Overview
overview
7Static
static
3sylteditor...08.exe
windows10-2004-x64
7sylteditor...08.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3SYLTEditor.exe
windows10-2004-x64
6SYLTEditor.exe
windows11-ltsc_2024-x64
6sylteditor.pdf
windows10-2004-x64
3sylteditor.pdf
windows11-ltsc_2024-x64
3syltexport.exe
windows10-2004-x64
3syltexport.exe
windows11-ltsc_2024-x64
3syltimport.exe
windows10-2004-x64
3syltimport.exe
windows11-ltsc_2024-x64
3uninstall.exe
windows10-2004-x64
7uninstall.exe
windows11-ltsc_2024-x64
7General
- Target sylteditor-1.1.5108.exe
- Size 752KB
- Sample260928-3e33dawbph
- SHA256 015ef96b7c7adbdebf5acdd0e164cbf56f1d4861c1f15f189d43576d909ccd13
- MD5 6343f3b834025c92d13615811d611d25
- SHA1 972c3a835fc66c0c1e8ccbcb7c91e579105842d7
- SHA512 155997282dda6fe1d20309b0a81e2764de64807ed3ff06ba2690ad6794d43dc3660721a26c797c96c4171411960c6614717a97e8ee5fca3340f3511868b749de
- SSDEEP 12288:E/kQA23YIO7x3r+OkGzzo+5eO7PyDgQecEl+WialSAoYVnGSu1:hQL9O7tKOkMo+M43EhiVn1u1
- TLSH T11CF43316A7C4D5C7D81306394D7B0361BB7EF843E6A93BB357823FA3095501B26892EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
sylteditor-1.1.5108.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
sylteditor-1.1.5108.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
SYLTEditor.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
SYLTEditor.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
sylteditor.pdf
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
sylteditor.pdf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
syltexport.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
syltexport.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
syltimport.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
syltimport.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
uninstall.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
uninstall.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target sylteditor-1.1.5108.exe
- Size 752KB
- SHA256 015ef96b7c7adbdebf5acdd0e164cbf56f1d4861c1f15f189d43576d909ccd13
- MD5 6343f3b834025c92d13615811d611d25
- SHA1 972c3a835fc66c0c1e8ccbcb7c91e579105842d7
- SHA512 155997282dda6fe1d20309b0a81e2764de64807ed3ff06ba2690ad6794d43dc3660721a26c797c96c4171411960c6614717a97e8ee5fca3340f3511868b749de
- SSDEEP 12288:E/kQA23YIO7x3r+OkGzzo+5eO7PyDgQecEl+WialSAoYVnGSu1:hQL9O7tKOkMo+M43EhiVn1u1
- TLSH T11CF43316A7C4D5C7D81306394D7B0361BB7EF843E6A93BB357823FA3095501B26892EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SYLTEditor.exe
- Size 1.7MB
- SHA256 c43c097ec0f5a259d9991e6c87cec0441e3dc9c20be31fa7ee3612b79a926546
- MD5 d5a11e317d3e8c6ba41992375e6c1734
- SHA1 c0c3e1e8a7150aa9cdbdd923e5014c8cdd0ee699
- SHA512 0ea1a3617e0937cd174c1675594420f6d97a501dea5e6fccf927d09decba69df2d0aabd7cd726740cd4a7c78a3f7accba0b9a9d6511e8170c89d3ac5b96a2f32
- SSDEEP 24576:AXGvdqPUb3mo3a6ax28EXLy7JOhxnwNejo9kTKdjg+6iiMIsTkEolXq:+sMUKKwwo9kOdjKJsTYlXq
- TLSH T1D8857DA47BDBC1F6EA4621B90C369B0D457E76924B385AE7B35C2D0E0B227D07C36316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target sylteditor.pdf
- Size 134KB
- SHA256 618198d4dee8bafb738ab4efe585f1886085f36d29f35d3b78c962bb980ee390
- MD5 6a738ce3f341ed6ebbde411820dce086
- SHA1 3276b0b797af974fc03d71f442cc9e77821fe1b3
- SHA512 1da40d63010397b86c6bfbda8d0629c60c5d48d1f5213de8af7440f263676259d1e5f01c368aa1c4d79c1f7efd8dbf1580d58f005fd9bc60a2003bdd89b35680
- SSDEEP 1536:HxNSmMtcUGbWcYU6lSPi7+noWFh8YvmiwjopsIwSKNGtY2OvCmOFeuT/wpqKls6h:stKqY6T4/8Sm9j5ZSMiOvjOFeu8pqaO8
- TLSH T158D39E6FF8D558CEE8D2866294B6355CC72DB3676BCD7482287C4F46A380845CB93AC3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target syltexport.exe
- Size 45KB
- SHA256 b4649f9b03f45b04276b645743843d970ebe208bc0feeb5fefe082dc5d3ffc54
- MD5 77c71d8a0e9f8fa9bd82cb813e2e2d01
- SHA1 2a61fbc8fbae51a6af689acf5489038fe9d552b4
- SHA512 b79903ff2a50f8a3bb7d8e52e3c6fd87ec79be64e677033b7dc3fade84a83effab21152c4e4b814d937be8df0399f20c390eea25a01dc8b1b9fe3aa6608507a9
- SSDEEP 768:iSe5SuKNJelD4qLORC9WH27xtcnaNOpUtNgCsmGP6IKZ:iSpuKNJ7wORC4SxCaNO2tNgNu
- TLSH T1D7234B2E1D60C276E09241F4101A7BBF2E32FE1170C4D4EBDB919E7AFAB1506E25935D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target syltimport.exe
- Size 45KB
- SHA256 ae3a24c830868704ce3a31382498a28be7a0b657b6515460f35da6478c689d8d
- MD5 ce9d20364f8fdd33dc4f37d77d91add3
- SHA1 a0f5fb833152cd4b0700bfac4602ff01943ead28
- SHA512 69d0d8e6e365da7a3b3ec7acb06cf8467a05aeae7d86ab307888beaefbe853cfc813cff296d875ae9ff78f75daa9d8c9a0b451f6d869f5a3ce57701f9d717f04
- SSDEEP 768:qbxTE88vY+3/fxAT6kNfyOb0k279mj+Dc7ZpnCYGEsQ15bIOHz/1g:t88vYa3xAGkNfyORS9LD0pnxGyztg
- TLSH T14C23491E1E60C272E1A111F41029B7BF2E32FE1171C8C5DBEB91AD7ABEB0102E25975D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target uninstall.exe
- Size 38KB
- SHA256 26e781c48bdae3034da956aa56171c5066f6b2e9b03490545a15ba6f3a259d24
- MD5 07cb213d60b9ba6ec892da11af35b84e
- SHA1 2f99edbfbf939bdc6263f1b25d9e9c3b078a2970
- SHA512 d323e6dac6196bce989c5cb1937044846abcf8f0c73d8d55432b8ff338fd9d06b9d0aa2f2ceeeadd54ca817e47a52c60cd82338860b94204b1e7c380ad946012
- SSDEEP 768:h1cVhpQI2EQK0iPDh84nScF15GYbWjXO3XJKOx+2Mt5iL:PQpQ5EP0ijnRTXJnx725W
- TLSH T146037D5636C1C8BBE0560A701AB7D77BE7B6A3311F6206476F2C1FBE29111C399192C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE