Overview
overview
5Static
static
3Appeon.Pow...12.dll
windows10-2004-x64
1Appeon.Pow...12.dll
windows11-ltsc_2024-x64
1Appeon.Pow...op.dll
windows10-2004-x64
1Appeon.Pow...op.dll
windows11-ltsc_2024-x64
1AtlAuxiliary.dll
windows10-2004-x64
3AtlAuxiliary.dll
windows11-ltsc_2024-x64
3EA_stratee...m1.xls
windows10-2004-x64
1EA_stratee...m1.xls
windows11-ltsc_2024-x64
1Ijwhost.dll
windows10-2004-x64
3Ijwhost.dll
windows11-ltsc_2024-x64
3Koguste_im...l.xlsx
windows10-2004-x64
1Koguste_im...l.xlsx
windows11-ltsc_2024-x64
1Kuuaruanne...m1.xls
windows10-2004-x64
1Kuuaruanne...m1.xls
windows11-ltsc_2024-x64
1Kuuaruanne...m1.xls
windows10-2004-x64
1Kuuaruanne...m1.xls
windows11-ltsc_2024-x64
1Kuuaruanne_vorm1.xls
windows10-2004-x64
1Kuuaruanne_vorm1.xls
windows11-ltsc_2024-x64
1PBDOM.dll
windows10-2004-x64
3PBDOM.dll
windows11-ltsc_2024-x64
3System.IO....ng.dll
windows10-2004-x64
3System.IO....ng.dll
windows11-ltsc_2024-x64
3atl100.dll
windows10-2004-x64
3atl100.dll
windows11-ltsc_2024-x64
3concrt140.dll
windows10-2004-x64
3concrt140.dll
windows11-ltsc_2024-x64
3convert_amp_c.vbs
windows10-2004-x64
5convert_amp_c.vbs
windows11-ltsc_2024-x64
5convert_le..._c.vbs
windows10-2004-x64
5convert_le..._c.vbs
windows11-ltsc_2024-x64
5convert_ma..._c.vbs
windows10-2004-x64
5convert_ma..._c.vbs
windows11-ltsc_2024-x64
5General
- Target pmenexe.zip
- Size 43.5MB
- Sample261002-26c5laxxft
- SHA256 c9e2bf39d470664cf7631a6ad75f688903bbe92eff5cff50b4ee631c0f406b7f
- MD5 9bf45dccf5f9b7c4a924547bb2c02cbb
- SHA1 574aaa1e0c578d35d226ed816b82e9dbc10c9c85
- SHA512 6ee051264584db33e7b0cd0fc5741097960738b5244dd5293a5ae40a8f6d2eac7bf6e9eba8435fc3879092c0a9a327cf84a163661c1813bddebdd7c06e228436
- SSDEEP 786432:3lEoE29yxNF0hFQldYWAt6lY03T4EbrlLjIT4VSJps4bTa/qrdFl8fUaeEaHK:ZE2AN4adDi03T4cIT4VSDs82SxFlkUaZ
- TLSH T1ACA733BDD5314C4BEE0BA075A0CED77592DA8A8D1C127D895B810356398E3C4AB39FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Appeon.PowerBuilder.DataWindow.Excel12.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Appeon.PowerBuilder.DataWindow.Excel12.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Appeon.PowerBuilder.NETInterop.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Appeon.PowerBuilder.NETInterop.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
AtlAuxiliary.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
AtlAuxiliary.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
EA_strateegia_vorm1.xls
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
EA_strateegia_vorm1.xls
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Ijwhost.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Ijwhost.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Koguste_impordi_fail.xlsx
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Koguste_impordi_fail.xlsx
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Kuuaruanne_2011_vorm1.xls
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Kuuaruanne_2011_vorm1.xls
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
Kuuaruanne_2012_vorm1.xls
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
Kuuaruanne_2012_vorm1.xls
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
Kuuaruanne_vorm1.xls
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
Kuuaruanne_vorm1.xls
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
PBDOM.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
PBDOM.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
System.IO.Packaging.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
System.IO.Packaging.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
atl100.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
atl100.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
concrt140.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
concrt140.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
convert_amp_c.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
convert_amp_c.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
convert_leping_tun_c.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
convert_leping_tun_c.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
convert_maksuvaba_c.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
convert_maksuvaba_c.vbs
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Appeon.PowerBuilder.DataWindow.Excel12.dll
- Size 46KB
- SHA256 c42f8bd46ab27d8620970b78e64ac26ae92f63bf98cce3dbd7eb89b1315b5c1d
- MD5 d7f464a719382d2ac44d547d88221479
- SHA1 294bbba3c8b44ec72bb30245ac681158e7af79c6
- SHA512 30a08e633986e290a21e69ed644ecfaefb2f0576a2ef5eb84422d7fd9f57f3abb5d4bb7ab41ea4273d72870229ab559146f778ef3d17f92d090c9f72ddf0b918
- SSDEEP 768:qiBn9NxJtUmomM74k3h9QYUw+VJ8OTVWIyhHxgckVVdnGn+TzPDbcYiTrA+hLnk:qCn9NxJJM74EMQiIFxNiVhLzPHc70
- TLSH T1DA236C0E77F88722DABF467474F1843916F0F4953612CBDAACC6A0DA56167C80A2C77B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Appeon.PowerBuilder.NETInterop.dll
- Size 50KB
- SHA256 e5ba8a59a64ef463ab241a6950b61a3b597c782a8eefe5abf57db05dc7a3a483
- MD5 2b9759912fac611124f5c43f6927ba94
- SHA1 60663b8caed90c38da8e00bc33e560c5939c4546
- SHA512 c9fc855c6a4aa2563ba2a4214c6984d4d43781e6ffb0abeba9aedf5cd18ae04b9fdad1476304b8f45849a73c135f461fed2dca723682f1505deb40ae91b0b772
- SSDEEP 768:mNJyzJiiw/0OpDz3hIfyrGVW01dew2jvMjhhLlW9DjyXDmy8RdqhIRaqyz7uYiRS:mLyzzw8ORz3hrG401sGhhhnu7RS
- TLSH T185337E1627E4412BCA7F5BF094F143285776A26730E1DFC41CC9A8E99A843826F64A7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target AtlAuxiliary.dll
- Size 26KB
- SHA256 0614e1aad70497b42a2837940f0432b6bc6be5728e816af9c470ce430c7e6918
- MD5 08b2ccb3d072ee0b5d0268dce9b05a84
- SHA1 d62f9c0b76f33c13959f86198f0630ebd801a4f1
- SHA512 f215bd2f5f5285221e8046efb95a4882a896a476682dd72dfddc9c1b738b3c425ed27260f82e7de1ca28b62260cb3cbdbd4e0db7b2b8e52c361bedc083036f35
- SSDEEP 384:Jc3sXRGck4AaTD+mnKEtF2uerx+okx5jIYiqrA+gmL4nNynz:zhGck5ODxpSroodYiqrA+hLB
- TLSH T1B6C23A53F6C0C9A2D90E02302CEB8BA75AB5BD402F9493973388B35D4F71385BE591B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target EA_strateegia_vorm1.xls
- Size 192KB
- SHA256 2bfaabd51bfa097e5cbce15f316b7ae86cd3a05b15c1aef9831cb40517d51e29
- MD5 b8f80cc923e0d72efdda3cfad4bca2f3
- SHA1 8a72b76e29883284c18ee25a277b48fe825ef557
- SHA512 5fbff9bbad003d6b14a74e2c0347f0c837a5baf71f22dd402521016daadbd46728fb9bb52c02c10e31c0822cec22e2149a37caedfccbc6df7b7fae517b7b37ed
- SSDEEP 3072:SjWKUrO93Z+RwPONXoRjDhIcp0fDlaGGx+cL/WE+pwT+q9RVaEmgT89jaKAGI7B4:8Z+RwPONXoRjDhIcp0fDlavx+W/WEGV/
- TLSH T126146363E529CE19C51EC33D18B78F252B31ED086B63AB0B23C8B92D7DE18516F461D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Ijwhost.dll
- Size 106KB
- SHA256 7a42d377db09e6d606132ad564436579c6806549c6f87ab65dac07c9f4f6cbd4
- MD5 7895c6746753b83e9913b9e83fc04a7b
- SHA1 c353480f694f0c06664cbc38674bee58c1fa3f51
- SHA512 620b36481ece62b2712ac44adbcf3c9026cf2bf44f84fc51c37b462540f57a584ad4f8f6654d9aefcc142860e6a4a214329348a9d8b725bfad087a476995f064
- SSDEEP 3072:NAzD7Bfywe1Xs/7lWou9EYsEPR633NUuk1PRcre:yz/k/97d6398b
- TLSH T1C4B32A21B9A6D032D6DE0FB48925DEA69F7E6CA1CFF060CB73901DDA08216C19F35716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Koguste_impordi_fail.xlsx
- Size 7KB
- SHA256 cf8f0b3249929b8bd0337fbc750415d83cdff31688fe3b75b866c5f50d674870
- MD5 c404b128f27b4c64acd36562a7744aa5
- SHA1 c80f1b03ed4e3cdd8934ab23ce9e0f80f85412dc
- SHA512 1c1fc9476ff9259a340f9e4d8519907379581dfae0081d90b5d910544f3a584dca0b79ca7533c279d7d56c1cf2d1d6e6207f40d21de998fb731122d6838de586
- SSDEEP 96:lYAgwkW0YWuQToXkPitFEB7wHSn862Z3KA5TI6UufJh2j0qFayQtfYxRgZtAU2:TghuQToXgUFEBPJ2Z3KmjMZmYc/2
- TLSH T104F13B2A8780BC56C1F7047EC21860ABD60C15E91B81EA8E7500F26DA7557E307AF9FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Kuuaruanne_2011_vorm1.xls
- Size 82KB
- SHA256 9adf9f3c9e9afe9a27747c2ff6a2ace575a77d6e47c69c1a45f98c8f45322f07
- MD5 ae44b31154e969db1cced1dcffa37bfe
- SHA1 8541dbe085fc0f462c83f2c7fd79d0d61c0f6284
- SHA512 c96af4c79c1428f6ccb40b7de4d0cf3d818dbcc062d987ae7e331b0c82f601ee9f85edb621b924ec18f22c075b1cab80fc16d86f978c3a1b1fd255f2ed8df306
- SSDEEP 768:Co+J5S+1iXiEh+rmYJx5B9US6io2O3mtRhEtE67osSSFyoeZ/19cBztg6qV+e5K:7+DMiAcmYJxHO3iETosdHeh0ztg6qV+r
- TLSH T1E88363E2AB578EA0C674C33508738720DB30DD106A638B0776D67465AEF2DB27BD11AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Kuuaruanne_2012_vorm1.xls
- Size 58KB
- SHA256 e619a8de3d264795aff12121c8a9416ac67b52287960c21780ee279f7f7856f6
- MD5 aca9572759cda516746f482775f86225
- SHA1 8131b2bbc853d4951c947cbb1e5ef7a73aea95e0
- SHA512 564a4583df9f847d459f5057cb7a8a3e6cc586d96e48c39703fa10ac6c42ca6f63dc8e842fb91b71b11b5f30d92276b92acf85591cfac247b015db83644cb87b
- SSDEEP 1536:Ye+TEP+14ntyvp5fyu7COfF7u8G53Mh7gWcahJkupZtf6HGka7MiWRm:H+TEP+14ntyvp5fyu7COfF7u8G53Mh7d
- TLSH T13F4310E2DFD78D51CB2B83758AB7D728BB31AC055622030771C4B6267EF09B4BD06296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Kuuaruanne_vorm1.xls
- Size 82KB
- SHA256 587044f6c41709f57bcb148f43b99fcd3d764ebcfebfb45c1f0d1193ba6a9ce3
- MD5 e49dbdca94e7545e401ae851a78bb38e
- SHA1 c73ab4c3ad31fe5e0cbe0c17da9c12ea5c731d0e
- SHA512 2e7c23cb1ced0bd4bc42f81edf3c277af3cfcf1ca385dd2b082fa984162877b8e03ea15655d4e5598644afa004a17ac6671576aa26fe46137779ed6b1bab0a8c
- SSDEEP 768:Co+J5S+1iXiEh+rmYJx5B9US6io2O3mtRhEtE67osSSFyoeZ/19cBztg6qV+e5s:7+DMiAcmYJxHO3iETosdHeh0ztg6qV+R
- TLSH T1D08363E2AB578EA0C674C33508738720DB30DD106A638B0776D67465AEF2DB27BD11AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target PBDOM.pbx
- Size 1.4MB
- SHA256 290529e6c5ec1d32233742c0711aafca0b9fb901e34cc50c64d1fb5a61646e24
- MD5 cadfede35917b13525d2846bfbfdc875
- SHA1 3283980517597d484b07072f5ddd2344ebfc5622
- SHA512 f72c8fe8b319d2b02240baa54b7d24b84d2c87e2f321f6cb7a86b1940e8aa58556e45b75aa54dd8cb1ae5225c3b600805204dfe347053c48b5e3b1eea76f4b1d
- SSDEEP 24576:zyWei4R/+Yf0lKoFmLzS6FRqK7Osly5kzOIkI598DP5G0H8SvG:/Bw4KoFmLzS6FRqp8y5kzOIkIzQ5G0Hs
- TLSH T1716539117785C024E6A60671993DEAFA563EB5701B74C5DFB3D46B6F0A30AC0BA34B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target System.IO.Packaging.dll
- Size 298KB
- SHA256 b3c3da1e85f7c4d6d2f62ed704bb1a52f70e552c6e03d615e7f4c38e675c8ee0
- MD5 9eec4c57c41bf4ae2f29ba0b16b0b656
- SHA1 300a015b4409467a7d6b59505e978a714d408ea4
- SHA512 6680164ff363455f8063b409d43cd1783916364b457306938db7701088b9bf656ffca0c3d80c8c9bdd53a83d4c6f8f427e127815369467ef044853d58a966818
- SSDEEP 3072:rV0nvy//uAxhs09FjwAxzi//2WjF81NSEEqXMiZXFFA6PxUS98+U0pAHJlRC+ZWo:x0nvkhsCxwAx+//21SEEU19v9fe373
- TLSH T153544911B3EA411AEBBB2A7988B69931C6BEBA411339D7DF1450E0CD1D753E0CA31763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target atl100.dll
- Size 134KB
- SHA256 f54fe6535538174c139b1b0cb2ac0753b2e34412153a443482ccae53ffbc4dc6
- MD5 00d2c06a552f782c1f16acf77db765a5
- SHA1 640fd59ae52c7c381d7696ce66668aeaaa25b711
- SHA512 bbdfa6945d57c49a886442a7d1032e08656d4999e614d5a0be0d318832be94520601d2db9c0e3aff5e083d7a1392c72fb38ead2873520947e26993daed7ac795
- SSDEEP 3072:nHi2/YxBFZNAWH6Gk5BsyGfGM8EnwO95fF:BOFZKWaj5BstfbfDP
- TLSH T182D36C1172E8C132E4E221B4869CB672072DBDA1076195C766D92BEECDF43D09F38B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target concrt140.dll
- Size 252KB
- SHA256 1a084b2275c02b4df2b0ae395a5312a3ad3143f5ace9ba08cfd4fc42cdf9bf61
- MD5 3417273fa1e057592ac7ee1db2c200be
- SHA1 276e7063fe0b1137b3fec8b493a8c13585665aeb
- SHA512 e6ccc643fa5f7aac10929f809ed61f05d2822e47f3cb23434bd9920c70a0fd9cadfab8d00195331a4053f048c1aea9d3df66a888a473d1d1dcf3681bbc4df9bd
- SSDEEP 6144:KGOkTPJsVIVm1DXxcVTLOjbY2D9AGyzkSRBdL/dfDggK5hs13kzFrI12z/Fs18KE:CkTh6zBIBdL/AIIFlzd
- TLSH T1B4447EE1340044FAE75B43328578D66A81FF9B502BF983DB2F9CEA496E605C1EB31593
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target convert_amp_c.sql
- Size 673B
- SHA256 e071f20d8e6a447db73b80be223bc0d19b9a886aaa20e635e7a34d8573b62d9d
- MD5 32c88a2fa8d8713c232963476be36382
- SHA1 8729b9e3aa3ca518ed1771e5cd738ecf78b42542
- SHA512 1cb9cd09af3cb8e0b5d2b0d632e259e27d3c2ac9855ad790abf448a6e2d950e6697a13fac0f6cfa976bbd71680c0fb0453f8052eadba2ec4e959f8efe07c4f96
- TLSH T17601F982B14D7ED09573D3F2E707FD42E916785F1918D6DDB088E4860F3030890B14A7
- MD5 SHA1 SHA512 TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target convert_leping_tun_c.sql
- Size 1KB
- SHA256 03cc5347fe663825d77ef5ad64a4aaca499754922f6feb51c20daa811bb75643
- MD5 ab04f307d6d557d0f91a87618b83b2c4
- SHA1 5c964f86daf5aeb1dfe1de7429f49c35626d4538
- SHA512 fdcffb15a8fab7b16fafc138831f94550b2f5cdcbb176dbca0fd12a2decab7f2fb4fa5637d0f9606ee015bcb46d5a7bde98899d62c81d025eaed8db65afa9a28
- TLSH T12131CD9F54AC02688C70E8FE7B02F64F8E0DA54709D858CD78EC88260F55A2CC1BE778
- MD5 SHA1 SHA512 TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target convert_maksuvaba_c.sql
- Size 1KB
- SHA256 877b25c903cb519f57d36a84f01054e52548686e8b9d8f1f8602848b11312d6e
- MD5 182ea01cc9330afd0bfa96c0140cd3eb
- SHA1 0d03c07c751562f14825bb7fca49601791bf83cc
- SHA512 81258ca66798be55c08f0e28c5c7cf1daf2794ca594c83423181617266648da7b1c750de02f73db6af0ff646f8a46dd78027326d307cbc97869693014eb3b104
- TLSH T11E41E0CDA76415A71070C3EEBE00BD42D929A423D4F9C0AB7CCC958E1BE8914DD69B6C
- MD5 SHA1 SHA512 TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.