Overview
overview
5Static
static
5Bypass2.31v.zip
windows10-2004-x64
1Bypass2.31v.zip
windows11-ltsc_2024-x64
1Bypass2.31...1v.exe
windows10-2004-x64
4Bypass2.31...1v.exe
windows11-ltsc_2024-x64
4Bypass2.31...ig.ini
windows10-2004-x64
1Bypass2.31...ig.ini
windows11-ltsc_2024-x64
1Bypass2.31...08.bin
windows10-2004-x64
3Bypass2.31...08.bin
windows11-ltsc_2024-x64
3Bypass2.31...st.xml
windows10-2004-x64
3Bypass2.31...st.xml
windows11-ltsc_2024-x64
1Bypass2.31...el.exe
windows10-2004-x64
Bypass2.31...el.exe
windows11-ltsc_2024-x64
Bypass2.31...config
windows10-2004-x64
3Bypass2.31...config
windows11-ltsc_2024-x64
3Bypass2.31...s.yaml
windows10-2004-x64
3Bypass2.31...s.yaml
windows11-ltsc_2024-x64
3Bypass2.31...on.log
windows10-2004-x64
1Bypass2.31...on.log
windows11-ltsc_2024-x64
1Bypass2.31...11.dat
windows10-2004-x64
3Bypass2.31...11.dat
windows11-ltsc_2024-x64
3Bypass2.31...it.log
windows10-2004-x64
1Bypass2.31...it.log
windows11-ltsc_2024-x64
1Bypass2.31...DP.dll
windows10-2004-x64
1Bypass2.31...DP.dll
windows11-ltsc_2024-x64
1Bypass2.31...un.sys
windows10-2004-x64
3Bypass2.31...un.sys
windows11-ltsc_2024-x64
3Bypass2.31...pi.dll
windows10-2004-x64
1Bypass2.31...pi.dll
windows11-ltsc_2024-x64
1Bypass2.31...rd.dll
windows10-2004-x64
1Bypass2.31...rd.dll
windows11-ltsc_2024-x64
1Bypass2.31...si.dll
windows10-2004-x64
1Bypass2.31...si.dll
windows11-ltsc_2024-x64
1General
- Target Bypass2.31v.zip
- Size 1.3MB
- Sample261011-hp1psade98
- SHA256 a60ca57b1ed1ad33afa4e69c2e77faf77cb4e732d18edc15da86f43c8408e62e
- MD5 6ca9426cbed6d4a06c5149fd6d02a771
- SHA1 3e061b035e10c192aaf58a15dfac617752a2373e
- SHA512 3e4e6510a2ff5ee2900bbb6325c8413924d7e84e0afa721f30a37451579dd9f2ac17b64ff08582178ddc0483208df86aa8d3ed576c2d6465da05b5f7441adad1
- SSDEEP 24576:nWbnUIHC4GEngeTJZR+u4kYw8cQoVHbBXLS3wNS5g02THZfRRYztaRLHj+Ksjv7N:LIi4ln9TJZF4VcQoRVb/0WHHRRStaIKo
- TLSH T15A553379D31E97D6C0DC7EFBCDCD629410A06B20CBB67F9B05164B831A065C60AFBA19
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Bypass2.31v.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Bypass2.31v.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Bypass2.31v/Bypass2.31v.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Bypass2.31v/Bypass2.31v.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Bypass2.31v/assets/config.ini
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Bypass2.31v/assets/config.ini
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Bypass2.31v/assets/data_2908.bin
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Bypass2.31v/assets/data_2908.bin
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Bypass2.31v/assets/plugins/manifest.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Bypass2.31v/assets/plugins/manifest.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Bypass2.31v/assets/plugins/tunnel.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Bypass2.31v/assets/plugins/tunnel.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Bypass2.31v/assets/wow64/app.config
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Bypass2.31v/assets/wow64/app.config
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
Bypass2.31v/assets/wow64/rules.yaml
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
Bypass2.31v/assets/wow64/rules.yaml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
Bypass2.31v/assets/wow64/session.log
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
Bypass2.31v/assets/wow64/session.log
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
Bypass2.31v/clientsmodels/amd64/data_1111.dat
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Bypass2.31v/clientsmodels/amd64/data_1111.dat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Bypass2.31v/clientsmodels/arm64/audit.log
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Bypass2.31v/clientsmodels/arm64/audit.log
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Bypass2.31v/clientsmodels/arm64/fdSSDP.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Bypass2.31v/clientsmodels/arm64/fdSSDP.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
Bypass2.31v/clientsmodels/cache/tun.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
Bypass2.31v/clientsmodels/cache/tun.sys
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
Bypass2.31v/clientsmodels/common/iphlpapi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
Bypass2.31v/clientsmodels/common/iphlpapi.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
Bypass2.31v/clientsmodels/netguard.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
Bypass2.31v/clientsmodels/netguard.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
Bypass2.31v/clientsmodels/res/winnsi.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
Bypass2.31v/clientsmodels/res/winnsi.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Bypass2.31v.zip
- Size 1.3MB
- SHA256 a60ca57b1ed1ad33afa4e69c2e77faf77cb4e732d18edc15da86f43c8408e62e
- MD5 6ca9426cbed6d4a06c5149fd6d02a771
- SHA1 3e061b035e10c192aaf58a15dfac617752a2373e
- SHA512 3e4e6510a2ff5ee2900bbb6325c8413924d7e84e0afa721f30a37451579dd9f2ac17b64ff08582178ddc0483208df86aa8d3ed576c2d6465da05b5f7441adad1
- SSDEEP 24576:nWbnUIHC4GEngeTJZR+u4kYw8cQoVHbBXLS3wNS5g02THZfRRYztaRLHj+Ksjv7N:LIi4ln9TJZF4VcQoRVb/0WHHRRStaIKo
- TLSH T15A553379D31E97D6C0DC7EFBCDCD629410A06B20CBB67F9B05164B831A065C60AFBA19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Bypass2.31v/Bypass2.31v.exe
- Size 785KB
- SHA256 eaac64c113ebaba1fae924ad1b6239a44c8806bf2b85d8dc11a27ad65a981cc1
- MD5 bca6478b230b6920fe79b97a3066e835
- SHA1 f61e771c53c63f35f5a2b416c260c74d29329adf
- SHA512 463f16b737768ac2bb285efc09e69781132e95c234e2eab37eb98be797606e45d1dbb38df3a6ef55144f4f7e1b08a213768e915b7d967b8c90bd03b216a07ff7
- SSDEEP 12288:/AstffLBk3Q45wU0/St0Z4j9lAx5ylTxEIyTXnxYV:4s9uQ45oyj9lE5yFuTXmV
- TLSH T1CB058E6A66AC01F8E0B7D17989964907F7B27845137197CF43A087AB2F276E05F7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target Bypass2.31v/assets/config.ini
- Size 24KB
- SHA256 739fbcb79cdd6f5345c055e1c6cd5b96437c863db2466e3e4cb3a2ac78049ae9
- MD5 63cbafbdf7d62fa7500f76219bb3b89d
- SHA1 fbc64187f7e593596328866de99c6c8c3a016d06
- SHA512 1dac1d74c2fa24e440136c33cc6f50352fa5b42834d3f29952d95bd39063f41f149bc7da4a69a3a05f2efed8911cd62ea32812b2f614a0c59b456242303f87db
- SSDEEP 768:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3
- TLSH T13FB21B0DA62714E7476F4450F43674416BF9485647D9404D053BC7D8DC540A5BF5F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Bypass2.31v/assets/data_2908.bin
- Size 60KB
- SHA256 adec2e42ac3891ea6e412aee8647949694aff0e51a68ddb4fa59d20d366492da
- MD5 5c0b9d292c3b8f863c5b5e60561fdc34
- SHA1 2550a29a0d6c0109bd4b5761973b83742952b728
- SHA512 b144035596f5c52814d5fb71939650e3cb08a000c04f593be79844d25d4f7207dd516ce8bdaa53dae6cf3bb6163a28dbc4c0bbbca8aa224c1bcb036455b27167
- SSDEEP 12:KAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAc1:6
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target Bypass2.31v/assets/plugins/manifest.xml
- Size 84KB
- SHA256 393afe99f8f0427aeb494262c3f04eac00b2d5136835a57fc65b771f1a00d571
- MD5 44df3ce59a1a2ec7ffcbc8e0330e027d
- SHA1 0a2a923809645fb39fa6d95349b8d8c6e4d3423f
- SHA512 32aec37eae61fe0e55be8aa387a615281e1b3ad4f346deb55206086b22d9107ab81b22706b174067854d070ca272e7af5a9e14e3515ce53d6d8af2cfa48d1fb8
- SSDEEP 1536:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+:X
- TLSH T10B832B1DA22300E3436F4450F0327401ABF9081603C8000D043BC3D8DC540B0BF1F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Bypass2.31v/assets/plugins/tunnel.exe
- Size 40KB
- SHA256 ba4aa852189a56a7d8ef1b2e5f184729b9b82026314106a31bdb665b9f31212d
- MD5 7accc6f98c40c607051b44c6934e44d4
- SHA1 bde60e6a2693f728c9d4f49ee6947f25440ae824
- SHA512 b7a31fbd5ecfdb66787d92d5870a5b724fe3a23ee048d4098af04c9e0ea0aa36e1f369115ab0bd3b0c96fc16e14cec9c2e1ff871192ef53200447336e31600a4
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Bypass2.31v/assets/wow64/app.config
- Size 19KB
- SHA256 e84a48dd75e5dd74ef4d4c84a3999dfe497f3901400965fccbe084d0b01e5968
- MD5 d4dd4d6e6dff31a4bce32a2f4b4e851c
- SHA1 706073447612fb12dd43fb86743cc2751ccb64b4
- SHA512 bf9e014c7f67469be9d5270e8df982d4bdad1b5efbfa87c36e2aa2fbdb0f19682f59a8bf3cfd400aa689a20fc995cf8d4a1ba61621529fadb720c765a57c5734
- SSDEEP 12:KAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcAcO:J
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target Bypass2.31v/assets/wow64/rules.yaml
- Size 6KB
- SHA256 c5a5117b4b1259f0bc8ba3d0ca31a8be696335b3b4b516f703a5b7a597ea2ea8
- MD5 f5336232e0df8cc4aa2e6a6da96d554a
- SHA1 25bc41ff6a89f8b2c3101899048735d370b5a2db
- SHA512 ecb0e8412fe1fa1f11761ec1d8a89438cfc0b1bb09651741364395d90e77cf0abc0dffc77004771acc3530cca6a4b27103c1e5960622c57d8a9107fb12f53499
- SSDEEP 192:D+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gM+gG:KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj
- TLSH T12ED11A0EA22300E3836F48A0F0327801ABF9086647C9004E093BC7E8EC980A1BF5F6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Bypass2.31v/assets/wow64/session.log
- Size 23KB
- SHA256 c2b5aa150bd1c99b782d6a169d779d9794f0b7934bedf9fcb1e7021211784521
- MD5 c34cff9aaa2b23e3d4a60d22b60866ea
- SHA1 30d68609224e0e3d9626ce32e5c0b7f03b3ce354
- SHA512 ee0e1f96b7d25fad4d20f766b3bef33113dbfc7fcce4696df36ba8b22e8622a42a2752f6cfc15a02a4f194e0a410f005e978470770c0ed08e1521bfac95e541f
- SSDEEP 384:K++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++f:K++++++++++++++++++++++++++++++/
- TLSH T1F8B2222F9A1320F3437B6481F031240A6AF9046BA398104C613787ECCC040F9FB2F9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Bypass2.31v/clientsmodels/amd64/data_1111.dat
- Size 1KB
- SHA256 5043fafa18ffa605eec3120791a98aa2c4ec8a0371ef09b615a098507f5c52d6
- MD5 f1063b2d6d5ecc0e205c911d731c1fd8
- SHA1 82287eaed564f30e6fccd000fc83a5713805a4a6
- SHA512 52a3e1badc7b879adcb1e088173407da503b1d727996f945125878edd01f43053ad2d70fad6e1d11e6d4312fdad487193b3424bccdfa80eccd8aea122d4832d6
- MD5 SHA1 SHA512
Score3/10 -
- Target Bypass2.31v/clientsmodels/arm64/audit.log
- Size 30KB
- SHA256 861c512d79365044a1368e19d66a5005e9f1490f4cfd4dd5889824b0b90d1263
- MD5 704f42dc3687a5b76d5f5ca6b690c022
- SHA1 896f5a8dfa157e6fdf9125c06970184a0b5e771f
- SHA512 b8dcc7b00154cbe4cccbfeb423f1a7c9fe8b8036243bc0b4b227207aea38c2dbad50c0f409c216be51ce08ca5183cfa6a06b6d51691f0759a40d911a73e05ac5
- SSDEEP 768:K+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++:K++++++++++++++++++++++++++++++e
- TLSH T1F1E2222F9A1320F3437F6881F031240A6FF9047BA799104D653787E8D8440B9EF2E9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Bypass2.31v/clientsmodels/arm64/fdSSDP.dll
- Size 131KB
- SHA256 3fe54a46940ff1e372a172489e75b4d9021e37ec4d81665c5e558f3e6be9bef6
- MD5 c85fb469cd706092958f756ab6ceb2da
- SHA1 2b817aee2d8fc90f67685e56510d2ebcf6aaca46
- SHA512 de5698beef55f57c93c3cdff9033c9e42caed2533315cbfbaec9ff9934cfad20fb9b7ea8d26f82e63463a93d1538cadcd57d7c06f2ad8a201f3d1f58a58a32b4
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Bypass2.31v/clientsmodels/cache/tun.sys
- Size 6KB
- SHA256 f463dc34e08c889c0f68bc89a9fdef0c92af716c74249b91af5af73f46a28aa7
- MD5 33b2101cba4459588435392a991680bc
- SHA1 7bb7b01ce3e8445fd5274a531e5aea578511824b
- SHA512 0690ffe0e596c3cc8e2bbf5a8431d6bb5e0b3cf86118cf7c370aa65a8a357ce536a7302c29c9af1f07d490fe9f627f21389b2bcfd14e11b51741b3d4a3511fca
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target Bypass2.31v/clientsmodels/common/iphlpapi.dll
- Size 45KB
- SHA256 2bbb13aa4367d7b82236a98ae57a7afb9d153fa05d126ecdc97f7f593d8880d9
- MD5 29a2183669dceaed1d16120e542ff261
- SHA1 0c120a5a988ff722bd524797496ac3aced374ef5
- SHA512 8ae961c4ad7add2e7bc0c5145c4fc344f53e3c4d4a444b6f19a85549359d1c7b046e354aaa2e6574baa5994d15a5cabb9f9aaae7e47460898398d1f9198c602d
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Bypass2.31v/clientsmodels/netguard.dll
- Size 44KB
- SHA256 a57b009aa644e1131fedfc8af59b98b327181fb7823e26879a3615ef64ee8908
- MD5 c796b0e6cb7f43644bba46a1d05cd71e
- SHA1 363a98476d676dfa1ed4c774b344919820889372
- SHA512 bfeb9405f16976edee5beeedfb6f5d170528d93de32a7571a84df730cca145d2d00878c86c684b6d01513b5d47f1921a08011a158d4616c6ad7f760b801c7b13
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Bypass2.31v/clientsmodels/res/winnsi.dll
- Size 62KB
- SHA256 4ea894d8e6fd5fd5027ad9b64ff54f9eba6ed466c0d480f7d92b598b12ee4e1b
- MD5 53610a4ba00f979dcc969120f5e6cbd9
- SHA1 572a35a655da8cf1ce2e3b201847c216762f8ba3
- SHA512 5c4d324138d8df0601d3a15335c2de905d34f57890e0eb5423f3bafc0c59c37519658bc46f4a03f5949dce1e8aeb42f70398377b081330921559f091942be1b1
- SSDEEP 3:Wltgl+:i2
- MD5 SHA1 SHA512 SSDEEP
Score1/10