70e2631e6d11bdc04c8ebb022c552d0528691d50f868e42e5b9875368f2d3205

Sharing

Copy URL Twitter E-mail

General

Target
3Sixty2027.zip
Size 19.8MB
Sample260924-egcffade33
SHA256 70e2631e6d11bdc04c8ebb022c552d0528691d50f868e42e5b9875368f2d3205
MD5 6cf83a95bd27ba745978c519ca37e0e0
SHA1 f4729ba9efb871546c209149c20287ae591423b8
SHA512 537946b3ff0f4175636380b39fbf658d72bd5ad7efeae5478dc7e5db1d9639092bf147daab24e0c3b269125119f69ff200bf99d8c169e98733823cae5030bb9d
SSDEEP 393216:xxAOuqK0JIFWobAf4rwzdjTZj3MAKBkGHNB335qOvH6Mf6QQ2UF55lKzIVgt4:xbKIIF+frvZjOBXH/r9SQQ2M5QzI9
TLSH
T141273398A9394AC2C7A91ABD83AA1841D47DC40DCBD1FD032590C38BCA87499B7FF577
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  3Sixty2027/WebView2Loader.dll
- Size 161KB
- SHA256 9468470d6a4d11179ec179183d130465a380e0dedfdbe1fc2ab404c86c45a85e
- MD5 61f430f292f85b18b57f06ea6d3d8b82
- SHA1 03e31a690fa32364fea5ce73498f234adc544cd0
- SHA512 73dfd28a27c10984abb382b7d868b3812aa8d0c89435a45b5b242fa82cc7890b91b2e89bc86cdee039b721befaaf0d14506b6c9c86ecbce6ba6d97824eb22dfb
- SSDEEP 3072:dX1/Z3TlTRTFOYfThTNTvDbS2bT4wdovPEKdIMsb1Z5AalipTkYEtJ5+POFEv:dDTlTRTFOYfThTNTvDhvZkPEKdI7pUEQ
- TLSH
  T12CF36C5772E5007BE16B8274C9A34A11E777B4510B60ABEF03A4477A1F237D4AE3EB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  3Sixty2027/data/app.so
- Size 6.9MB
- SHA256 4cc37d8f1e50e354fdb52c5e6e8a67122266bc5225267d2694437cf679646524
- MD5 4a326ce82e4d478e6d70ad1abd30c538
- SHA1 63517969ade351724a9825254e2def79b6be9486
- SHA512 6ac522183a0c570bbc584cb3735b3118e39758387dacaa1c20d99023e0337ab24b68764ee66f8e9288008d93ce42bba790a1cc14e9f372a23d7d5bed0fe695e1
- SSDEEP 49152:lsXSICXSa1j5Q5pkjzuiR04/3ssyDAwEtxeCAqPE5pKVQ/Ut1yrgLMQVHkeJNSXn:ltj1j5QCW/Ut1jVEekCo7pzgiV
- TLSH
  T189760857D0E48360D472E772F76F66A59E1438CC4F31B68B06845B663E8ADE44ACF232
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  panotemplate/fonts/fontawesome-webfont.svg
- Size 436KB
- SHA256 fc378232f9dad500890aa9e0bdd030a53d2f317d517393a3b91400b4ddce4c7c
- MD5 acf3dcb7ff752b5296ca23ba2c7c2606
- SHA1 b5483b11f8ba213e733b5b8af9927a04fec996f6
- SHA512 ec518fb51a29732a7294430841c7acacf1be42652ddd23fd277f3fff110eb84f5a54fa88ff82b1bd461a8c44145847f9c6bfc98a022106661e26237e18048d87
- SSDEEP 3072:vpVL2o2UC8IzTEn1hrn1V4eO9ljwnC+az8bK/OfiYbfaCch/eIUYa7HTreiiP3n2:4OZo0Hl5qev
- TLSH
  T14B94DA6CE8910B79CBDD42D1957E0E94532D81AE28393D1846BDA9F05D07B2A0ECFFC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3
- Target
  panotemplate/index.html
- Size 44KB
- SHA256 c7989dbf072b9a407a655f467420e102dd7b24f0d949469692df95b4afb7de67
- MD5 ca9a575a25214e165fd2d4ee0d182b90
- SHA1 d07fb9343837255b4d84a1c23745bbc9311daed4
- SHA512 6b79ca377e2c4fcf5b4c4d349234b77ee53a5edbba915ff03304829b2a7395183e4bcd1358914ddae39867cc5eabd2cb865f3d9d5e15d3e01a64c8c9ce543724
- SSDEEP 384:cYhT6SCMmWktq5jrDmtrfngKx5GDLs3qV+wWkA1ULxvoQ6QLTyjYLFCxdwMSw1Gc:ZT6SxeQ5/aFxio7TyLi+Z7Me0v
- TLSH
  T13013A108336E296E467733299B379109F23DD533110694E5398D87181FB66388BAAFDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  panotemplate/js/GLTFLoader.js
- Size 116KB
- SHA256 0086883359da805c2e298e47eaf29479fff97490790bc996fcb4ffad680d0520
- MD5 e36b6bd977ea15fd9558adf0b61f53de
- SHA1 4bec9bfe4ee4aa7ebb52b37abaa5a8e8c7539419
- SHA512 aaeb305bad3f16f2a549a85f25deeeb173fe2cacd2b6a6672472fd5ce5b81ea4c535741fc024770761bece539f80e1e882e31cb8d8cf0df7247e99caf802c3dc
- SSDEEP 1536:PsxKnKXvVsT2G9OVpCBJU5IfpT6bgKz5/HvJUQJ9OVXdKpSwxNh6:PsUKXvVsTR9OV/5+89OVCy
- TLSH
  T1D9C33EC5770F521B4FBA3398D83C1AC1AA7CD42BB60AD2D8B5C9580D24E6114D36EFAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  panotemplate/js/OrbitControls.js
- Size 25KB
- SHA256 02bb4ade710f3e607329e37a21f098bc3ac70eb6e33daf8a65e79f4db785e7b2
- MD5 98d0f30d2f372eb8ddd748a23a6763c8
- SHA1 63530cfe2b2884f34ef89e46e034221e2121fa8e
- SHA512 3968d4476c7d801211c2bdd7a1a1680d72739849d5057323df69d28ddef4d40717f39da1d7b7e6c2b78663735efc1b8b3786de98c06b9c4f9102d2de91d52a66
- SSDEEP 192:T9NNFxs9m5s5jkkMcTELsKZYbIKX6zc17uFXJHJPhpVkANAATYEsZsysBmy3WJp/:T9Nzq9v5gkfEx+7uxZfNAATYoGCKP
- TLSH
  T15CC26288639E31AE017D778C463845EA763D80B31501A8FBBE5DCE9858E103947BEF79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  panotemplate/js/TransformControls.js
- Size 45KB
- SHA256 0ee8294bc90fa7b7e373581635f6a46eeb8202449b3879c166eedc4292202839
- MD5 a7569dd46b805342ae1a337352d00797
- SHA1 3ce60128b531564f1df6042c4c0dc2616411fbcf
- SHA512 591ef55820f27a967db39262a485e849e51e2ffb19b50076c7720010750c92468544ad56b5f46d03f9f5128fe78f89f606843f7fe1bf9c10ef59f637e5b87560
- SSDEEP 768:6CJT3XvSqSwBFP4FlsFBFyFLUcLcQL3LYQPx+FNX+/UmSfg7SP/WyfVvc8cRqTeZ:ujNvZJ+LXaBqSS3WyLcRqTeoy5
- TLSH
  T1B32362C4334F149B9667F348A17008A2B83CD837B516A59934CD92DED89B02947BFFB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  panotemplate/js/imagedata.js
- Size 805B
- SHA256 3240be0a8607d3a55ca227434df5c5875ca2f295d27914b0a8cccfd07c6dedd7
- MD5 13c2b22f6f538e190a5d9283f4100de0
- SHA1 12b6d2aba0e65ff7df21e116b3bbd7d8277f628b
- SHA512 409bacc6e0260c27fb977bed95f6b41ce6720082c63bf74a6bff54a049bfd7332d303b67fc204f14f6fb1e540b8604a5216f79f5785c73a45481e54268804316
- TLSH
  T1540143A331DDA64C91987A43E6B08C085C253E62C36936FA782E51A5E4E601AB9CDB00
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  panotemplate/js/jquery.js
- Size 84KB
- SHA256 d3a518dea876de39f9e5dc1ffcdeb6c661aee25d8a62474386b664ef3bf1b40f
- MD5 27a8f25e65bfe1872ebd62e021a0c6ca
- SHA1 9f835084914c0f4403a080fb7de4abe0d210adf8
- SHA512 f327ef1684bc0c87ea17dacecb792b8110ac6253bc256389b66139595dffd68f54da14fb5a04b10829f89306675fcbd80f403a6a29d4d1ff3c23978803e588d8
- SSDEEP 1536:TNhEyjjTikEJO4edXXe9J578go6MWX2xkjde4c4j2ll2AckaXE46n15HZ+FhFcQr:Vxc2yji4j2uC/kcQDU8CuN
- TLSH
  T1AA83E6D9B2C67062977730B950BF410BB17A98DAB44C8C60F158D9D47EB8A8D907BF2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  panotemplate/js/three.min.js
- Size 589KB
- SHA256 9274bbcec8d96168626c732b5d31c775aa8cfb7eaa0599bec0c175908a2c1ce2
- MD5 eb8549863a97355411c3259a3f93b8e1
- SHA1 7a7802bf4f08d5d7641585696b78023848e8b2df
- SHA512 74bc547a50299d8c692ede8ada2a261a78271cef37894bd9cad0376230d40a34f41c33872979d561d7f7854e098ccf2e121c5ff670f5fdecbdf14deddaf674a9
- SSDEEP 12288:kDU69UqB+J6NbazWZe7Y6zLBLSRWeMO+Mk3MP/G0MIRlGNgLQX2MHiV0f:p6yqoENbazWZe7Y6zLBLSRWeMkk8P/GB
- TLSH
  T167D44C9132B020374A57A9D640760543A33A78963406C5BCB62CFCE77CA98D5F2BBF79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  panotemplate/pdfjs/build/pdf.js
- Size 674KB
- SHA256 e5c0ff61200ba6808a332a57c7bea3a0a4052269444c6118801a9db1677887e3
- MD5 231e8fbb090287d602a79ea829c1d700
- SHA1 44f631ef81e9fa1088dfb224ad8a777258143d50
- SHA512 96620de9e37bdddc12473d5453efe43469c78a73e6160d5a9e95167a862e682e186326f8a56a034ab76f6a81db092d1c9cbcaf1c921fce7478248f55bffe61da
- SSDEEP 6144:9KTTR0jtAo5KG1FNh/hrWkCn26XT9c/jB+vIPhGD+B/CRdBiu2U5jNvWLZpj+ZX0:9K5LBgj+om7Pxj+1Cm
- TLSH
  T10DE4C589AE9524559637B3B9DB1F850EF6B2852301068629BC6CC5C82FF1458C3F9FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  panotemplate/pdfjs/build/pdf.worker.js
- Size 1.6MB
- SHA256 0571c28c7232c667aca8fec4e252f314d481b358bdf3df301b52d1ee6f0135db
- MD5 f70bf6ba751c3a1a7330fbd32ec325a3
- SHA1 391d8dc0eefd5e15e83a239a4b4ef998e9d42fb9
- SHA512 dacf3288c5afea8c41df174b30ab6bbc2f24b11a2d50d70fae52c4f8d053fa8a37b74a281a1358bdc3c7a87fea104177b254f1f918d8a41e73b873932a0f3a3d
- SSDEEP 24576:GmRyDg4FgG/IkHt9wA+PXx+yLgJWGxbKrHVa:XR+g4PHt9wA+PXx+yLgJWGIrHM
- TLSH
  T13C75D6485F9424759537B33ACB6B8A09FABB41376404C01DBD3CC7842FB156A82A9FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  panotemplate/pdfjs/web/debugger.js
- Size 19KB
- SHA256 5f0cc4d0fc910c7a5ef1efe77d02fc9730fb3d5cdd1cdaf25a099321182ec423
- MD5 78a6fd49179e0635e99a89072c673374
- SHA1 5d177e1496aa6779aafe2283eb639afe5064258a
- SHA512 5e17db6c884e44487ee1c9d3bc49f62499e93bf3dcc454568958a1c96a9161969b754d91c6407ad6743f037383cf09196cd0ad0141607c08b9a584dce74cf193
- SSDEEP 192:Kl5PHuaNXOylu+KdkHkvPqrvD5TLnMy11NEc86LYoZCJw9fINhFlSXtDlsuajazX:KbWaNegK4X9nMy11N5PFZ4NbS5zoR0
- TLSH
  T1749241199AB522749537733AAB3FA421F9BA01274501D211B9ECDA491FB0C0152FEFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  panotemplate/pdfjs/web/images/annotation-check.svg
- Size 426B
- SHA256 32dea5b56b36c523867e1841bdae87be2874e9d10fef998f06a56532d450b2e9
- MD5 76b43d8cec092adac40d694b39f0e139
- SHA1 a1b31f660c5c5026f509e5e694e8bef764eccc0d
- SHA512 b255aa9930a67df9b0318286eb666dc3e7e1a92e926176263622361a6feb6b55a38717134864667d8f35d2c8434f6174b049b2e4244bdc78e952a2a51a804c0a
- TLSH
  T102E0AB2CC3C8061180F487509A69F108E6EB30C28A410905B5D496B3AF742C7A2D91DF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral14
- Target
  panotemplate/pdfjs/web/images/annotation-comment.svg
- Size 899B
- SHA256 f280fa5f5e435f8dbf1995a9fb9122504f63f893daaef6fc2618ffdc9108c4f7
- MD5 4fd308d1abd2643cea0b2cc53f788412
- SHA1 253477ce1054bd8dc5219509247126dc89420bf0
- SHA512 4cbe5986b38c7d604ce5df5b8abec417705064982dc335a7966a2ef4c5e10c363561abc3e7c1e59cbf4203c03eb1569df1bf2365f4302c7a25ab992e8082b0e5
- TLSH
  T10D11D020C348507580750A61E66CF508D23B2A8BFA6111A279C96B375B3F1D365A61CD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15
- Target
  panotemplate/pdfjs/web/images/annotation-help.svg
- Size 2KB
- SHA256 b7ba7446f754c4a67c7ab99315ffba5d5f201b8fff3ae7461257a961f99603ca
- MD5 e35ea012c471745aafb4c7c2691d7fca
- SHA1 bef79ecf26f70bf1ee3ba78a5ff6e84159cd98d1
- SHA512 0d72bd5d9cca823f161089a5b0d0fef2acc076b4e0b1b93540c24beddec4a9e6dc4cd9124109988ecc57d8be1e0e7c6f0ce10f70b28b8965e1e58e8b283e55eb
- TLSH
  T1864171F8C3828025D0BE4475C9693848910777C33742251A778EA77BFF395A398D965F
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral16
- Target
  panotemplate/pdfjs/web/images/annotation-insert.svg
- Size 418B
- SHA256 bbd61b9f5ec81b32446a59cce02dff9b00d1e33b8fd3f2aa2e5c7ef0099a868e
- MD5 971416d09a5543e2f66c793ab2ac8958
- SHA1 7e4af0d1c5f8800b1fc4c3aa22c5c1b99e6a6fe5
- SHA512 239d61bb23d4e94cd31bd00e776095c8f6558a322309e68442b5c9e4c6620281261acd951f3ce8d47e476988415cd7d6bfb9450018d09e883e4a64d5c5ab57fa
- TLSH
  T11FE0AB14D34408394070C7A0E639F80E932B74A37AE11F8679A51377AF6E2C3A09319D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17
- Target
  panotemplate/pdfjs/web/images/annotation-key.svg
- Size 1KB
- SHA256 ee74a0b9190e16be152a98d8370ed500b0be49f65d9b4e923e83f1b33bde555b
- MD5 4615f30dcfbf96c8c8a2c89a8e2e6437
- SHA1 4a9f396ca0d5efb81e30117148358ff0d042c8a2
- SHA512 0108808218a574572eafaaab1b47a4df91588ddbddf9076dde5ff2407bbbc9cd0bc1294747a22fa61a4507f3e9a4236db1f9571f5be94942e1849ded5f7ed8ab
- TLSH
  T10531A714D3B846F0A1B595848CA2AD0DA32734E17E411048AAD66B45EEB99837895D09
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral18
- Target
  panotemplate/pdfjs/web/images/annotation-newparagraph.svg
- Size 437B
- SHA256 2537f501645df586a117490a2de62b93a5a48492fd9ae518ba8222302f052197
- MD5 02219a347fcdbc937a00770fad2a0eca
- SHA1 00eb381b8814d901b6b0af059a76425f27bae19e
- SHA512 bb7606efaf8e2b15388524fc7bab4cd46c98e0c9b5c16f30c5f2f74efcd685cfeefe7ac0ce4b209a8dfd267c26069bdf275ee2105ac19ca2b6b4588d419060b9
- TLSH
  T14CE0DC20C384083140308391A735F048D36B349329C1168679AE5262AFA90C320D229D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19
- Target
  panotemplate/pdfjs/web/images/annotation-noicon.svg
- Size 165B
- SHA256 5a7b745cca936c7abec12187e7ab552e502960e513f646eb55a2a47dd23f77b3
- MD5 8ef501b1a907a617a8b87c1acbb72843
- SHA1 ef01850e55a94ae6a199a4ec00fef988a0944f24
- SHA512 26f1203c85213b969262593a3e36345c50248e780c7a6fc3e456bcd3bd2f0b5ce5d0267362c6b8ffe9ae4e09e6b310b5f15505299fb2c1bd6f63a67248e07e11
- TLSH
  T1D0C08C74C2999E2484B8CB608ABCEA48E3E7B04294820149FEE126924E38A8362C565D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral20
- Target
  panotemplate/pdfjs/web/images/annotation-note.svg
- Size 1KB
- SHA256 f8e7b10e93f771ba1ef3a3c771bcbf59e5a3efe9832bef90baf1dbe9f66e1d07
- MD5 4c486ec08b6e4d8b78b1f1db562f7a5c
- SHA1 04b41bd486cc1bd5f636526dbcc58301ebdcbb5b
- SHA512 c6b09881352357ef47ec47ae874a07931b96b23ce4725ec52d2ae4341fe7895f11b0fbe9a8b7fbd1cac04713cb0e17c25cddfe944205df2001cbf9f6ef493755
- TLSH
  T11D113625D28CC85083774996FE50B005C12BB1974FD60E693BDC5266AF3229369E53CE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21
- Target
  panotemplate/pdfjs/web/images/annotation-paragraph.svg
- Size 1KB
- SHA256 6ce8af62edff740ffc168c42199f5b74bee999faf09a5983a77cfa9311f88eb9
- MD5 3791b45fb8230f149cf096dabf84cc24
- SHA1 1fb9a62c3eb3d329e7c50075655d7f97bf4047ff
- SHA512 2e5221ffc08780b6d3dc9d90e45b2c3bfa1e3ca45f93744c2787178faeffc5063dba17b02e29dc4ebffa381af2f9585464ae69cbb593b4d9fac5f97e75153ed6
- TLSH
  T1BD217431C3844825C0B906B0ACCEBA0C911A08937A930A97B58E0C329FF71E332C679D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral22
- Target
  panotemplate/pdfjs/web/viewer.html
- Size 21KB
- SHA256 ec23d9fb494b1b2086f50ee8259f9acb24227651d648297c76f38275ad78f6be
- MD5 4b719d6a2961ae345ec37f161eec32db
- SHA1 c46d371205728f9d3afcf1aa16c6fc9e6ec52478
- SHA512 7a92d820e47ac3839cb9ce0bee800e7c67d38fe2ae6cebf16a9e09ae8e54598aa19e06af55481f9a371f41b7880e812c58477f54bdce77d764baa3a8e63d3b22
- SSDEEP 192:0FVHlYTd/6c6ApNFBUOmSvhCC3TJuwgWhlIQoCpL:0FHYTT6ApNDzmwCC3VpL
- TLSH
  T1B7A2FFA8A5E4583245B390C975D97A4EFE85A263C2CE14503B5C93F31FFAD25A60F02E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  3Sixty2027/data/flutter_assets/assets/threed/editor.html
- Size 49KB
- SHA256 f6e688ec310d975945993cb9a1ad3824c88a23aa9a59ab412312896c68e6ec24
- MD5 45028867fe0dd9d9e3a44358a030b98d
- SHA1 d83fa9f9731fe9c4ecd9acf020c8e4b0460e054e
- SHA512 b68b7be63875c4ecd3f598324a0c66ab9ede18ed806cbe5f444471bfa7f25a746e094b48c4adda45f1a89e4ae5986ee9ffa2a4aa197e5e8627d785873082e4bc
- SSDEEP 1536:ChqDy+KjExV0eTO/tHi5BxH1yAmFZeK443m83lGyHf:70eCVP443ms
- TLSH
  T12033A5492C59207F49B7F7B5CB439A19F6364013260786D2B5EC81841FB273492EEEEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  3Sixty2027/data/flutter_assets/packages/flutter_inappwebview/assets/t_rex_runner/t-rex.html
- Size 80KB
- SHA256 dc72cfc1f1d2a5013bb9de34f8cacf5e26e542d7d713fcbe09b865b4aaca6ddf
- MD5 16911fcc170c8af1c5457940bd0bf055
- SHA1 eb44540186285271130b056fa6099b1988319fc4
- SHA512 131a00b7895a40ea0fb355ecc5292b3cbbcd23b45dd59b07da1b8eb86501ff0ec698ab5446687cd7ff5fba03d97b7a0b6e47196dc284a51c677cf04dbe13e393
- SSDEEP 1536:V5OdudTTa8udsB7g1BuqHkFT5VgYzMGgbJsMPz:Vq0y80I7OuikXm3bJsMPz
- TLSH
  T1CC836C37231A1A7896D8A41AD00E835DDF33F187910885BD7BBCFED4B4AAC06516E778
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  3Sixty2027/data/flutter_assets/packages/flutter_inappwebview_web/assets/web/web_support.js
- Size 27KB
- SHA256 2f9ccef9db4da6b73d3c678ffe570aad402791b00dfa520730fdb66d0dc209fc
- MD5 509ae636cfdd93e49b5a6eaf0f06d79f
- SHA1 0b880fe3cc81d0bccadd31dcaddedc5925b66c05
- SHA512 ed6b7eb2131de387c78a25bd500bed7f32d169f5e12d13df36541cc7242991ad414551c768baf6d7cfa0ae0faddc7aef03d5406d27e2586b896247021d359b54
- SSDEEP 192:2Lt7qb5JyJNvH+1TRy1aj18Avj01m3x5ZQupRZyMyFymMZie6iSJS9SQSHiSpZQS:2FWRyMEEh556Ml6LLAqCk
- TLSH
  T177D2ACDE4CF7117515A3B46E4AAF12443622A2437648EE303CFC971C6FE0E6652E5BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  3Sixty2027/file_selector_windows_plugin.dll
- Size 107KB
- SHA256 2d2f7196dad772bf1742aecd6e9cdb3c340994da33093afe12d033988b3092f3
- MD5 17c48ecf76cd04e864644037da5a7d35
- SHA1 d94d0f006a48594339eb95731b71299d6a4ac0dd
- SHA512 a086a157f50d73ef8cc1c9fc3e1942fe6f98960e38b085c91cbf0924af4aff8a2a4389bdc46c5dc4e0298e9655c2aee43cafdfe4c0e4270d64c82067d3d95e28
- SSDEEP 1536:o/uKEJSAmSPFYG00tiFRPviLvc88acopeMfFG5BXGu4j:iNEJZ00EdviLvc88acopeMfFG5BXGuE
- TLSH
  T1C0B32C2BFA2C407ED22AD4B8CA535D05CB72F88557A1A7CF67900EDB0E57AE45E3E101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  3Sixty2027/flutter_inappwebview_windows_plugin.dll
- Size 972KB
- SHA256 6dfc09f2fca34f7cb753ec9f1ed50764ded85e8d07d8dd1b5508b3c15ed2d62f
- MD5 55690aacf4814434c7e4feecffb3ed1a
- SHA1 6e50f0f17c6a336abacc2db7dc67045bbbc32cd8
- SHA512 f611cd09a4a5bff06beb74887d4831fd5627611e3e265e922fac58accd5087611add661a04cc9fe770db2db928c6be022314317891c2ced7ad1572ab77245cd1
- SSDEEP 12288:DuBLAonlYooOuW2dmoECh46durIYJF1E3fIMKJXpd5pHuLqxiq88UEIzihk7Y9qW:DuayYoolbgKuxEhi33uLqxirx1MfEDl
- TLSH
  T1D2253C2B662C00ACE07BC1FDCDA74E52D7B1B4971371A6DB26E05E963E5B6E40D3DA00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  3Sixty2027/flutter_windows.dll
- Size 19.8MB
- SHA256 c0304beba5fe98477177e151c673adad98d0442f50efa25d03ff5f207cc21056
- MD5 d58a8db7631d3577b3cc9abe14cce466
- SHA1 c42e1571ddb6191789331f3db60783cc8a539b78
- SHA512 89bdff0faa6ea9f3d89a8bde8e381f82996931f22fc695d1c26e28fac59eff9428ca8e65461373337035233fc4e732c8643b2460290af5393d63e643e626955e
- SSDEEP 98304:QPe71P0UiyfxPUBJt4D5hrwgRk244TtFkJp7KYx8m3aIw3v8sDM0p1Vw3/tJjkad:Q+CYrwgRPLYFUZw3vjRfIS5XQe8I
- TLSH
  T1C9276B03F29640EDC459E178971BAA23F671B8490720BADF27584B223F66FE05B3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  3Sixty2027/screen_retriever_windows_plugin.dll
- Size 118KB
- SHA256 db122eff5029fac501b1d2ca627c60301db84b8762d423c90053147e2410ee4a
- MD5 41609a62d4f40a065524567527b463dc
- SHA1 97b930fc647856a5da933a5761b2442a1eba54d9
- SHA512 c8c6eff64c4e10bf243377646bcdc09a5274d9277ee7b9651b7b14fa34a488a6169cdfca51312e00662ad30748a48a42d03b346686fd6c0e8603bea485736538
- SSDEEP 1536:gje/Z1HTAqi+9TEGmGiJhSz020HPw8eGcnWqkgn/Mp+eC9/0HB6KD0:gpBGiU0208Wqkgn/Mp+eC9/0HIKD
- TLSH
  T10BC31B2BF75940AFE11AD8B8CA574D42CBB2F8954B9167CF17900ADA0F17AE85F3E500
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  3Sixty2027/three_sixty_27.exe
- Size 61KB
- SHA256 c2a0ec0aeb2c87c57fa16411d4eb1742a21cfb32543b96e0ac2475afc87c70ed
- MD5 311205b7c5fa5a542077b0c2d8f20f63
- SHA1 d9f6d3308da092cf867626b7c53838de3806d38d
- SHA512 7725cf1d938eff7c63d016c4f4ce7fb1b4b62922a4e0028e7c061f065a7cfc8438b89fe887473a76f9b8c03e66379ddc930ae6afaaddf21d8ebbea6ce2354c82
- SSDEEP 768:Oov5fDJMCbHwrZUL5yiYYH5rl+bQCuCA6KrWDLUpi0mMw97LHV:OovBDJMCE61yiaQCY7rWDYpi0mMS
- TLSH
  T120532A17DA6640EBE39D8978C9534905CB72FCC64BE1A2CF57800DEA0E56AE49F3E601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral31
- Target
  3Sixty2027/window_manager_plugin.dll
- Size 128KB
- SHA256 2a64eebb6bce2f449bf6e989617e7de4a2a6ed56d8880cdae73850666c441331
- MD5 46bfce0f5b113159d592fba534f41957
- SHA1 58546fc273b1fc8967466c973a54656f250b913a
- SHA512 b557e4223522297142cb7274d5ac2cc8b267539de4012cf4f818c5bdf325bd574e067f3354437f20de55048f6adb04a095bb03b952de1128cf883558a70f58f7
- SSDEEP 3072:g6sOgOvUGGQisXlN+tBrhaTVM+CvpZJHJTHRBL1zBPC:gMgaUGzis1ohaTVYvpZJHJTHRBZNC
- TLSH
  T168D34B2AF61C40AEE16AE4F8C9935905CBB2F8C65751A7CF13900ADB0F57AE45E3F510
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32