Overview
overview
3Static
static
3�...up.exe
windows10-2004-x64
3�...up.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3AACDecoder.dll
windows10-2004-x64
3AACDecoder.dll
windows11-ltsc_2024-x64
3AmrDll.dll
windows10-2004-x64
3AmrDll.dll
windows11-ltsc_2024-x64
3CMCenter.dll
windows10-2004-x64
3CMCenter.dll
windows11-ltsc_2024-x64
3CMDvsComm.dll
windows10-2004-x64
3CMDvsComm.dll
windows11-ltsc_2024-x64
3CMLanDevMgr.exe
windows10-2004-x64
3CMLanDevMgr.exe
windows11-ltsc_2024-x64
3CMPlayAV.dll
windows10-2004-x64
3CMPlayAV.dll
windows11-ltsc_2024-x64
3CMPlayBack.exe
windows10-2004-x64
3CMPlayBack.exe
windows11-ltsc_2024-x64
3CM_Billing_Clt.dll
windows10-2004-x64
3CM_Billing_Clt.dll
windows11-ltsc_2024-x64
3CM_Billing_UI.dll
windows10-2004-x64
3CM_Billing_UI.dll
windows11-ltsc_2024-x64
3General
- Target CloudVideoMonitor-setup.zip
- Size 5.2MB
- Sample260929-phebjazbmg
- SHA256 b550d7b4a57f9bd334eb10ccff0e88d1a88ffc8cce7fe6e90c644c3bd176db76
- MD5 7393bee4940e60c12f011dce51322e13
- SHA1 8c577c6be5f4d420bdbe8fbb82f023ebc78989e9
- SHA512 f44284308507898e390abd519ad859e388877537a837c0efb2c5c8f861838417a8bb1bb345430136afae35abdc90f244949b5c084f28312ef58f14f7d71e2da1
- SSDEEP 98304:/3Aora1SZjIox6ejTdzo0E6imbU/JOUn1oMzl7r5B376LzCipC0nq:/3AorNy66eVoD2bURrD7rj3OLzlpCUq
- TLSH T1F64633EEA409B1CE5C76BDC305A1547C320C76A9C1B366A846F85A01CCFD9626F6C3E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Ƶͻ-2.1.11.2013.07.26-setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Ƶͻ-2.1.11.2013.07.26-setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
AACDecoder.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
AACDecoder.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
AmrDll.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
AmrDll.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
CMCenter.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
CMCenter.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
CMDvsComm.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
CMDvsComm.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
CMLanDevMgr.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
CMLanDevMgr.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
CMPlayAV.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
CMPlayAV.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
CMPlayBack.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
CMPlayBack.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
CM_Billing_Clt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
CM_Billing_Clt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
CM_Billing_UI.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
CM_Billing_UI.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Ƶͻ-2.1.11.2013.07.26-setup.exe
- Size 5.3MB
- SHA256 a7c3f8ca79483395ccac678ec4252a625a7464aa57eb47f9db32b2b472cab258
- MD5 8118e03d3258809e6eb053ef050f6978
- SHA1 7f1752017521bddea80d28206ffc5b2e5a5fbcd0
- SHA512 ddbc62ca8393b3b9dbb382b86f3e86d44c2b0cd322f679fd16edc975dcc496a84d2eaa21470b7495b7f429c1be3f355803a29c2c165031e643905dfcd28da67c
- SSDEEP 98304:c7ooXIRoRzagx6YxxhfimE8sAbs7DMUV1YC33XFbbP7GlpMMHY0JA:c7ooXvoS6YVilsbsvhPXFfPKlphHYEA
- TLSH T1444633DEA405E0CFCC716EF306A5547C221C6A99C1B3265A47F87E01DCBA4625F6D2E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/GetVersion.dll
- Size 6KB
- SHA256 7d76c7dd8f7cd5a87e0118dacb434db3971a049501e22a5f4b947154621ab3d4
- MD5 5264f7d6d89d1dc04955cfb391798446
- SHA1 211d8d3e7c2b2f57f54a11cb8bc4fa536df08acc
- SHA512 80d27ee2f87e2822bd5c8c55cc3d1e49beebb86d8557c92b52b7cbea9f27882d80e59eefa25e414eecee268a9a6193b6b50b748de33c778b007cde24ef8bcfb7
- SSDEEP 96:E12Z84uiwpGTVTDSpaHYfniz0R3GhCvXY6Ix5vdR7pBi46AQ5Vu4:2STVTGwYhR3GhCvy5vH7pBi46AQ5Vu
- TLSH T1F4D1C3F343E50BE0D03751BE40D64A9B0770E6684EE0E46A48478DE264E731AEF3BB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 4b6f2ff82fc4ef5533141681a59e2d8b4ebe013c4be2e423c81a3191b9cc3239
- MD5 ff580abf149f3f22a0cc310a6b7ea41b
- SHA1 d52c18cd9e4b6d76f8070b880f7607c8a3f0a2fe
- SHA512 b2aba398e60f98a8649bfc8653ea16279e21e1234fd932c45f8d66f04bd599e6296acd1d11c0c41d8bc83bb14284231dd8c56195e93fdb00605ad660a6827f4d
- SSDEEP 48:S/EFLUmNDsKWMPUptxEqK6/loUI+VcNSmwVs3J0vrpXLta1JvR0Joofbm:3RDsKGEi/ZVcNSmwVs3JI9t8R0N
- TLSH T1C6C1C773B3C641F6D6950233656333C36253AA343365420F9B6791AB39109E7DD2EB83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 05f699d932f1fea8e6f1a711c3bc8ba51463b924b78a68bfd0683295de008da1
- MD5 72f18eaa88886bd0d46de64a17d9720c
- SHA1 e604c84de0ded023cf4c5e215c0534faf1d18227
- SHA512 5a80e303f1418dde67ffe0b9b60d574b85634de0d2b557a6691229812e9b376fb34ba7e276efd0e20f35baec91f1030b738e2138d7b7ee146715fcab5cd7e018
- SSDEEP 96:VgJbo7bG2VHk3C45rJixqE+6nSvMn0iGLG8wq/aAtJ1t2RhU1fU:qJk7ZHgRJRHvcwBwqP/t6wf
- TLSH T10FF1E57AFBC008F3CA5B46703C077B178B66A621532561A38B6316CA79C26F3ED25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 761dcdf12f41d119f49dbdca9bcab3928bbdfd8edd67e314d54689811f9d3e2f
- MD5 2b54369538b0fb45e1bb9f49f71ce2db
- SHA1 c20df42fda5854329e23826ba8f2015f506f7b92
- SHA512 25e4898e3c082632dfd493756c4cc017decbef43ffa0b68f36d037841a33f2a1721f30314a85597ac30c7ecc99b7257ea43f3a903744179578a9c65fcf57a8b7
- SSDEEP 192:ibEOXfXZQ6i1AZ2q6grklcm/iaULQAos:ib/41AZN6uklckLUJo
- TLSH T106222D4563E141F3D095813C086B3B7A47FE7A2865644ED3CF6328829F29DEAAD77312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 2f5cb1445f30c164aa553484ac45aba2111a49fd80784b75dfeec7e0110ec309
- MD5 399ccf738bc1af3b47220695a4893698
- SHA1 b70b37f5f3504f10a4d2a918b3ce3cae29828e91
- SHA512 a71ad49050747790f16d32bc08708fd08cb82816968fc56f0c3c134eb8219cbc2beca075d543f62fddb2a6f2c8a2065fe20ba6ec16c150eb69c0dcc5a97ba3ac
- TLSH T16981717793E00AF7E0884B3B00D71CD713B2C8745395411F89671ECA24B5A6BEE6EB06
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 79914940cbbf70a385f13a9970a9d577d7a7e07d240fe44563b45a472cd4bc3f
- MD5 c6284e23cd7e4d11db8298deb4541083
- SHA1 e338686c7579620383ab8cc5a51bbb8d846f60cf
- SHA512 72103e470d770fb402a18e975ff339526a3e4c9aeb8fac1b0977995a6eace0eca965b1915404df9b5a25b59628db1b199d2b9b10372841309c137054356a5cd7
- SSDEEP 96:q0HzOxnC1hncrcpRciM8wcxMkDOW6LbUXv8X2PXv5bcndYosRn:qJxw3pmiMRxNE/8c5bcdo
- TLSH T13A121BA35A5001B3D5922239316E2A3FD77CA325D0532D03C2779F466AB53597E3E385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target AACDecoder.dll
- Size 272KB
- SHA256 68076b56b36fdd5670507b008469eac704d1758f76935c61eba3af98b404e210
- MD5 cbe124335264e8b89c36fac3627f7f92
- SHA1 197dea050a28cf3d97b52d99b8241020010c0a15
- SHA512 4ecb84e7c49af53b2caa0b9848b0bd46adc4e4dceb1c1d060c431ed093696ba02420bf69bcf622fd60c20c7c4d86273bd49b4c96a777fecab5e854715ef76a25
- SSDEEP 6144:Qph364nt9EhhumF0Q0D3fu4KJfOMBfcBG:Qz362tenFA7K9Oy8G
- TLSH T1BD44AE02A2829172F0473B72C49BEF36C536CE60452B8A47B7E4FD5FACE1B41652774A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target AmrDll.dll
- Size 164KB
- SHA256 f04b4b508f38c02ae19949abee62684510a0b1fea6b400c2b0a7d6c83270ce34
- MD5 a2cc8a53e8cf1e426afe6ec1043163f0
- SHA1 916b7e72abe0011c45fa1938a6e956abf6121f54
- SHA512 5c807da29a0787315d4468db756707e39f04bcf3bb60fe16bbfedda364e82b225e5efacf5074be6a72f0265ccd9402e42ee64b99f24f622f675efb9dcb31d4e8
- SSDEEP 3072:nZtfXReZDLA0wyWB7LeITbCvUDRbURbrRbAARbzcoNL1:nZtZ8LsyEL0vUDR4R/RDRt1
- TLSH T183F39E0360764272DAB0933994937E335A3AD47B2711461293F0ED756E39A23DAE73CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CMCenter.dll
- Size 348KB
- SHA256 3bee75812d202dd33f0e4ef81b02f18b9e42b13526513e537e898bbc3a5df9dd
- MD5 11fa4f2dbe7b7061ec29f86406353bc7
- SHA1 84b0d540aaa0c67589dc8408fa5d1f2af91581a4
- SHA512 ac364a545337f5a01400526938264dbd6c8216647594ed12deb8307015171b5a9a244d57f0a2baba85fa6a2368c045f53785faf199acb847b964244f5bb3d394
- SSDEEP 6144:FPul13Otl/zeAT6WKbxqcll6sNCNeWMPlEwWeT6eyS6wv2tTBIGoQ75qqDLuRI2:FPun3Otl/zeAT6WKbxqcll6sNCgWMPlD
- TLSH T1CB747D01A9C244F6C98506795CBFAB3A65785BC51B8297CB878CFE851F321C35A322DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CMDvsComm.dll
- Size 600KB
- SHA256 d8e546d2636506db219287f4471b24baaad3ed0b74e7fb8557c99170a579b7eb
- MD5 7bb18b8181252e21de95a98a9ca03524
- SHA1 e90451501ff21d046179e1febb01791fbdd64767
- SHA512 19f6fdb82b8134356418125cc0558b4763ecf3aa57c965464e796043c3e59d2b285fe51218ecf386e6c5df34bda4cec6a6d99ca30fbcaa0bf9483aa90ef9b56e
- SSDEEP 12288:MKXFJqJ5W6Q73gwQiCx39XdFRkVksOMWlhQD/jeOtTOTqqnu/c0:MKXF65WdSx8VzAlhQD/jptTZ+u/c0
- TLSH T18BD45C43D5D680F6DADC19741A3EBF386E7902E64716ABD7BF1EFD4486108C2683B04A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CMLanDevMgr.exe
- Size 292KB
- SHA256 58af280ff2f4d202e51941568ef3bb558d364064c3d0b2d8f8117044bd1b5f29
- MD5 e31388e1ba9865154c8eefd555c665ff
- SHA1 8bd3846fd0a70a9af3111acb5986998c4c0b5c39
- SHA512 c9a9e5e6573a664d3f38d65f9a324466215570b9b6e23febbe6c4f1b0abe929c5f734f956919efc60048c37ecfedadcf5374480885c44b87df173dd3256c776e
- SSDEEP 3072:D17pBqjRIDIZEZMQSkHhHLmIEcguC7jj0DD1ZKTWhm0UzvtqXQDM:R7pZSEZlHB+7jjatQAQ
- TLSH T147546B0AEAC609F6DB0115740CFFAB763135AA854F035FF3E329EE9859172D1922329D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CMPlayAV.dll
- Size 112KB
- SHA256 a3525dd6b9ed3ff84f10e55dcf21ae2c595817333cf71a300ae03d916c855d89
- MD5 caabc414dc0a0b8ce2576786e58eb50e
- SHA1 e86c2eaaf341869eeef3e5b78cac028ac5ec42d9
- SHA512 e1db254b576ab13727a93102b9531a8c47858ca921cf20f7ced8ba6ecb84190cbb298d3fb92c4d02039f964cf4267ad64a9e261d8d4ac8edab30ec347d5072e7
- SSDEEP 1536:MGmWzyCodOKHMI0wfgQSI9IyMyi2uUduaffmSEppp6EMDrHw:MJWVodDHMI0MgQ62L+SEppp61DD
- TLSH T1DEB33A05BDD608F1E28A563C9D7BB732627E5AD88B678FC39338FDA009212D194761C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CMPlayBack.exe
- Size 304KB
- SHA256 bfbc2ca39d6a9eb5f23ed03358872e1e34c46629a237ea108d5c837f4af1e840
- MD5 d4b6d3758748daaae99ba14ce0655129
- SHA1 270fcde322e58ce138d611b1a0ab5c164f117fb9
- SHA512 10b2fe1528acf497bc633c002bd761835560e7e376c5aec8ba825246c0e22ef8cb9e91b8208fce1563ed3de0bab9faba0b824e12e897d13f82f6a27d70d4aebb
- SSDEEP 3072:9FpbxPfGWLgcFqC2vOT07SrC2ZZ58KJplO5NwQsqXQDp:rpbxPccF1X/58H5W6Q
- TLSH T1CE646C09BAD109F6DB0951B40CFFAB753636AED50B139BC3D328FE492A162C195322DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CM_Billing_Clt.dll
- Size 92KB
- SHA256 8bb345852e7145d7d3bb6f11d5ad6c0ac4bb0a76e3fedfdb08a7e20b80320b7a
- MD5 1b956d72060c12d4e0ae537cecede813
- SHA1 87497422e90b8d9564d1d4b500eaf47fef563399
- SHA512 86b6deb1400851b87730480d6abfeee0a301f8ba555f16dfe28a8f89a2e222f37ffa967e383f675c71e582a490f8e42a77c608d1f1f487dc48097350e1464950
- SSDEEP 1536:ytkqGRYzbzy+R95ASg30AQr1MZYmLxsfE+6lr9hE0euMkL4DWj2:QkEbzy+R95XpAAKCqiKzZz6
- TLSH T1E6932905FDE548B5D2884338ADBBE7313A7E5AD86B538FC3831DFE1409361D0867229A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CM_Billing_UI.dll
- Size 296KB
- SHA256 5cf265cc49a1ea1f3c797304da230a8ea2c4477508203f58d67f7e5d4a4cdaaa
- MD5 e5b557a398b6d29326097b90c82d7f33
- SHA1 e2d7816e0c248178891893944d14cf9f230480b6
- SHA512 d4328e7618aebc996328ece38cbcdc1d8bdb55cf90a9ff6389fb476df6c6e36d575b3bce38d8f18dfa90f842bd2fc95ca340d654a602bb6e2aa0398c11c00fa5
- SSDEEP 6144:3JFqJWcx2exDb+16vQ+/IGYKtUb0CICkE6n:3JFqJWMpb+gvyGYKtUb0CICh6
- TLSH T11D542808EDE10EBEC58653399CBB5B7625B85EC10B06C793F71CFD5988321C6976A388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10