4965cccdc73a8a8182aa70bf0387a86e3b6b215bb1db2118767c5da0821ed21f | Triage™

Login
Reports

Overview

overview

4

Static

static

1

Wooting.Ba...up.exe

windows10-2004-x64

4

Wooting.Ba...up.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows11-ltsc_2024-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

wooting-bg...ce.exe

windows10-2004-x64

4

wooting-bg...ce.exe

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

Target
Wooting.Background.Service_0.5.1_x64-setup.exe
Size 5.9MB
Sample261024-x1a1tswwfx
SHA256 4965cccdc73a8a8182aa70bf0387a86e3b6b215bb1db2118767c5da0821ed21f
MD5 58b210fad4571ab96cd6c3ac42d5d9b5
SHA1 1f8b8a9c486cc16b17dd951f1ca8fe4a51068da7
SHA512 9e3cc0e617589c32a612df0051697c2c35e7f663e0a5090b6fc6e20de2d8890162d1516052dcea2dcc137fce0dab6ea4922a53662aa3e30acb3c41bdfdb8942e
SSDEEP 98304:GPyhH3C450SMuGIcG+/EVkVue/golgMvW2XaSXWTvjEiNJ/QmfrBQnKS5:GWy4euKzcqgAZXaS2QsJVByKG
TLSH
T18D56339099B0DC26D2AB5DF88CBCE67C8532F8B3752CB12787D81985752B4CAD560B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

defense_evasion discovery

Static task

static1

Behavioral task

behavioral1

Sample

Wooting.Background.Service_0.5.1_x64-setup.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Wooting.Background.Service_0.5.1_x64-setup.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/NSISdl.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/NSISdl.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/nsis_tauri_utils.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/nsis_tauri_utils.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

wooting-bg-service.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral16

Sample

wooting-bg-service.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

defense_evasion discovery

Malware Config

Targets

- Target
  Wooting.Background.Service_0.5.1_x64-setup.exe
- Size 5.9MB
- SHA256 4965cccdc73a8a8182aa70bf0387a86e3b6b215bb1db2118767c5da0821ed21f
- MD5 58b210fad4571ab96cd6c3ac42d5d9b5
- SHA1 1f8b8a9c486cc16b17dd951f1ca8fe4a51068da7
- SHA512 9e3cc0e617589c32a612df0051697c2c35e7f663e0a5090b6fc6e20de2d8890162d1516052dcea2dcc137fce0dab6ea4922a53662aa3e30acb3c41bdfdb8942e
- SSDEEP 98304:GPyhH3C450SMuGIcG+/EVkVue/golgMvW2XaSXWTvjEiNJ/QmfrBQnKS5:GWy4euKzcqgAZXaS2QsJVByKG
- TLSH
  T18D56339099B0DC26D2AB5DF88CBCE67C8532F8B3752CB12787D81985752B4CAD560B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 25KB
- SHA256 856a5212b160840ab35c7ed568d98307551e1818c931e3e75adcb9aaf5154feb
- MD5 eab54cf33474d3af1131f0aac04c1c58
- SHA1 5ba1a5f871c76f074a5e5359f2fbea78c55378d9
- SHA512 5e1e8e02717911a20834482d16707322d980001cfd43c27cee30fb9d2990eb21be65191a0952b140e969a8d682aba714d8762c200361473736ee765da54f6f2d
- SSDEEP 384:brSQMCOUILnCaSPy/yhJzmGSMRWyOUKie7NyAmL4D6ki2NrA+LWlTiA25ghB:brSQMCOp0yamMRWysieaLz2NrA+s+3e
- TLSH
  T149C2AF17A92044F2DF521A7030D63A3B6EF2DF9229A448C38BB7884D8F5134377BD889
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 17KB
- SHA256 bb19db8b385b1f4f43fb19d0746170edfe4709c78c0d5591a8faa1cf4aabf11a
- MD5 7dd040daef9795c979656f10c8e20fb0
- SHA1 6bbbd61b4f9446741b9c4ef26034e044c6ba0127
- SHA512 5e365cc913e9ea4899f14bfc1440029ea29db59fa0daf2291dcfec2d935ed8c250944b6ba6da156a735b326321bdea4883632bd3d03c2e4e0db4a4bc6471b151
- SSDEEP 384:HuTF64UqAfncvr5NyAmL4D6ki2NrA+LWlTiA2yR7Ui:OTF64XILz2NrA+s+32
- TLSH
  T165826C77A9D00563EB4B9A7070D66A236FB9B24227A480D35407828D1BA07D3BF7C719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 22KB
- SHA256 4af4492118210b510271fafbd8a24affff9bbda04078aa6dfe986effb8c5476a
- MD5 d33341fe75eff6b4667a2624d474ef9d
- SHA1 84b12285434faca738116d69584dfb4017c2c51f
- SHA512 d8d172dcf46315caca97ef0b89311d701cc3afcc96cffa696e49f027e49d0073b95c15c3e68831aaf50940d1dbda9e2abce6fad7fd0e4a02422f9e05c9e413f7
- SSDEEP 384:l/Qlt7wiij/lMRv/9V4b4rlNyAmL4D6ki2NrA+LWlTiA2BSKUwT9:laeiijipN8Lz2NrA+s+3/
- TLSH
  T112A28F134B6048F3FB429D3460D8AE275FBEBA4626E444D3DBA781855E603C72EBD187
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH
  T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 19KB
- SHA256 88fe12b665c2bb5cae5fbba6e8fa0b89ffe1e0a58cd706fc0938e7d80c497c2a
- MD5 40b5187402cbbe60f0143ad85b4d2eb2
- SHA1 a0b12b84d91fb5f248eeb3e42c9fbe09267ddca5
- SHA512 d4cf29b96befc5c3b16b5f30cecc7de127dbfbfbef94f3ac73a66ca767ee9c6e7c4efe5d75579ee05c6592ab29574d3c584b43c320d896e5b57af07b8cd592bf
- SSDEEP 384:9A7k8985U30WAw0htIFcmNyAmL4D6ki2NrA+LWlTiA2NeKbR:mNi5U3/Aw0f1Lz2NrA+s+3NT
- TLSH
  T17E926D5394641873DB879A3A70D85A2FDEBD6342B1D05C82D227C6492A743E23F7C38B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 43KB
- SHA256 cdb27369ca77d7ed080c23276f543a1a7319b095ffde1bab404e0b06db9d8fc5
- MD5 16097772736a223277cb3e1b69ba16db
- SHA1 a1a85619640a2cc645362239442e0bdba67195e4
- SHA512 61a0c97f6d3be346f59bd50d3d335fb75adc6f9c837c9cd0f120a19169f70997edb0acc1e9027f54bd2a9e9c657fcc92857c7dfd87a3c7335e80020f3f8be31b
- SSDEEP 768:J/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVGlLz2NrA+s+3JEs:RwODZzTrAV5Oevq4DtXHVGZh+Ks
- TLSH
  T1CB137B08FDC52E66E7CF09711488453F4A7FC9082750C9A7E3625E92C9A2332AFD925F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  wooting-bg-service.exe
- Size 24.3MB
- SHA256 87c33777d726b3f7f0866a81df536cc98f50de9c25fc6f8ea85ef568dedc4517
- MD5 7557f3c9f8154d4123ff9816d719b159
- SHA1 5bed5f0c913d838797236250ca343db00ee3f993
- SHA512 b0516597c7521b70c201e31170feca66c88c6732dd8449fa2f46f9b6356a80c78bced4bcd2ab731b9ed2b1a8f04966a40bd0e2ac763f80ed3919da5cbbfa2e7a
- SSDEEP 393216:jXYw0Q1An5F1R0czbS7rde1/M6FbUCC/4ASj8PkS:jXYw0Q1An5F1R0cvS7rdeZC/4JSkS
- TLSH
  T1554707247A5A9968D09BC47483478AB25A7130DB0B35B9FF44C496392F7EBF42F38358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion discovery
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

defense_evasiondiscovery

behavioral16

defense_evasiondiscovery

© 2018-2026

Terms | Privacy