c03f75f621c1b5f778d9ffea5490ccb1c6c50bc3ab29d74af8bb342f8bb235de | Triage™

Login
Reports

Overview

overview

6

Static

static

3

Galaxy-Swa...64.dll

windows10-2004-x64

3

Galaxy-Swa...64.dll

windows11-ltsc_2024-x64

1

Galaxy-Swa...64.dll

windows10-2004-x64

1

Galaxy-Swa...64.dll

windows11-ltsc_2024-x64

1

Galaxy-Swa...ger.js

windows10-2004-x64

3

Galaxy-Swa...ger.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...der.js

windows10-2004-x64

3

Galaxy-Swa...der.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...rce.js

windows10-2004-x64

3

Galaxy-Swa...rce.js

windows11-ltsc_2024-x64

6

Galaxy-Swa...der.js

windows10-2004-x64

3

Galaxy-Swa...der.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...gth.js

windows10-2004-x64

3

Galaxy-Swa...gth.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...try.js

windows10-2004-x64

3

Galaxy-Swa...try.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...ata.js

windows10-2004-x64

3

Galaxy-Swa...ata.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...aml.js

windows10-2004-x64

3

Galaxy-Swa...aml.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...aml.js

windows10-2004-x64

3

Galaxy-Swa...aml.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...ip.ps1

windows10-2004-x64

3

Galaxy-Swa...ip.ps1

windows11-ltsc_2024-x64

3

Galaxy-Swa...lib.js

windows10-2004-x64

3

Galaxy-Swa...lib.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...ate.js

windows10-2004-x64

3

Galaxy-Swa...ate.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...ion.js

windows10-2004-x64

3

Galaxy-Swa...ion.js

windows11-ltsc_2024-x64

3

Galaxy-Swa...gin.js

windows10-2004-x64

3

Galaxy-Swa...gin.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Galaxy-Swapper-v2-main.zip
Size 2.6MB
Sample261024-qa5deshz8z
SHA256 c03f75f621c1b5f778d9ffea5490ccb1c6c50bc3ab29d74af8bb342f8bb235de
MD5 c72f72ff98452458dd1b183bb67443a3
SHA1 912d79921fcc77eb0902555c40d483b9797a3a15
SHA512 ff0a71c573f9703e60ef1869aef529630ad9a7102a0c4746008ab9128a8f6b626a4f04a2d659c44a26fca977361000f25944427e1c10b194cafdcd65e2317f28
SSDEEP 49152:Pj5d8cP8vBXHi6z7h2IcRA5iUvHD2gx0MHdEDF2daXA5IJz2J2vBSR808aTuIBSP:PjbdkJXHXhtUUzxVHdEDwdaX5Jz22j0u
TLSH
T1D9C523A5C613AD3CE6F4C47FF7567007A1ED90905B88EE0125B6EA9E903D3067BE225C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Galaxy-Swapper-v2-main/Workspace/Assets/oo2core_5_win64.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

Galaxy-Swapper-v2-main/Workspace/Assets/oo2core_5_win64.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Galaxy-Swapper-v2-main/Workspace/Assets/oo2core_9_win64.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Galaxy-Swapper-v2-main/Workspace/Assets/oo2core_9_win64.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/CProviderManager.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/CProviderManager.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/DefaultFileProvider.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/DefaultFileProvider.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/FIoStoreTocResource.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/FIoStoreTocResource.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

discovery execution persistence

Behavioral task

behavioral11

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/IoStoreReader.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/IoStoreReader.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/Objects/FIoOffsetAndLength.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/Objects/FIoOffsetAndLength.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/Objects/FIoStoreTocCompressedBlockEntry.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Galaxy-Swapper-v2-main/Workspace/CProvider/Objects/FIoStoreTocCompressedBlockEntry.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Galaxy-Swapper-v2-main/Workspace/ClientSettings/ClientSettingsData.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Galaxy-Swapper-v2-main/Workspace/ClientSettings/ClientSettingsData.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Galaxy-Swapper-v2-main/Workspace/Components/CMessageboxControl.xaml.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Galaxy-Swapper-v2-main/Workspace/Components/CMessageboxControl.xaml.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Galaxy-Swapper-v2-main/Workspace/Components/CPluginControl.xaml.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Galaxy-Swapper-v2-main/Workspace/Components/CPluginControl.xaml.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Galaxy-Swapper-v2-main/Workspace/Compression/gzip.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

Galaxy-Swapper-v2-main/Workspace/Compression/gzip.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

Galaxy-Swapper-v2-main/Workspace/Compression/zlib.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

Galaxy-Swapper-v2-main/Workspace/Compression/zlib.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Galaxy-Swapper-v2-main/Workspace/Generation/Generate.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Galaxy-Swapper-v2-main/Workspace/Generation/Generate.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Galaxy-Swapper-v2-main/Workspace/Plugins/Compression.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Galaxy-Swapper-v2-main/Workspace/Plugins/Compression.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Galaxy-Swapper-v2-main/Workspace/Plugins/Plugin.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

Galaxy-Swapper-v2-main/Workspace/Plugins/Plugin.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Galaxy-Swapper-v2-main/Workspace/Assets/oo2core_5_win64.dll
- Size 927KB
- SHA256 8a06bb79f400aec933cd8badd5b63df54da5b02b95cf7c0ea29e0cdb40f72e6e
- MD5 847752c164e051c8acad50232c9ed2b7
- SHA1 717eee612c95c807e40ebaad670d9faa55313eb8
- SHA512 d4ac133dba5aec7b90a6f577687d6d6349474d9a9273bb8e6362948ac3b25f722571bfa7d2154cd1fbd3a9bcd76532e73aa4a2f6e5ccc9d33d478f8cedf44d1d
- SSDEEP 24576:SkGhT2823V6LmHE2/QvTvO+KYsqJAkdHs3D:aT2F8aHE1vTvO+cq2+4
- TLSH
  T182159E13B2D956ECD677C13C8AB75616F2B0748903609AFB56A449762F27FE0273E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Galaxy-Swapper-v2-main/Workspace/Assets/oo2core_9_win64.dll
- Size 623KB
- SHA256 6f5d41a7892ea6b2db420f2458dad2f84a63901c9a93ce9497337b16c195f457
- MD5 cc81123b3396b838037113d230d31efe
- SHA1 b5120a64e2756eb99978a9ddc4fb36939a3d4cfe
- SHA512 8aad08bed85e0837a5593ccf1ae3bb2d9f25364c7cdf8c290e2ac3c33c019e7585f497f63c02ced97ea9aaaee850d7d3e454271ab5211f4a7506aa0c7f87437c
- SSDEEP 12288:cdAwMfEGT/SOqa61m1qdjOsLI4iVcwIBBih5m5JQgzFf/3FL5icE//rekCy:cdAwMfEGT/SBdkUBBihM5JQgzd346kCy
- TLSH
  T17FD47C92A2D151ECE2A78139CBABA253F3B13859032459F352B8DE752F4BED0633D705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Galaxy-Swapper-v2-main/Workspace/CProvider/CProviderManager.cs
- Size 4KB
- SHA256 b25b4025908bde31a8961b42667f7934e75fda1dd07056413a2292a27cc359e7
- MD5 9f43f65dfd8b588f47bbcc885d9b716a
- SHA1 81d43b2f393737272f039703fef9578752918c02
- SHA512 a3dc67977b8fae2fcb3806bc74c996854857c0ab4d8f5dd7b555989fd16caca82a55d63cf50077b3cae4ff8241ca92ae17f1bc73e59c81e8e4d6f1ea0fa7bea3
- SSDEEP 96:Vkj4YP26V/TcHLVr5v8QMp+Yg5K1WM6aBu5vBKKphoBlhKXtykGLL:VzDG/TcHLVrCzp+Yg5KIM6aMvKKp2BlV
- TLSH
  T109918714946749B719B39DEDFBC928403B1E16CB4255C9627ECC4114DF86C090EF5BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Galaxy-Swapper-v2-main/Workspace/CProvider/DefaultFileProvider.cs
- Size 6KB
- SHA256 eb7b39aa7adfeff6c46b18e0cfda05ff979469c3b6a6ca8a86394ce8a7dbec07
- MD5 0577b7d558c288f74097f21aebb1de21
- SHA1 a1b13070f74cddaaf1d0b1d0762c441b0b9f1102
- SHA512 1709ce49c7eea30b1883a4e038c7c263a3778504aa189ef3f5a6d8727a3c7a93d20245683fb97c3dc8f8597a5f8137de151b7b883232580811bef92bd2532a54
- SSDEEP 192:Fm+JEx6m4CtjGKGLjbaCEj/S5fB9y1oFqgCcvyuL6L7qub:r8dtyKGLfojOfuOfC2Q
- TLSH
  T1CEE1452B3A491C5A163BE4EC979F5080331ACA470189DD34BD9F964E6FC5018AFF1AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Galaxy-Swapper-v2-main/Workspace/CProvider/FIoStoreTocResource.cs
- Size 4KB
- SHA256 571aaa177e89ef807ad0ebb83b2fa4b4a66395da47e510f9517259de39bb7ec6
- MD5 d2d33a1e835550c1cea3384737fb7f3b
- SHA1 7bf5127ea6557372afaa1a2e0cc500307f227477
- SHA512 3e86be5401f8fe23fc5ea9de599b65db1daffa337cc8ad2109f51bac750eb2a4a1abc008170756693a86d0a7a7ed42ccb964d1217cb8c19150ab71932b8888d6
- SSDEEP 96:FUS0x9xo9/oko9I6O0jbhRBb0lbc4BBwiWTGobXngBcxzngB3Mdclb:Fv0xklo9Rb3BbUbc4BSiWTGIXguxzgdZ
- TLSH
  T1E291DF29A9563262308FE669EF970D0A27B552533447FC3C3B8C421E5FCA449CFD19E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery execution persistence
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral10 behavioral9
- Target
  Galaxy-Swapper-v2-main/Workspace/CProvider/IoStoreReader.cs
- Size 10KB
- SHA256 d7025f76345d9e73b0da10edb39e17b0b3900a202b63e7ac71047507dee93d4c
- MD5 608be82b5f3d1dc3f280b05c96a67ec5
- SHA1 cd240449efe5ce02dac9818d6b62d5f5a60541d8
- SHA512 efd898e5888b45d8b0a2c66bc3b4238f97c676b15a94fbf91a2ed22fe8d0d33315c4c29c501a3049cd5cfafa708e552dccc13ccb0db03605f7ec8292d3434e0a
- SSDEEP 192:9mDDBLZoN2fyDZCHXcZRggvs2gqTIPjC66dufyYqNAXZAD/Wzcvy3GZGcECqyBi1:6JqDZAXcZRbs0wkdufyYOLD/WIuGZGc8
- TLSH
  T13E2244265DA728A5119BE865FFF6A446177002071446F9B4BFCC832B6FC53988EF0BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Galaxy-Swapper-v2-main/Workspace/CProvider/Objects/FIoOffsetAndLength.cs
- Size 1KB
- SHA256 cee18e7aa4268254d971a0e87ac79d4051569106c04fd6d264bea6ba09781de7
- MD5 c4437173c8e7e4fa15fad6152e68f93d
- SHA1 40a2a407a5afaf2a1dd75eed8fb916c9011f9feb
- SHA512 2d2e33890afb3cd0dd379b581212a9908a0ecca7cfe658ac3923e3e32685993a76528e452d1188cbdae801f95e93d96eea58ce548672800563c86f98a5b2eb48
- TLSH
  T18B21663B0685061A96BFF3CCC1D50853367D322F9529DCAC350D48382F4BA51A463FCA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Galaxy-Swapper-v2-main/Workspace/CProvider/Objects/FIoStoreTocCompressedBlockEntry.cs
- Size 1KB
- SHA256 d456c8850bd40865fe4d587f9c486a6cb194c7e97fde7e7559111c97b57ed5dc
- MD5 2d5ab14519b7a5158c54dd5f19553cd4
- SHA1 377d6268e5c14043d0ff5b503da2bd54b6831130
- SHA512 d6aba67a949e49529ae6c7248a0e1a44a59550da2dd2f53b6a8eb82f076f58b27ff488570a44b595ef03dbdc70b85ffa23360faf7921c520ff4f66c95fda5064
- TLSH
  T187318B70055A2925200EE1CDDF49048B6AB5711B777FE98D371C92186FDE0D9ECA2AEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Galaxy-Swapper-v2-main/Workspace/ClientSettings/ClientSettingsData.cs
- Size 12KB
- SHA256 0b4db89f582a6ae697da5ede337a69bc72b9f2b68394aa1a7b153be52f47117c
- MD5 82137417e1ef70008a9bed84ddd67d1a
- SHA1 a1f08e0130482e720f668e5e80416fb5a9869eb2
- SHA512 9f1d6f2bb18b196d6b6bebeda95a8eaeb0c50d8bb96889b53dc2e81f4e1f36e92f0fe221fe9d513ec859250a5bc6382ba4ab4a270673b2213d0b3f2c0dca3606
- SSDEEP 192:2sfPOPdwzqYw2UUFHV1NPw2bNw26x072x2e8x2j2/Q1H2Y2/Yiy+I/ESCyR:jfZyEB6PWmcxItHN5h
- TLSH
  T1A742A4511AA3593643336038EF87D78AB77282177248EAB0BA4C815D1FCA48C87B47F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Galaxy-Swapper-v2-main/Workspace/Components/CMessageboxControl.xaml.cs
- Size 6KB
- SHA256 320fdb09e75022c29667551a1511f2344333d820c7898537417333851710487b
- MD5 33166e56e8a0b27df6c86d91be7dbacb
- SHA1 62fba1ff147b568783691c213c14c7a2579ef879
- SHA512 575f91d9bb62bde9a24c63f39b266aa165ea1f7fd5777b2cb6f2a5ed18f94bfc850affd2066dcf2ca2c922a1eddd178e6dac3a3545f7ac591da6f2621e81bfa5
- SSDEEP 96:wo2nQrzP1ocw7ZmmjqP2zKqDzN6Fb6vCMrunURjunORmlq0+KQj9:o1ZmmjL2FGvCMgUiOst+K2
- TLSH
  T17AE1C07D45451E2540B3A32EEF472647FF91611B522B28267FDC419A8FB089093B8FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Galaxy-Swapper-v2-main/Workspace/Components/CPluginControl.xaml.cs
- Size 4KB
- SHA256 07aefa8029d4d7b6d484341447f0a49fb823ba529be2e4882b4797ad8dba3a6e
- MD5 62a8fccc6b29081edd025d2421a1ba78
- SHA1 d4c8f79ea9452329473f40e3d5a22d36a36ce248
- SHA512 6324130cb09f6cb3dbf6325f5150170be39429641614bc93f3f04e19e692de2a9a47bd230bc45bedf85e5af65115d1695920c213ca28f6acf3113070b42e185d
- SSDEEP 96:joUzP1VrtX+0brUG7GHSg+yU3x3XnyU3x3XwKkoS1sM:F+0brZGHhvUhnyUhnwKkoSsM
- TLSH
  T10191756A110A6B1942FBD11CCE994D4AFFE8564B1B6794293BBC11904F70C7013B2F7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Galaxy-Swapper-v2-main/Workspace/Compression/gzip.cs
- Size 1KB
- SHA256 251ff6896599d616d3f972bd06bb1fb6cb2306448cc19bb78d53d4ae71c8d7b9
- MD5 a48be6706800fce2a2d5b8294655e44e
- SHA1 573182d545a5a839536412fff9e9a5f8e4d3935a
- SHA512 3eae9d8216f41f988a311f4ba51fa3b6e60dc8d1e2f7fc284760800ae33f623e7e8df1f7d5da7776d62422980495dc96fa204407fbcc7a6734c6d56008f0d083
- TLSH
  T138314B382EABDA6A1253E4715F05C71CB371662371598CD8B68E95008F154686DB0BFC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Galaxy-Swapper-v2-main/Workspace/Compression/zlib.cs
- Size 1011B
- SHA256 7b873221db376961e6cbd11dd80439aa8fe05c3c39362e4966ffaac7001fe53f
- MD5 f1feb37823a7be13cef89b03bddea929
- SHA1 48584321caf63d3d495f84a67c435e20b983c1b8
- SHA512 8616e0a9885605f521b872e281727ee99266d18ac818abf8ee6ea948783864f919bd9926737a4ae7b9b4edf8c6004a33f2348d398b9241e667972d1776593d35
- TLSH
  T14411D2340DBADBB53283A8229F1AC75C737122133299DD89F99E511D4F4541CADA07ED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Galaxy-Swapper-v2-main/Workspace/Generation/Generate.cs
- Size 12KB
- SHA256 842a6eabe22881d5b12a71f89ea326070f35195b22d873113f6ab7bbda127045
- MD5 0c0de6f4fcd0e325a7c0ab8bad05d84a
- SHA1 464413c6075a33b804a419d3f0fb258808861efd
- SHA512 c6bd17ab3081acffbab651a8948cf847f8a0dd04d4e1b45acc91ed94b0f5d2b8dfedd883ee7cd05a8f4664ee563ccda0087ee1cfa06a7f1d56a12aedced27ed6
- SSDEEP 96:ZG4hOU2nz8IKtKxjQgtup7m8EjtHNRusKkC1IL5QDgXwB7d+FDZ2eBF74nJpML:Hiz8IKtKxM7ItR3KkdLYit4nJpML
- TLSH
  T1C942431956015B6F1D377A38ED450158CB6B82A3013A17BABD9CE9085FF3C2843B9F9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Galaxy-Swapper-v2-main/Workspace/Plugins/Compression.cs
- Size 5KB
- SHA256 bfb3452b9e2be9fe233ed2dacf443d398b31714a6326a0f360c616e7fea134c8
- MD5 c09c32e2ca18479b69aa8d64c43f20e9
- SHA1 3634724f76ae496b9f086f6d11efdbc87c2be9e6
- SHA512 92161bf4473984b48f8d5f882170948a2516547e072236bad8da4f63e29d3dac189158e1d02189bf9dc676086b0f9042d9ebcb2cca121e07cbc0ad06480fdfa9
- SSDEEP 96:ajPX2UhlaGzC9/W0PJN0S7yYpzRnKGC96jQjuyL:yRC10ehzRnKGC0QuyL
- TLSH
  T19AB10F369967CD95826794659F2AC1AD7710B3036248CEE4B7CC831D8F9D64CCCE1AE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Galaxy-Swapper-v2-main/Workspace/Plugins/Plugin.cs
- Size 4KB
- SHA256 2a2e1588ebd8ca2a6b678dd41bffc866775a556baf479b057b9d5ee7d6f55058
- MD5 50721a115144e89eac696ca8e3c29995
- SHA1 cf0cc99c9a14d463068e855b78a3010f784e1f66
- SHA512 ad4611f8fa6c5313741dad67e2fdfab258fc1c17943968db3fb3983bb2a6cf32896120061da9aa4dd4806fb13fdff004eda1e1c496f44368d8e7af42494813be
- SSDEEP 96:Yj4YPFma1xkg6SkdB7Wppn6q9pWPx1jfL:fQma1xkPdBS7n6qPWPx1rL
- TLSH
  T1F2910D315D4B5CA8466BA06A4F8EC4C833B4B7A76348CA61BA6C87185F8561C4AF17E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

discoveryexecutionpersistence

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy