Overview
overview
7Static
static
7dmessetup.exe
windows10-2004-x64
7dmessetup.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3dmess.exe
windows10-2004-x64
3dmess.exe
windows11-ltsc_2024-x64
3uninstall.exe
windows10-2004-x64
7uninstall.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3General
- Target dmessetup.exe
- Size 384KB
- Sample261023-asd17aa18n
- SHA256 6bb55331e039434a95ed3d52a4c7feae9a87965195ac969d854f12370c2a4dac
- MD5 18e4662263c45862fc74df6943d7b92d
- SHA1 d35d10d518e086986732e7aa0a1061c01ae2e464
- SHA512 a12e2112e9bf39394bfac9279f01eaf0bbe8e9a7570c05c952aaa4f3e88a1b50e0c9e4fe143193ebdcc0e7421ea2a40502e4841f2f0086cacacf8ed75417ee07
- SSDEEP 6144:lyjOKreLJbU/ylQCfVitM8670bMXe/7fihSSgNP7x362SG+9jsi:lDKyOuQOYKcMXe/7fihbgNF3mH9j/
- TLSH T16A8423D19E8B1974E1CF3735D689D80A277EDDC026779C4220CC4FAA918A7C98E3697C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
dmessetup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
dmessetup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
dmess.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
dmess.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
uninstall.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
uninstall.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target dmessetup.exe
- Size 384KB
- SHA256 6bb55331e039434a95ed3d52a4c7feae9a87965195ac969d854f12370c2a4dac
- MD5 18e4662263c45862fc74df6943d7b92d
- SHA1 d35d10d518e086986732e7aa0a1061c01ae2e464
- SHA512 a12e2112e9bf39394bfac9279f01eaf0bbe8e9a7570c05c952aaa4f3e88a1b50e0c9e4fe143193ebdcc0e7421ea2a40502e4841f2f0086cacacf8ed75417ee07
- SSDEEP 6144:lyjOKreLJbU/ylQCfVitM8670bMXe/7fihSSgNP7x362SG+9jsi:lDKyOuQOYKcMXe/7fihbgNF3mH9j/
- TLSH T16A8423D19E8B1974E1CF3735D689D80A277EDDC026779C4220CC4FAA918A7C98E3697C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
- Target $PLUGINSDIR/InstallOptions.dll
- Size 12KB
- SHA256 75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84
- MD5 4c7d97d0786ff08b20d0e8315b5fc3cb
- SHA1 bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c
- SHA512 f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a
- SSDEEP 192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu
- TLSH T1DB425B625284C8F3E749833D74573717E796162729918ED2CA330BC62A7328E6EF7352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 799f91bdd59f2133bf195c5b4ca685ee91666d981a6bcd8a6c45b7c8ecc96eef
- MD5 2c3c8976d729d28478a789217a882291
- SHA1 10c18b23fac957419547ef0f8ec3bc1b10e91e79
- SHA512 749c650974f94cc5009124d3fa3d9bb1ee5824a3fa0a76b81733e08379678a2a1b7c54b77d1709fb6de24c81c68c03c0ec3e9ec5ccad0d30d9237300794f1213
- SSDEEP 48:aefTYzqi+/XC1aQbkMIwovgxbLuwOWd8s/d79C6O4MWNEYJvRZJ0dfh80:22XC1XkH/ohLZDSs/d799O4MQE0R4
- TLSH T1E5B1847223C409B2E65206BB516767E327A2D5303B65B20F8B27628A5C46D73ED3D783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 6KB
- SHA256 4f945ad53b7aa8ed516b2f58c2ed9f15c13bbdf0e489d71c7347b80583cee5fd
- MD5 388c408cff35a38d04e3cda18f63af07
- SHA1 9c2aa2ed8b526ace4267acbcf5648b2601019ac4
- SHA512 542292d61ff209f6c98c62ebad549024611a7d42fb951f8cc211b886f0d202d5e0da3b754c84c8a00043c748ed527351fc524357412cf88875e6bf729cbba46f
- SSDEEP 96:MFJsQxcnqakqeStS6+NMKQwECv0nGhFZxTxZ05hU/61:C9xcnqakCN+N9n0na1K5y61
- TLSH T17ED1D4B7F3C508F3DA8B43703952EB23A333DA216365A1179A5352C5B9928E3DD25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target dmess.exe
- Size 357KB
- SHA256 2fa01d7157687694f319e137622f0afbfee0768634f8b130b28a373a31d2dbde
- MD5 8107eebcba774c411dd39383288c95f9
- SHA1 2a3ac955f77751fe1b16204baf3d7519fd272961
- SHA512 a09f8424df50e5a419d39bee8db029ede35820b6914a7b7cfe582ecef35b318f5b18ccc5263c0f0da6929c4dc7b07d5655b024126a5841788dc10f0ba18d5a9a
- SSDEEP 6144:nM5ohe09BcNhBQef1c7+jYj8c4JkBEUB7RKs9kQNL1caLnSh1ZvZmk1CkLvjqLor:8ae22Lfi7lIc4Jkb/BuaOhjhmkRZ
- TLSH T1A3742391F2B40D46C1785A3159D3DB125A30CDD9A0C78D7732A6FD6EBFB06839E051A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target uninstall.exe
- Size 27KB
- SHA256 122799443b14b9c9754added23e47c78d911db7f21c161259d90fc328de17d61
- MD5 acec234699e5f3ffebfd25dc572466e3
- SHA1 1ec63fcd6bf87d8666f03560790f7066d691fd9d
- SHA512 76236b6bbf4b92a140f5762fd0d6e995c142221b5a37cdd8daae03665098f90202395420de1f86deffd4d80bb0dd164d3a881271b3e68232d0a0d10f2a2a5f5d
- SSDEEP 768:F2jIOVc13KaUcwYbnJAkqAt4LVrLQpjdJ/E9EeDazKuX:FHO2xKAbCkzyLVXCjf/imzKM
- TLSH T1B7D2D1C0E3D0AE58EBF2477E42B38B54263EF8E12239DB2552A01A17ADDF7C74915136
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 799f91bdd59f2133bf195c5b4ca685ee91666d981a6bcd8a6c45b7c8ecc96eef
- MD5 2c3c8976d729d28478a789217a882291
- SHA1 10c18b23fac957419547ef0f8ec3bc1b10e91e79
- SHA512 749c650974f94cc5009124d3fa3d9bb1ee5824a3fa0a76b81733e08379678a2a1b7c54b77d1709fb6de24c81c68c03c0ec3e9ec5ccad0d30d9237300794f1213
- SSDEEP 48:aefTYzqi+/XC1aQbkMIwovgxbLuwOWd8s/d79C6O4MWNEYJvRZJ0dfh80:22XC1XkH/ohLZDSs/d799O4MQE0R4
- TLSH T1E5B1847223C409B2E65206BB516767E327A2D5303B65B20F8B27628A5C46D73ED3D783
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10