA256 c2e5ab4f9642e2e57c5c0cce42bc2d763a92f6a2e6d7c4c1f18f0d6a022b6431
- MD5 bcd564cc97181d4be011393272659d63
- SHA1 adaeeb1a4e20bb7d553cadca744ef93d6c0a7c3a
- SHA512 39342f737c78a2a70e79445fe539bf810062c859a38e88624c968aeaf7bdea655189aefb3376e3e67c7be07ae41f8632bc443840d45eb0bb18dc1ca0dbc51014
- SSDEEP 192:18BI77MdiSXDGyvuc1yKPU2pVACQRYyNIOJl9bjQnQQzSLy7CcFUWIJZDZTVn:nY0Zjvtd
- TLSH T11DF143DF65EB22906FD761B75B2F11816237801F3C5B9988BB8F56449F04A34C3E39A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/dist/plugin.js.map
- Size 14KB
- SHA256 0262c07f2e8c6705ecd7cd59132d06e44f4874ef1818eb7c76b9022b71e675c7
- MD5 27283288cf6c0fbc165fd85cd3952785
- SHA1 9b1fe54a46c91406902d65b416fa357716863453
- SHA512 ad464bb36c209100370fa9430d955689423b11340314df1695e78882fedf1d65d14c2faaf6ffd91b9b062bb81b7490bcd2b4dbf19ebd8ebf1414aea4f298e3ed
- SSDEEP 192:fb9K1QV0prot0q1IpqEeCQrpK+1MkealtywicGwAWvPlOxvxQgH083HEgMcG03qj:fbdb4Irr1re3XxvxQlkPDG9
- TLSH T19152598B506AC93B76831AD705DB41E27E26715C3C5A96403ACDA351F3C1F34EAE28B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/ios/Sources/LocalNotificationsPlugin/LocalNotificationsHandler.swift
- Size 4KB
- SHA256 912cc1e2ed5b68f51679ec1ee4f5c995222137e47ffbe65071e7c98b42c50458
- MD5 ac4c18701b2f3c1e50b964ecc718dfa6
- SHA1 3445218712a1f80631cf788f6bf1069a38230f9c
- SHA512 e6a448ebbbf6ad83a36944030498c3e3838dc1ca967148e8dc6df21ee57559315be2aa0391e1076a4eb553e397bc6c41818676899564bd237d5ad18c7f12840b
- SSDEEP 48:ne47TccnWu949Jtb/NPJ5+3LVCr9ildaSPC90fc/ebvlpylZOGP8v/mgiJub:eox949/b/ZCaSPC90E2bv+HOhmgiJub
- TLSH T1C991779B6156A5A0AF8360BA8B8786D16577D05B3E4B98397BDE82800F11224C3EB785
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/local-notifications/ios/Sources/LocalNotificationsPlugin/LocalNotificationsPlugin.swift
- Size 23KB
- SHA256 36ca165dfb12e42c76e74b7b0b5c6f5c6e074622e9618055f3ba748e68ed34b1
- MD5 a996be2fc57ccdd0b752a860c2a804a6
- SHA1 5844a9ac0d5fa7e3d465834852bbcdbe8552d934
- SHA512 cbb87184d250a3f87651de386e61b471245cd4a87f6e0ff30db9028587f51d8f9bdf9c7383774d9172a60f0975fb9ffee70f271ddc020e30fd6594cce8d149f4
- SSDEEP 384:PAsk1LlngHUr2wY+dVKcA8eDGNqJ5TfE/nVflJyuVZqR:Hk1LlngHUr2x+dVY8mWe5T8yr
- TLSH T1B9B21EAE75A262E15FC76036869B44C2A477C60F290F6864BFDEC5845F11B28C3FB784
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/preferences/Package.swift
- Size 879B
- SHA256 1597a8d944f167dd5b53a6d8170c2344160d58f0b7f85c5ded215b2f994b8027
- MD5 cffe5b2cf2a86da9c56666f6a0cdc7b5
- SHA1 9e694a478f00f01bd4a8bb6d209d0fad5ac9c9ad
- SHA512 90a67eec5348199dcce282bac3ffc4caffb20f3a241bc2ce12f901807be30ddd0e959675c4427664a316974296bb1627bffe18833412a94933d9dbc905a25926
- TLSH T1B911490BC35541D257F105F05C3D1787612A62B34E2A982031CC204D0F2EDFF53ABA7A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/preferences/android/build/intermediates/merged_java_res/debug/feature-capacitor-preferences.jar
- Size 22B
- SHA256 8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
- MD5 76cdb2bad9582d23c1f6f4d868218d6c
- SHA1 b04f3ee8f5e43fa3b162981b50bb72fe1acabb33
- SHA512 5e2f959f36b66df0580a94f384c5fc1ceeec4b2a3925f062d7b68f21758b86581ac2adcfdde73a171a28496e758ef1b23ca4951c05455cdae9357cc3b5a5825f
- MD5 SHA1 SHA512
Score1/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/esm/definitions.js
- Size 50B
- SHA256 fd6abfc3ee9477f94d8860b7652b8e140fb63c4a5fe9a2faeefcb9a68cb8c11f
- MD5 dd5b0d2233ca946774e085a8701efd15
- SHA1 bc04d98d174c2ff123418623384a626a1feb047e
- SHA512 9f64333306a23734732eb4dacf4105faceab8542cee47c8db0d63ce4853c3cea7ff3d1b8f096c12af2f9fdb05aa8a66cd717f3e536229761b4364966bc39ee33
- TLSH T16290025E9CB51A569812493F41599551016CFA92E8020044601055AC90218055851D14
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/esm/index.js
- Size 260B
- SHA256 4c105416774027324827fdd4836439403c456309f88e584b7bf5b3b57848fab3
- MD5 2b945b6588f146d22c0998e5ca803417
- SHA1 dd287816b1679f496215d63669a29b76978571ab
- SHA512 3c1d04d30e3874cef7f9b8d1f0f5bafe1f0d99d97c4eba0dc08c2af0515677dd3bd41da194977f8f776fce86c82978a23b654179de4d6bf2d786c8d93cafd0e2
- TLSH T11DD02B16056A16B6977050F04D2A878F819783137A3B444002292668DD41DA9D5C286B
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/esm/web.js
- Size 2KB
- SHA256 f5bf4d34ac2a9d54fbc9d7318791f889b70a501398ac2ec98b496ca0f11d7579
- MD5 c19b7406dc644b93265dd76a6b50d96f
- SHA1 7d3c9bd7e86b8032ed250e214bf8cd32e889e08e
- SHA512 28253b505a1c03ad3770c27750a381bf0813ea98896901f2a22efb73bd8b967a03af274da5a3d024c7eadc31404e780996fe92a6074e61258f91bd000702e817
- TLSH T191418B2519FF021184EB34EA4AAB9014B47AE513702DCD4CB55C63C08F45A6087F6FF6
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/plugin.cjs.js
- Size 2KB
- SHA256 ae48e4876dac5e12f36fda5f94b985a9df7c861cf904086884ea4d42d5636ebb
- MD5 31f3f46cb61c88a33ce7b3a15648267a
- SHA1 6aee1f193346f5485df30ba0d440bf62231a9bed
- SHA512 d60b26dffe1814ca3cad49567500cd7fb10ec35263012ceefe43f2289bd21745d98c5caf04e17f6685ccd4eff64d6b3b51c092a0a587e2776149a5563d7f43ec
- TLSH T14E51D0151AFF021086EB34EA4AAB9114B036E513702EDD5CB55C67C08F45EA482F3FB7
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target resources/app.asar.unpacked/node_modules/@capacitor/preferences/dist/plugin.js
- Size 2KB
- SHA256 f0cf7bb634d10ebfe36ca1b07c22c0405053dced7ea8df7bab6eacbb247af440
- MD5 eeb9021dace5afbeeae69cd87db98969
- SHA1 b9101cdd6512abe93af1f8d5ff8b39483e29d56b
- SHA512 b3da2d8a8b7e0a5ed2f01ef1c90ea40c8a59fd811e95fca0f90c36b09f43a248cc469be16fe790a7388a17f6a277cfec5b1b00280e7068ac994c550cf2472b91
- TLSH T12B51CA151AFB021046E734EA4AAB9154B43AE113702ECD5CB95CA7C08F45EA882F3FB7
- MD5 SHA1 SHA512 TLSH
Score3/10