1143a96dba9d7390026666f1a69eacabc89805c4e1effac407ca14fb4529e8c0 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

1143a96dba...c0.exe

windows10-2004-x64

7

1143a96dba...c0.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ID.dll

windows10-2004-x64

3

$PLUGINSDI...ID.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

QcClip.exe

windows10-2004-x64

3

QcClip.exe

windows11-ltsc_2024-x64

3

uninstall.exe

windows10-2004-x64

7

uninstall.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

vcruntime140.dll

windows10-2004-x64

1

vcruntime140.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
1143a96dba9d7390026666f1a69eacabc89805c4e1effac407ca14fb4529e8c0
Size 14.7MB
Sample261102-e5kfyszygy
SHA256 1143a96dba9d7390026666f1a69eacabc89805c4e1effac407ca14fb4529e8c0
MD5 08c21862b677d5e26a8a9db9f3d57f7f
SHA1 6a14acaf75ab201c1cf71b4defadb63ca8e1fa63
SHA512 1eba72127dcc745f41187ce1ad8fd13f9340f3b68eea23efa8dd34af7bdca2f4950a2f4e60dda959acd69e09da12b8fd7212e39769877d2c49aebd0e422f7f10
SSDEEP 393216:dFIM9jvDjiMh3vWa+FdV+MaVsb2a/vARfYF/:dFIMxvVZWx7cu2wF/
TLSH
T1BBF6338824C4D563FCFB1C3C69DA8356D422A6D22938693F4E6BE75091AFC9BF6050D3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1143a96dba9d7390026666f1a69eacabc89805c4e1effac407ca14fb4529e8c0.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

1143a96dba9d7390026666f1a69eacabc89805c4e1effac407ca14fb4529e8c0.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/ApplicationID.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/ApplicationID.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsis_tauri_utils.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsis_tauri_utils.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

QcClip.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

QcClip.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

uninstall.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral16

Sample

uninstall.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral17

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/nsis_tauri_utils.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/nsis_tauri_utils.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

vcruntime140.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

vcruntime140.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  1143a96dba9d7390026666f1a69eacabc89805c4e1effac407ca14fb4529e8c0
- Size 14.7MB
- SHA256 1143a96dba9d7390026666f1a69eacabc89805c4e1effac407ca14fb4529e8c0
- MD5 08c21862b677d5e26a8a9db9f3d57f7f
- SHA1 6a14acaf75ab201c1cf71b4defadb63ca8e1fa63
- SHA512 1eba72127dcc745f41187ce1ad8fd13f9340f3b68eea23efa8dd34af7bdca2f4950a2f4e60dda959acd69e09da12b8fd7212e39769877d2c49aebd0e422f7f10
- SSDEEP 393216:dFIM9jvDjiMh3vWa+FdV+MaVsb2a/vARfYF/:dFIMxvVZWx7cu2wF/
- TLSH
  T1BBF6338824C4D563FCFB1C3C69DA8356D422A6D22938693F4E6BE75091AFC9BF6050D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/ApplicationID.dll
- Size 198KB
- SHA256 f6851dcbf0a39edecd8a46564bc455e5273736c3dbcb02b954c201c79ccdf117
- MD5 91c2e2f34b5bba068e9a6178e13a4e5c
- SHA1 affcac00894c9afd152e55d0bff7899349edcd6c
- SHA512 ce7f629bc0e6e10eca9d671513062f353d8d47666df58c9ad7cc7f767df520b75b2da1f9d6551eae86c738455919463ec89a0c3dc2a8366fa021e6fa6e292000
- SSDEEP 3072:/1RnVZfr2qLTV4U3fKHzy/s3fyitDJXqtZnyj80mAg0FubAPl/IJ:/Hnzfr7HU6ipJaLAOKy
- TLSH
  T1B8149F11B491C172D1BF16340979DAA65A3C7D600BA88AEFA7D84D3E4F781C06B31BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 110545415a59402635e1c9439acba15b44bab268ed02ad2a262ce12604a47855
- MD5 a8c86996c4230c2209f5927f21321377
- SHA1 45ce0ab93cb6a3a594e54878cce05df724024393
- SHA512 69ee73496b916777936b0dddd2cc4a4f916e393f7d0b167cba77a4a239ee1e3f645d9b90dee1627c42a23eb6c3403e4d086546b9f78b3a2e4999c8f92f6a3bc3
- SSDEEP 96:mIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/23lkCTcaqHCI:bhE+A0+sF6piUFkAylncviI
- TLSH
  T154F1C776F3D20673F9AB427428632F231B2AF521576581A6490316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH
  T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
- MD5 1d8f01a83ddd259bc339902c1d33c8f1
- SHA1 9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
- SHA512 28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
- SSDEEP 96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
- TLSH
  T12A120992E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 1.1MB
- SHA256 0eed48313a7f904d7cc1977b70000ab3f11f18cadc8e6a69b807d288ca71f9db
- MD5 1e38f56aba852b737f2866c48b823165
- SHA1 53a7cfaeb6a4a9653d6d5fbff02a3c3b8720130a
- SHA512 5cbf6ca67aee29f5afbbaf57a72eb58e8f85b692e69aa5acd5817b00dc6948486189a8e74f4fcae302e9c453cc770eef78b3ffa70a914d911246e5b4992fc9a4
- SSDEEP 24576:wSi9LsLAEnNUYZbeC4JwA9HU7Ncot2O/rBWDTRYQn652FOVE5TmcnlgVIH06iyQ:di9Y/W07NP/eTRPLD1n2IU6i3
- TLSH
  T1E545AD81FAC29AB1C94F1674105FE33BAB3558084756CFE3D7809E31F8673A25DA929C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  QcClip.exe
- Size 45.3MB
- SHA256 10220f3ed5380c646aa82c2e111f88eb65412621d78f0b57e4d407014e132fbb
- MD5 fdee57837851a7ea26da38f66a7b4980
- SHA1 8a8629d3216e25e3e78c8a6553b8b3400961895c
- SHA512 c29e6d24eed36001dc658494063bdc7ecae9be827d0eb6e40a8d1fb5e06190a4357d17007f5e764fb91b47c7669b3876424f1bf835d5037895292bcb4c01f5e3
- SSDEEP 393216:oah2aZwRf1tl5tvLR8VD7bcVCuJDk1yFU/xHyTPfCizz5iVJb+l2N:Bh2caf1tl5tN8VDc/5q62
- TLSH
  T17EA77D47F7A280E9C46AC07986476732F7317C4A4224B6A77BDC8B203F51BA8573E749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  uninstall.exe
- Size 760KB
- SHA256 2f24dcdd9485a4e6f39e6ddcd25981b9d6bc303f4c48b9b683f469c655a6b684
- MD5 03888f66e9806cecd18fc0c630849b1e
- SHA1 0f2f7c95e863ca96acc17f04ff27c42a9be7556a
- SHA512 9e2aa29b841db5bd72612e392c4e01c92473c7e881f3073cbd297b5eca7e7cdf22c3d18cc7b9a8c96de666b148306f44427ae5e9d8d9524cba582d39c1234834
- SSDEEP 12288:vnPdU1QNTj1vClJNFGkyauGpFu3RdYcdUrsePR7pfXLTJgKlEalTXDsSLic8jXxq:fPdfCljFRrK3RdYeUrtNXLlp+aJXtd8I
- TLSH
  T1EBF423A4A634C453CD2777308D3A977A8F74AA65201D23071F60DF96ADAB9D00D387E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Deletes itself
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
behavioral15 behavioral16
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
- MD5 50016010fb0d8db2bc4cd258ceb43be5
- SHA1 44ba95ee12e69da72478cf358c93533a9c7a01dc
- SHA512 ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
- SSDEEP 48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
- TLSH
  T113C18370F3D248B9C5D1413778A732D36612AE74A784504F9B6315AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH
  T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 1.1MB
- SHA256 0eed48313a7f904d7cc1977b70000ab3f11f18cadc8e6a69b807d288ca71f9db
- MD5 1e38f56aba852b737f2866c48b823165
- SHA1 53a7cfaeb6a4a9653d6d5fbff02a3c3b8720130a
- SHA512 5cbf6ca67aee29f5afbbaf57a72eb58e8f85b692e69aa5acd5817b00dc6948486189a8e74f4fcae302e9c453cc770eef78b3ffa70a914d911246e5b4992fc9a4
- SSDEEP 24576:wSi9LsLAEnNUYZbeC4JwA9HU7Ncot2O/rBWDTRYQn652FOVE5TmcnlgVIH06iyQ:di9Y/W07NP/eTRPLD1n2IU6i3
- TLSH
  T1E545AD81FAC29AB1C94F1674105FE33BAB3558084756CFE3D7809E31F8673A25DA929C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  vcruntime140.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH
  T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

defense_evasiondiscovery

behavioral16

defense_evasiondiscovery

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy