5b288132f126e009d486f2125b1b7cdb126ae2fa55a96bcebaf9dcc20f0acd1e | Triage™

Login
Reports

Overview

overview

7

Static

static

3

OneTerm-setup.exe

windows10-2004-x64

7

OneTerm-setup.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

nexterm.exe

windows10-2004-x64

6

nexterm.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
OneTerm-setup.exe
Size 4.6MB
Sample261002-k4x9basakd
SHA256 5b288132f126e009d486f2125b1b7cdb126ae2fa55a96bcebaf9dcc20f0acd1e
MD5 82511fcfa1162c971127a9063175e67e
SHA1 5de0c8879ebc0a6f6fdd293d8bdefef9b4b90809
SHA512 54e861b70971cb5f51bf62d261aa8b04a18a6135064637b406636fb09a047526c6c4db1c2b4f3cb5ba5db9a5a87a4daed495b2793fffd90f951374ac83d09b3e
SSDEEP 98304:j14Qqbr99DxJrB+uqDAEvXg5NuSIpO0l0fssNhSYuBRPfQ:jC9v3PqcEP6und0EouBRPfQ
TLSH
T1E926335E9E019EE5F30AC4392675D4B6487A7DF8E45F1295DE830D328C3B780FE6A206
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

OneTerm-setup.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

OneTerm-setup.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/NSISdl.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/NSISdl.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsis_tauri_utils.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsis_tauri_utils.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

nexterm.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral14

Sample

nexterm.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  OneTerm-setup.exe
- Size 4.6MB
- SHA256 5b288132f126e009d486f2125b1b7cdb126ae2fa55a96bcebaf9dcc20f0acd1e
- MD5 82511fcfa1162c971127a9063175e67e
- SHA1 5de0c8879ebc0a6f6fdd293d8bdefef9b4b90809
- SHA512 54e861b70971cb5f51bf62d261aa8b04a18a6135064637b406636fb09a047526c6c4db1c2b4f3cb5ba5db9a5a87a4daed495b2793fffd90f951374ac83d09b3e
- SSDEEP 98304:j14Qqbr99DxJrB+uqDAEvXg5NuSIpO0l0fssNhSYuBRPfQ:jC9v3PqcEP6und0EouBRPfQ
- TLSH
  T1E926335E9E019EE5F30AC4392675D4B6487A7DF8E45F1295DE830D328C3B780FE6A206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 160KB
- SHA256 0cee4c182ea92b2e7bce942db990e5bd88ab6f8927704209817d04cfab25cf1f
- MD5 94bed44c269786f8f99db87819171975
- SHA1 6f29a1b26d31d49037a4fca2e704f5cafef97423
- SHA512 00188e6c170698c950bbbfd5a406277ee5af672c03e727033623b8ab78aff07be042b7abc751a0f13f0c60df208ebec5c6b933dd93c52f60084b57d8bee066b1
- SSDEEP 3072:I8E3/fryaDndgiHIW+G+Ftvb00mPvOUnhh6SOY:I82/fWYVHIbGmlYZPWUna
- TLSH
  T1C8F33B9DFA4344F6E1AB10F80CDFE7FB456472018426AAF6EBCF9D47B8B27521884149
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 12KB
- SHA256 dfa02ad29e171ba94e2ed1cf67fb125d4b976bfe6ef2258fc2666d811c7e7ff0
- MD5 603fc3c0741ebb52d480e254bfe725b9
- SHA1 b09a8a1fe852832ce14c9c1970e257794b4fafa0
- SHA512 7264b19d3859791d13e98a4abdfa9501742ef4d50e7102ff5eb19158f0f57f77a99ff84482a03d5f698d021e5d8f428059a459119244b8ef49cf17b4cbd9608f
- SSDEEP 192:+1husyjb04+hG13uw0Y/5jiEelSxDObJ/:My84euuw0YhZelSIJ/
- TLSH
  T17D429419BF4745F6E9B39534405FEBEF451BA520DA2F4E0AEB090A09FE77271580E342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 54167ae0968e05910ef8dcd8bbc345afe3dad810fd3c9d2d3f47ad4caffc456d
- MD5 4fd5a2cd0c65c6552fea0cc11938f251
- SHA1 e8f11c1f919eee06f8ebfde989ff53a15243e57f
- SHA512 7703a4a59be8a1e349ae7435f9f3f25698aa774428c7e99cc34a27ce51cc41fe6ca09102dab6ead10fd71e30db14852f12ef57587845ec9ab85e70be2ad85609
- SSDEEP 384:m9YwotlRxnX/+XWmsKP73mwYbhzc7qxD6jT6s6HXRes59:mOrRtXjtWGMqgjW6U
- TLSH
  T19DD2081AFF06C9F2C1E2D57049DFFB77C626B92847260E6BFF1E5E08B8236125909205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 3564ce8b510acfe456f7135e0c1ac1f71cfa39c787909192be8f8ed40dcbe305
- MD5 a396d30099517546b62c0aa673929f93
- SHA1 f3eea24ee7faf86638dfd8c730a544a94716378b
- SHA512 b9d4f025c6858f0483cf34a53d07b60673dcba7e782bfe51a7e00294a87de8de0b5ede4c28bfc3869f2a11dff76a96d9da9dce2f1558a315116f182b73ba886f
- SSDEEP 192:8SOu+kSRU4pMhMoITEZR1w5kY/5OlVcJSUDKCWw6SZS7ZDk7IQH:Ofk6TpMhMoIwZR6OYIlWJS6KCWw4UF
- TLSH
  T15E52D50DBB0A44F6D572E935548FE73F868CA515D66B4F06EF170B0CADA72B1281E342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH
  T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  nexterm.exe
- Size 15.4MB
- SHA256 6f13a663f25891b9815b737b5b3bdce647616266b6a73eed655d9f6ccb865cfc
- MD5 56ceb29d91706a3e7a050a130ba8e657
- SHA1 68e072f473077b175262479f30bf177b635d8d60
- SHA512 deadea2d08b8c95df623ceb552242be86c85b4c4500b8990079b8ede18677a10689b15d8486754a3c21d698f669568c04b4a9b1c05fcd62eeafb6b94d02f3e10
- SSDEEP 196608:zavtDT0Tu56kY5XNHKqWZNl2wxGKD3b+:Ct30iclFWZNwwMKv
- TLSH
  T122F62A01BE4B5998D08ACCB0C38B8A638E2234DB1936F9BF55C942293F7D7B55F19319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

defense_evasiondiscoverytrojan

behavioral14

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy