9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6 | Triage™

Login
Reports

Overview

overview

6

Static

static

5

jaffacakes...f6.exe

windows10-2004-x64

3

jaffacakes...f6.exe

windows11-ltsc_2024-x64

3

$COMMONFIL...og.dll

windows10-2004-x64

4

$COMMONFIL...og.dll

windows11-ltsc_2024-x64

4

$COMMONFIL...n7.dll

windows10-2004-x64

3

$COMMONFIL...n7.dll

windows11-ltsc_2024-x64

3

$COMMONFIL...st.exe

windows10-2004-x64

3

$COMMONFIL...st.exe

windows11-ltsc_2024-x64

3

$COMMONFIL...m.html

windows10-2004-x64

3

$COMMONFIL...m.html

windows11-ltsc_2024-x64

3

$COMMONFIL...xt.dll

windows10-2004-x64

3

$COMMONFIL...xt.dll

windows11-ltsc_2024-x64

3

$COMMONFIL...an.dll

windows10-2004-x64

3

$COMMONFIL...an.dll

windows11-ltsc_2024-x64

3

$COMMONFIL...fe.dll

windows10-2004-x64

6

$COMMONFIL...fe.dll

windows11-ltsc_2024-x64

6

$COMMONFIL...an.dll

windows10-2004-x64

3

$COMMONFIL...an.dll

windows11-ltsc_2024-x64

3

$COMMONFIL...fe.dll

windows10-2004-x64

3

$COMMONFIL...fe.dll

windows11-ltsc_2024-x64

3

$COMMONFIL...fa.exe

windows10-2004-x64

4

$COMMONFIL...fa.exe

windows11-ltsc_2024-x64

4

$COMMONFIL...rl.dll

windows10-2004-x64

3

$COMMONFIL...rl.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/OnTop.dll

windows10-2004-x64

3

$PLUGINSDIR/OnTop.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6.bin
Size 3.6MB
Sample260930-mf4gjaxt4n
SHA256 9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6
MD5 e111e24dc18e55a169cd37257cdeda39
SHA1 529879c5ad4ace969dbf65f5c533f9b73380992d
SHA512 3bd05675e7447265c3ddb29ae9ef723e0b366fd0b8a577900d7cb2338691460989aeac934d26a7a8ca608dea90be95969e8d9c9151f408cd6748b2d8bd1ed7a0
SSDEEP 98304:dPPOb/H/qxF18bClQ2gvfYd1ChcpI6FTQ5vAeZhK3hLhX:hOb/H/qxF1sL3Yd5q5vAqK1
TLSH
T11E0633219592C988C842FD37C426E6B7EB1A3F48CD89154B1E3E3DB97E3CC05D4A6B58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

adware discovery installer spyware stealer upx

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

jaffacakes118_9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

$COMMONFILES/Angels/AgLog.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$COMMONFILES/Angels/AgLog.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$COMMONFILES/Angels/Agwin7.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

$COMMONFILES/Angels/Agwin7.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

$COMMONFILES/Angels/AngelAsst.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

$COMMONFILES/Angels/AngelAsst.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

$COMMONFILES/Angels/IEHelp.htm.html

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral10

Sample

$COMMONFILES/Angels/IEHelp.htm.html

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral11

Sample

$COMMONFILES/Angels/IEMenuExt.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral12

Sample

$COMMONFILES/Angels/IEMenuExt.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral13

Sample

$COMMONFILES/Angels/IEScan.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

$COMMONFILES/Angels/IEScan.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

$COMMONFILES/Angels/IEsafe.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware stealer

Behavioral task

behavioral16

Sample

$COMMONFILES/Angels/IEsafe.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

adware discovery spyware stealer

Behavioral task

behavioral17

Sample

$COMMONFILES/Angels/Scan.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$COMMONFILES/Angels/Scan.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

$COMMONFILES/Angels/WebSafe.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

$COMMONFILES/Angels/WebSafe.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

$COMMONFILES/Angels/go114fa.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral22

Sample

$COMMONFILES/Angels/go114fa.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

$COMMONFILES/Angels/xFoCtrl.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

$COMMONFILES/Angels/xFoCtrl.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

$PLUGINSDIR/FindProcDLL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

$PLUGINSDIR/FindProcDLL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

$PLUGINSDIR/KillProcDLL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

$PLUGINSDIR/KillProcDLL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

$PLUGINSDIR/OnTop.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

$PLUGINSDIR/OnTop.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  jaffacakes118_9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6.bin
- Size 3.6MB
- SHA256 9612c4eca666a273d63ad7504a2547b6211835c70d979a1753a171f32c9427f6
- MD5 e111e24dc18e55a169cd37257cdeda39
- SHA1 529879c5ad4ace969dbf65f5c533f9b73380992d
- SHA512 3bd05675e7447265c3ddb29ae9ef723e0b366fd0b8a577900d7cb2338691460989aeac934d26a7a8ca608dea90be95969e8d9c9151f408cd6748b2d8bd1ed7a0
- SSDEEP 98304:dPPOb/H/qxF18bClQ2gvfYd1ChcpI6FTQ5vAeZhK3hLhX:hOb/H/qxF1sL3Yd5q5vAqK1
- TLSH
  T11E0633219592C988C842FD37C426E6B7EB1A3F48CD89154B1E3E3DB97E3CC05D4A6B58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $COMMONFILES/Angels/AgLog.dll.tmp
- Size 298KB
- SHA256 5b432e3255dc73277356571855cb782d3a376c9d2a77eec940092853b68319fb
- MD5 eac8960e017bd934b2009f6db2faf03c
- SHA1 709263b55e8002c9acde39ff48eb9b43486d5ec6
- SHA512 2c27493d946f3696c200b3c8db9bb698a6d8e2dcc8ad94304ca7c34b5d4fd40c735214691dcd294923515831da818a482d4821d0e0b92d162b8734ba07c9e6e5
- SSDEEP 6144:BCv6QXUtiBav//wX4Yz0jfTc3B3QvZusUhm:IPi/wX4YzYfTchQhu0
- TLSH
  T158546C1176C1C476D6AA25394116C77626FABC305BA0C2C7FBD03A7D6F322C29E3935A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  $COMMONFILES/Angels/Agwin7.dll.tmp
- Size 60KB
- SHA256 07a15218c0862b9406e3a1002c0dfedac2fbad69578add537d5ef23961d36d9b
- MD5 71c71a81864920b3c993500370bd24cd
- SHA1 1afdb9e97970741728788c3aa4da83de0c1893ec
- SHA512 f4737c417e9370144409bc762f2a9067ec23c08359835f3c1191af5449c2f9ba72656cef4003309ad5f3a2b1878f3cadc34ef801414122b7b50ba66a2ce3e960
- SSDEEP 768:kpdcLGMKEfsu1nWmmR2LEY2t7bXrvSZYA8YKU1r15sD+ewMLEUbGq:knLMWTR24Y2tHXrv0hLrK+eF4QGq
- TLSH
  T116538D527A50C032D5561934546AC2E25E7E7D322BE4C487BFA603694FA13E2B37E34F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $COMMONFILES/Angels/AngelAsst.exe.tmp
- Size 121KB
- SHA256 57d2ed4d5ffce987eba4321a055f6c2f74f94a09ec13053205462f205df33fe0
- MD5 fcddb14984babda702a989a4182724d2
- SHA1 8220a6486fa2d5b3fdb5e936d372c4f13438f015
- SHA512 5f813e63e717df87c7f516e7b4e7b2daf3550d36f0d5347dd82e25f174eef5f0a3c615abdb3619f55f562d270c92af934acc06b50218dae892f7d531f7f390a5
- SSDEEP 3072:GHrcfb6juHeNxHlbuL9hKNIVu2f+FZKPSxE:GHrcfb6juHmlSL9hLVu2cZJE
- TLSH
  T16BC39D117AC0C5B2E85215350D69CB954A7AFE710F6986C777683BAE4E703C24B3B38B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $COMMONFILES/Angels/IEHelp.htm.tmp
- Size 932B
- SHA256 609471ce7403a914ef23d91082242c876e1b2ffcfcc6a70ab1309f45b387d1d4
- MD5 4e72a0d4ecf37f91b9fc9fd2e27a6661
- SHA1 c3e9117731947e1a3e2f9aaea9356cedf5fe53da
- SHA512 ffc517b819c9e995f0aadef0583b099b16bff262315a9f27ba1c6306d0e0fde30c32ecaac19fdaf9584f182b64677699b42d40606f4038637485b2b5601d79bb
- TLSH
  T15D112015341588F811D9125C6738C58CFD77807321E6B4F1B98CCC9D97B1E98A5E49E8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $COMMONFILES/Angels/IEMenuExt.dll.tmp
- Size 194KB
- SHA256 ae47cd1154ceafc74bb4b8b11f5425bd12f2ac5eb3f3ecd7153837cd1b0761f7
- MD5 4c6f8c20b9a649e42b07f33bcce32290
- SHA1 c5a59524d924aa66c321479cc1dd0486cb669f61
- SHA512 59d0c341a4beff3dc2b53d3493e2a4642b6c91a426aca0a5510f8ddff732aebc22882535841cf96295acb630b6b73609031df1b697308f360d6798e865fdcd3f
- SSDEEP 3072:tHWSddWrkqTQslbv7mfpAQx0F9OS8jouaTX5CEoHgr5Aa9+4UtEBi41kRw:ZW4r87y0POJvakEoHk5AaCfi
- TLSH
  T150148C023781C477D64F12394466DB751A7AFD340BA196C7BF98AF7E4E302C29E3528A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  $COMMONFILES/Angels/IEScan.dll.tmp
- Size 60KB
- SHA256 589c537d60dfb98c6fbb1d5a26c2ffed48ed3b6ce083e2fc0ff9f4d45f6cbed3
- MD5 bc790cfb3e358b55b841410ae2fd7fa1
- SHA1 2cc3e8d98279a5e730bce9b77b18d19d069c90ee
- SHA512 97de33fe680f8289fd3b2d761db345198278194853aa40e4c7fa58cd549ff3c55cb2178e0001d0fef74fd385c366a7b2cbb17c0622d955681b564bc5cfe87ee7
- SSDEEP 768:8Q0Uz/q4DHd5IytXGU1ZclADgN87Hra48fd+R0iyQpH/xL53+SeeKWr392LEUbG8:B0f4D9yYJlDgMgfdtyt/P+Cj924QG8
- TLSH
  T185536B01B3908077C9560F783568D3614E3EB9112EF550CA7FA94A6E5F637E0AB3835E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $COMMONFILES/Angels/IEsafe.dll.tmp
- Size 1.0MB
- SHA256 5d112bb59e28f4e2c2caf5d66b76cd625f04e79d87e69610e835653bf4f7574c
- MD5 e17b2e98ece6437d1c4706bec74f4123
- SHA1 12e35f617552c6f46f28a591d243921760d2553d
- SHA512 1b666d0a02d5f0647362fcffa46af47a41583406129a7aaf903e395563f9a07be238d3277ad0c841473c5ca0cc56d0a1c5ae2c1033518125b0207f594c691a82
- SSDEEP 12288:IfpD/QT3YycROwCH7JrNxfhcfVuOfkY0Kqpx/25tbyoVmmjyHe4TBu1pJLR3j3LT:6sPrm++ou1p/j3LTD9JBp
- TLSH
  T1E5359E12B284C4BAC9ED21348D17DA76227A7D210F39D7CB6B98FB4D5E313C8593D292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware discovery spyware stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral15 behavioral16
- Target
  $COMMONFILES/Angels/Scan.dll.tmp
- Size 1.2MB
- SHA256 54e849e119904f52cfca5362290daa094544a569c13c9f5edf4806a5e0f611a2
- MD5 6891d3d4e9fefe584e758db70c0380ae
- SHA1 f79f700870f2ea2e37be7bb5569c5a035ffefe81
- SHA512 b0e908d2067fdc579904c73d13b14d96e22dab546961a65dff867bd0e41acb3483e974acce887fb7586ddc42f33ee28f22369327b90c9a3c9e9c120b40d22e12
- SSDEEP 24576:TgcIwdCFEXGwz6Ff78H8KZ7SI7ErlB6azPTkkkkkkkkkkkkkkUkkkkkkkkkkkkk6:TgcIwi5nQ24EreytZ2ce
- TLSH
  T121458DE2F9438036E69B3177C2BB1F3DBA395D114B065CC363C82E9D59721E2B63518A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $COMMONFILES/Angels/WebSafe.dll.tmp
- Size 411KB
- SHA256 d2080eebe7cda869349c0ac21e8503b24993bf764accdca10fadf4b1251bf65a
- MD5 7ed89085881366038fa967cab289337a
- SHA1 a12864a8bf292f9a24b392c1612ab108104bcae3
- SHA512 4440056d682ea2ce7d25bc1517a4e8f83381f7d6db5ec4da841b98eb45cb0eac21b0905db62215f80a75dd14b14b6dc46fd18f5c447c68f9166af4aa60e982fc
- SSDEEP 3072:Go/IOSN2Qv32fQNA6rPEvDKke+Eq+g4+AwCWC:9/IOSNPfNjrPeb0pg4eC
- TLSH
  T1A5949335D505CA18CB062E79BC6AABB20637CF4A176C51DF8F5E3B236573BA21D6C009
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $COMMONFILES/Angels/go114fa.exe.tmp
- Size 26KB
- SHA256 5b1a692e365eaa612e11e4f7161b2e2223b3f8171a18516368d646c16bd53e2c
- MD5 be4cb0b0f6b6b2392e4df25ac7a1ab60
- SHA1 445d5b3ad9d14231caa5db1b2d899f37430a63c1
- SHA512 fce748853a7f2e524f60c03b6587349c09211648978a9470c9980976b8830d0689a2876f60a6358f5dd8c5d886325b75ace982679ecaf6f9863a96d5d1a00646
- SSDEEP 768:JicxqkQ0OJQSf5Q4bDb87SSFAuJJ2m81LLEUbGNl:wcxqkQOYDb87ZFAuJJ2z4QGNl
- TLSH
  T192C27C83A7516872E444DE7C85AAD27DDB7BBB772D4800A187B8ACCD6C4A3613A1814F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral21 behavioral22
- Target
  $COMMONFILES/Angels/xFoCtrl.dll.tmp
- Size 161KB
- SHA256 31ab42cfb448c45b4cafc5c9dd783705ee1f057bdf9b0478ccc94f87fd644427
- MD5 c1d9762180741f397b5d71147e4e4141
- SHA1 503007d02c1e77697012f0046bd5164b488752d0
- SHA512 cdd427390bea5e5e9cdc7febcb026477b2445db25e3c038e1a5c7f5f74338fdec62acc387382cd7582a4407d375f4029cc8b15930167313f45c1524f129fa5b4
- SSDEEP 3072:h8nvO1B0Rn+rXBllu2jMLaj6ocVkTpS+lsOJx1N:Gnv9Rn+/faPbeIjsN
- TLSH
  T10DF34C01B7F2C073C1DA013D4915BBA9E3ABBEA98DE049431F743B6E7E34A44DA1991D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  $PLUGINSDIR/FindProcDLL.dll
- Size 31KB
- SHA256 a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294
- MD5 83cd62eab980e3d64c131799608c8371
- SHA1 5b57a6842a154997e31fab573c5754b358f5dd1c
- SHA512 91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9
- SSDEEP 384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy
- TLSH
  T140E25A2128D144F7C68F4134A4E44F178A7E69752AE614D3DF65A9CA2E229F2F23B307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  $PLUGINSDIR/KillProcDLL.dll
- Size 32KB
- SHA256 ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
- MD5 83142eac84475f4ca889c73f10d9c179
- SHA1 dbe43c0de8ef881466bd74861b2e5b17598b5ce8
- SHA512 1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
- SSDEEP 384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
- TLSH
  T126E26B21789406F3E69D553275D56F27562F6A5116F18883CF3399EA2C322F8B83B307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  $PLUGINSDIR/OnTop.dll
- Size 3KB
- SHA256 28cf47c05c86b2264ea1da120d3644cb46c86d6f27072a9a853e63e05ec97a25
- MD5 7c0c240e911a521e8e554a10d04e558f
- SHA1 d12ca9c464f2764e211039c09e56cb347626f7c7
- SHA512 579b6787061efdc7f618f3c5a513cb539ccbe12ca41ba5e9ba8f00d03600edcdd82262b0fbfd58b96231c461f18b1233d657cbd0d1b827ea9df5374508578707
- TLSH
  T1F4511427EB7126F2D025877309D72092B46B565067B6801AC9924708251F31BED75E13
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- MD5 00a0194c20ee912257df53bfe258ee4a
- SHA1 d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA512 3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH
  T113325B5993A0C1F3D5A0823C0DA73A7B1379722016B14FA3CFA35841AE196D7AC7D237
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

adwarediscoveryspyware

behavioral12

adwarediscoveryspyware

behavioral13

behavioral14

behavioral15

adwarediscoveryspywarestealer

behavioral16

adwarediscoveryspywarestealer

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy