Overview
overview
6Static
static
5MVS_STD_5....28.exe
windows10-2004-x64
6MVS_STD_5....28.exe
windows11-ltsc_2024-x64
6$APPDATA/M...hs.rtf
windows10-2004-x64
1$APPDATA/M...hs.rtf
windows11-ltsc_2024-x64
1$APPDATA/M...ng.rtf
windows10-2004-x64
1$APPDATA/M...ng.rtf
windows11-ltsc_2024-x64
1$APPDATA/M...pp.bat
windows10-2004-x64
3$APPDATA/M...pp.bat
windows11-ltsc_2024-x64
3$APPDATA/M...te.bat
windows10-2004-x64
3$APPDATA/M...te.bat
windows11-ltsc_2024-x64
3$PLUGINSDI...os.dll
windows10-2004-x64
3$PLUGINSDI...os.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...st.dll
windows10-2004-x64
3$PLUGINSDI...st.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...64.dll
windows10-2004-x64
1$PLUGINSDI...64.dll
windows11-ltsc_2024-x64
1$PLUGINSDIR/LogEx.dll
windows10-2004-x64
3$PLUGINSDIR/LogEx.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ib.dll
windows10-2004-x64
3$PLUGINSDI...ib.dll
windows11-ltsc_2024-x64
37za.exe
windows10-2004-x64
37za.exe
windows11-ltsc_2024-x64
3Applicatio...ol.dll
windows10-2004-x64
3Applicatio...ol.dll
windows11-ltsc_2024-x64
3Applicatio...et.dll
windows10-2004-x64
3Applicatio...et.dll
windows11-ltsc_2024-x64
3Applicatio...ol.dll
windows10-2004-x64
3Applicatio...ol.dll
windows11-ltsc_2024-x64
3General
- Target MVS_STD_5.0.2_260728.exe
- Size 457.8MB
- Sample261009-p33jvsba84
- SHA256 4c8d570ceddc85ad6a40ba635e9cc00de7a54a050d365b403d921e045f735492
- MD5 362dd8cfe442486aa8bebc4ff144ca75
- SHA1 707387e359a9346dc8193c15d04cc7555c6aca74
- SHA512 3cdf585159e7a0d52b6025e9ee8a42427562ba59716d6e52d136c8e05d48d393c1f3cef86efa727f8ebdc4ad384cbe0158450c8a4b3c0bcf6725ce3b9cb0ed13
- SSDEEP 12582912:s9sxf9NZZw1Sv7QarKx3EGmBgoWxs0xMtV:s+xf9XZzMHxUZaoSsMM
- TLSH T1583933033395A172E26200715E3AF3EA5935FC525B3282C77194BD6E09357E0EB3A66F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
MVS_STD_5.0.2_260728.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
MVS_STD_5.0.2_260728.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$APPDATA/MVS_5.0.2/res/LicenseChs.rtf
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$APPDATA/MVS_5.0.2/res/LicenseChs.rtf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$APPDATA/MVS_5.0.2/res/LicenseEng.rtf
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$APPDATA/MVS_5.0.2/res/LicenseEng.rtf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$APPDATA/MVS_5.0.2/res/OpenApp.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$APPDATA/MVS_5.0.2/res/OpenApp.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$APPDATA/MVS_5.0.2/res/OpenReleaseNote.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$APPDATA/MVS_5.0.2/res/OpenReleaseNote.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/ExecDos.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/ExecDos.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/LockedList.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/LockedList.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/LockedList64.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/LockedList64.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/LogEx.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/LogEx.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/nsduilib.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nsduilib.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
7za.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
7za.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
Applications/Win32/MVAIndustryControl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
Applications/Win32/MVAIndustryControl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
Applications/Win32/MVARenderWidget.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
Applications/Win32/MVARenderWidget.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
Applications/Win32/MvFrameGrabberControl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
Applications/Win32/MvFrameGrabberControl.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target MVS_STD_5.0.2_260728.exe
- Size 457.8MB
- SHA256 4c8d570ceddc85ad6a40ba635e9cc00de7a54a050d365b403d921e045f735492
- MD5 362dd8cfe442486aa8bebc4ff144ca75
- SHA1 707387e359a9346dc8193c15d04cc7555c6aca74
- SHA512 3cdf585159e7a0d52b6025e9ee8a42427562ba59716d6e52d136c8e05d48d393c1f3cef86efa727f8ebdc4ad384cbe0158450c8a4b3c0bcf6725ce3b9cb0ed13
- SSDEEP 12582912:s9sxf9NZZw1Sv7QarKx3EGmBgoWxs0xMtV:s+xf9XZzMHxUZaoSsMM
- TLSH T1583933033395A172E26200715E3AF3EA5935FC525B3282C77194BD6E09357E0EB3A66F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
- Target $APPDATA/MVS_5.0.2/res/LicenseChs.rtf
- Size 92KB
- SHA256 67b5dfb1459aacf7092befb4e6352df590a2ce975127f2b8dcfd281798be6ad4
- MD5 a449c19fc59db4b4abb72a1e85525616
- SHA1 a44a99a55024c093b55fd36450663af53a6641e2
- SHA512 065fc25566c4fc014f0b8929572640b122dd5c893bcf4d68a109ebd26fc3868bca6b28d3ed3b468e3d62fa99ed28d5302e4f67e442686963dab12f77fdc01aa3
- SSDEEP 384:Y+1cY9ozPEFxWxnFfGaOkz/EnVOTYudi0ZuccB/F7KGtlVIaTaIhCCJi6rGs+Q3/:YGWxnpGa9zTv+7ZNAQ+JC862El
- TLSH T1A393CB6054326E5DE2A0937EAB2AF0887D7AE117B9FD84526D6FC27B007FD7CC152821
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target $APPDATA/MVS_5.0.2/res/LicenseEng.rtf
- Size 63KB
- SHA256 c3fd889e40f02bb8e33b5d5cf29e1f2c78a643833bbe56c5db35949be0b1ce82
- MD5 84fd51f8f41473d43f3e16b9cef2e901
- SHA1 9e94c1416b6ce455b0831cff669336e11bc7dea8
- SHA512 2e861f4813e2dd1484087573a15ceec749e5f55199994fce2534e4514f52b29e4b0cb0891968edd2cf73b29b53768dc0da43fdfb189c6afa57adb0240e0c273b
- SSDEEP 768:Yng9XUEdV/1/bYkv1AEzkyPQz1tLWuOgRbk81Q+JC862Er:YOXUEg0Fupb6j8+r
- TLSH T1165375F400515356D2A212908F17F098AE3FF528F4F9C490B1ABD1BE727F9A8DA71B25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target $APPDATA/MVS_5.0.2/res/OpenApp.bat
- Size 233B
- SHA256 fe07ab6df724851222c07331ec865554057fbd6c47fd86ed660eb6610a2b1097
- MD5 0c7d90736baa4c0c4c07886d6257cb82
- SHA1 f2117881d613b7dd8f1516d45babd4a8c33f634e
- SHA512 2f66215cc9ce499b8210867c90d777ec53fe9e222bbe080ffbbd829677556106a9514ae7c52c12af123ccfe2e557a712f3ad05cbf74c1c503fd4cd8b05adfdb5
- TLSH T114D0A775F84AE53044118F405C3576D87137E61B9354D94CB19E0D301293488F48E3CF
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $APPDATA/MVS_5.0.2/res/OpenReleaseNote.bat
- Size 129B
- SHA256 0ad703194dab30a655db4a6bcfa897aed54e78d753bd1d71da1208fc392f2c26
- MD5 61637d36d9ac1d2cf5db353a52da6281
- SHA1 f344a10cd889581f36d0c97e61251fb24e9873de
- SHA512 ffd8d313d6edbdbf1a828326517ce9df3f933dcdefd130c1b61ecc492acabb90e77b7100cdbc46413fe0706e2db256e708cb11f190de56b48f415ecc350b33e4
- TLSH T13AB02B387540D002C4014C32D82A038C303EC003C3108A0811615C710DD30AC388E3C5
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/ExecDos.dll
- Size 6KB
- SHA256 91d5481f576382164703e4ac244052265769377838ac30233ad79c983ed9d454
- MD5 774e3b33d151413dc826bf2421cd51e8
- SHA1 ab2928dcf6fa54bb9eb16e5f64bfcffaaeee90fa
- SHA512 3cf955b13e81e4b6edb292df751ce7f64b0cf30979f57b1609f002859b4e68adc046b6674f76f7b7ce7144382316c344c11fed02d638e62fcc8464c32795a365
- SSDEEP 96:38IgHUv7jr2GJ+dfuitjFVsDtwC6OcgHl7cFi1cyMV7WhWuaW:dCajridfjR6tw1OjHl7cE1KyhWua
- TLSH T172D1C639B7F40473E2FE16343EA1522357B9FC120B2686BE865329CD2CA1D50DD24B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LockedList.dll
- Size 27KB
- SHA256 c67ca43ce88eaa22b5aa744d55bff75e5d99dc2093d60209ee85f74df26bd2a2
- MD5 c1e57fef7f15b8cd01810d1061e7d6b0
- SHA1 6332d37fb2d499d80d7d673c348a8d06e9e003d1
- SHA512 96829c5e03cee75da84d5dc9433642a78113c1014702f0020be44580aa9e3da924cf1b02e415d473fd239d84ae280e2a32fe3a9a5f19a7c2f5888f80aa0cafb7
- SSDEEP 768:OM3yirHQg/VB54mY1D3Cfs9JUqbHpOqJw9:OMiijQg/3WmY1Dy09JUQJ9JI
- TLSH T10AC2074457F040F3E77E267038AE3B1A4ABDF928A8A590AB4B3365DD1EE5101F729317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LockedList64.dll
- Size 9KB
- SHA256 4e2b4b1edb69b00cedb91dc8e49b847a65ca0d2652064a8d6ef827eed49620ad
- MD5 677681075bf5bc79879c0dbedeed1c0c
- SHA1 c51b02537bb9f5fd6ff2da8ecab6e2874120a756
- SHA512 97771399174c965de98e9444795ab625dec183540633246cb1f57281b7e2bfc684a16c2c4f65a576714df3f475805728c2ff74a3779e2984eeab8163a86c11a8
- SSDEEP 192:zZLexn8jDfTRPe+ph5Tcz/sETbZGA/wlsU8+CqX:zZLex8j7TVe+ph5wzbbZN/wlsU8lq
- TLSH T1F912F84527F8124CE4E64674AA760F1FEBB5B84A1461D71F0930D14E6F1BB02BE3ABA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target $PLUGINSDIR/LogEx.dll
- Size 44KB
- SHA256 57ede354532937e38c4ae9da3710ee295705ea9770c402dfb3a5c56a32fd4314
- MD5 0f96d9eb959ad4e8fd205e6d58cf01b8
- SHA1 7c45512cbdb24216afd23a9e8cdce0cfeaa7660f
- SHA512 9f3afb61d75ac7b7dc84abcbf1b04f759b7055992d46140dc5dcc269aed22268d044ee8030f5ea260bbb912774e5bbb751560c16e54efa99c700b9fc7d48832c
- SSDEEP 384:w4NSXFjXCATBAQR4F1Y5u6I3wa4W7KNP66BjLjyXB0JyuDchv8EnohgSil2X:woaF+ATCQye/I3KWmxj00Jyb8Enov
- TLSH T1C8136B90788601F3C34E833155A19F37AEBF662027E54883DB659ADA2D316F1E23B307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb
- MD5 17ed1c86bd67e78ade4712be48a7d2bd
- SHA1 1cc9fe86d6d6030b4dae45ecddce5907991c01a0
- SHA512 0cbed521e7d6d1f85977b3f7d3ca7ac34e1b5495b69fd8c7bfa1a846baf53b0ecd06fe1ad02a3599082ffacaf8c71a3bb4e32dec05f8e24859d736b828092cd5
- SSDEEP 192:eY24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol+Sl:E8QIl975eXqlWBrz7YLOl+
- TLSH T1E3325C12135081F3E4918138C86B3A276B6A15029BF98E57DFD39546BE31BE3BD7D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 c4c6fe032f3cd8b31528d7b99661f85ee22cb78746aee98ec568431d4f5043f7
- MD5 b55f7f1b17c39018910c23108f929082
- SHA1 1601f1cc0d0d6bcf35799b7cd15550cd01556172
- SHA512 d652f2b09396ef7b9181996c4700b25840ceaa6c1c10080a55ce3db4c25d8d85f00a21e747f9d14a3374be4cdd4ea829a18d7de9b27b13b5e304447f3e9268fa
- SSDEEP 96:L7fhfKaGgchPzxK6bq+pKX6D8ZLidGgmkN538:RbGgGPzxeX6D8ZyGgmkN
- TLSH T102D1F7B832C20DF3D44D86743F22381717BDD47617B542A1CB932AD61EA2AE2FE21B41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsduilib.dll
- Size 753KB
- SHA256 d2c07e9293a608a8d55243dd49d0a1118388d49567dbf567908ce866a60a0b7c
- MD5 635052c1dd971db5d952bcaccec25046
- SHA1 3df262aff040eda965c57df95404830bdff5cbf8
- SHA512 03be1b420dd12d09ec30e964c7d4610f9028c7f8294ea1d3c1d5b4868914c10438656fa1b28841a95308dceace4d413e094f50c75b3e56896afff2b55256a3e8
- SSDEEP 12288:5QlrWl7bAnqwhY4Vdr1WmvC0vNgiiKgZpZhaBByMwRWKZcq2QRK:5Q5m7bPwNWmvCENgiXgZpZYBoMQZY
- TLSH T1E5F47D2279818271F1A102B5947FFB2F18BEFD1523259AF7A2D81C1E0D346E36B34697
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 7za.exe
- Size 851KB
- SHA256 39d67c230fb7a8d8f326a4dc3dc24ef1a65147bb20789e274f831bf5f0db2b19
- MD5 45f3b5c76784bc7f92bac32c1c02852d
- SHA1 05f6e8e898834834c18f8e84560f5b018c031372
- SHA512 865aaae15ad1c1a815e6d639c4afc13941c6677aa9bb723ba4520eb09299095b50aad05fc0d7700e6c44b146f455fae952660f97c2834aa31bb9a743a9774a80
- SSDEEP 24576:HzwrgD+SHLYg9WITZMnYy4lbDiPw9ADbDmgZmz6yErVO:HU8RrYcWVvIDrdgUz6yF
- TLSH T1FF05AD127AE9D0BBD2421132CB1C6BF591FAD7680B3048C763848F5D7B359D1DA3AA1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Applications/Win32/MVAIndustryControl.dll
- Size 169KB
- SHA256 57c1390ac15b0b50a5e2eba802ba0f68a367cd8ae606c32661c446cc9cada3f1
- MD5 39d36feabe196761e801ed132e83059e
- SHA1 5262413c27352d7a6e6ff16c17823e7965fb8cf3
- SHA512 9f591083b6973cec5b8f649d36b0572731dee8bea351f3f9204d74d962b849de0bc30e034f1068d7ffa43b8a24556f55edefd4bcf4ed866ad826f4c18929ea4f
- SSDEEP 3072:23jEc8IHLDzAefNgG1W+hqy/zoj+RmtcHSx:ELD8e2G1gyroaacHSx
- TLSH T1FE045B137D20823BFFFB02BB9CAB39761A7DB1349B0907D7E0580D6A58516D32B3525A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Applications/Win32/MVARenderWidget.dll
- Size 460KB
- SHA256 10461366d20245b6779146b1a651b2169052bf0fb0df1fa817ec44958af28b90
- MD5 9feaae27d7b629750eb4622974d4000a
- SHA1 53baac0fd8e3128f1987713ccd7147a5cffc0c7a
- SHA512 5307319f07b6c61c41cee0c97c145cd3ed778b2385b7ce77afc13f271be30439c8d57602d236058b3ab48f104ac22ca82b9af0032b10897476638ff0eb2b848b
- SSDEEP 12288:hfiSFVCiLxF9s3Ue3yybSORZ0eJa+wXK5b:hfiSFVssybS8ZrKXK5b
- TLSH T10BA46CA3B6094236D09A51B45CA963CB102CE8A10B5DD0D3969EF89E7D781E32F77F13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Applications/Win32/MvFrameGrabberControl.dll
- Size 38KB
- SHA256 fe77046cd09587c47e9a51d96dfdadba42df3ea2d64833eab6a93c80e9bb0590
- MD5 fe3403ae115f45cfbd5320009cc895ec
- SHA1 766468a41a8fa5c4b1c9bdfa9a3e29845325bcfe
- SHA512 b8268d964366c54778a9566cb263dc3d8d49939d4b7b17b4b6c4dd5ba95a4f830bdfc839dcf9149bf53df4fabc6cc6e57af9a827a1a9354d315322469a3b688a
- SSDEEP 384:3MftB/qQ12XjXnzqrFcw2HgCGNWeBcyjTPnY5peEjWRMQv/u2WuFRevp6RMwx7bA:3gPyQKjziFcw2H3E1aeEKo2TwM9bL6h3
- TLSH T16A034BD3671214B3DB5D44747BC9693B8E71196A2B7450DB69EBAE8808382D3FB3830D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10