Overview

overview

10

Static

static

10

Gajim-2.6.0-64bit.exe

windows10-2004-x64

7

Gajim-2.6.0-64bit.exe

windows11-ltsc_2024-x64

7

lib/python...t__.py

windows10-2004-x64

3

lib/python...t__.py

windows11-ltsc_2024-x64

3

lib/python...-1.pyc

windows10-2004-x64

3

lib/python...-1.pyc

windows11-ltsc_2024-x64

3

lib/python...14.pyc

windows10-2004-x64

3

lib/python...14.pyc

windows11-ltsc_2024-x64

3

lib/python...-1.pyc

windows10-2004-x64

3

lib/python...-1.pyc

windows11-ltsc_2024-x64

3

lib/python...14.pyc

windows10-2004-x64

3

lib/python...14.pyc

windows11-ltsc_2024-x64

3

lib/python...-1.pyc

windows10-2004-x64

3

lib/python...-1.pyc

windows11-ltsc_2024-x64

3

lib/python...14.pyc

windows10-2004-x64

3

lib/python...14.pyc

windows11-ltsc_2024-x64

3

lib/python...nal.py

windows10-2004-x64

3

lib/python...nal.py

windows11-ltsc_2024-x64

3

lib/python...ing.py

windows10-2004-x64

3

lib/python...ing.py

windows11-ltsc_2024-x64

3

lib/python...t__.py

windows10-2004-x64

3

lib/python...t__.py

windows11-ltsc_2024-x64

3

lib/python...-1.pyc

windows10-2004-x64

3

lib/python...-1.pyc

windows11-ltsc_2024-x64

3

lib/python...14.pyc

windows10-2004-x64

3

lib/python...14.pyc

windows11-ltsc_2024-x64

3

lib/python...t__.py

windows10-2004-x64

3

lib/python...t__.py

windows11-ltsc_2024-x64

3

lib/python...-1.pyc

windows10-2004-x64

3

lib/python...-1.pyc

windows11-ltsc_2024-x64

3

lib/python...14.pyc

windows10-2004-x64

3

lib/python...14.pyc

windows11-ltsc_2024-x64

3

Resubmissions

02/11/2026, 15:19

261102-sqlblaxs6j10

02/11/2026, 14:52

261102-r85yaaay4y10

02/11/2026, 14:22

261102-rplqaswz6m10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Gajim-2.6.0-64bit.exe
  • Size 152.1MB
  • Sample261102-r85yaaay4y
  • SHA256 ac99c3e04a1282cc47346b75bcc597062a2d4ab4e246d32b52290a7821b4251c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
berbewbackdoorevasionexecutionpdf

Malware Config

Targets

    • Target
      Gajim-2.6.0-64bit.exe
    • Size 152.1MB
    • SHA256 ac99c3e04a1282cc47346b75bcc597062a2d4ab4e246d32b52290a7821b4251c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__init__.py
    • Size 216B
    • SHA256 c0709b59f69e7daf9f93a4c74b0f6d87d7c952c4ad268ef6e39c1f141aa676e0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/__init__.cpython-314.opt-1.pyc
    • Size 235B
    • SHA256 4db731f2db221b2f41d99a5efb06606cf552eed1ea035af07a0c7490219429f2
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/__init__.cpython-314.pyc
    • Size 280B
    • SHA256 50ce896a867a810cf55b0f3c1af0b009ce753a2f496ed59b849d13af912bff1d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/_conditional.cpython-314.opt-1.pyc
    • Size 8KB
    • SHA256 4aba829c8d716fcafd8459ec9e37c791e48c0e0c2880e5d1eb06061ec792d48e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/_conditional.cpython-314.pyc
    • Size 8KB
    • SHA256 1ff80a19c520667ed671c1a3d951c79a83e648df2b8fbe6c4d3c12e6e127a1ce
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/binding.cpython-314.opt-1.pyc
    • Size 5KB
    • SHA256 2f4b3349a482d978592bf10b6ce4f1100e366906bc267743ba8fd5a720f4cf2f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/binding.cpython-314.pyc
    • Size 5KB
    • SHA256 dd0ac6ea1fdb8661d3bb111560201a880aea188c4a2b5cc8d027d7bdadbc111a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral15behavioral16
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/_conditional.py
    • Size 5KB
    • SHA256 bdfce2fb11dd4ad01c2508cbaaa3a54a8b3de0bf03feda85b417bb3afc3e2ad6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral17behavioral18
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/binding.py
    • Size 3KB
    • SHA256 16cb8bc5b4e7aea5bad3e7405ad6a482e7deabb4e7a9a41a8b53dcec3a30ae3a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral19behavioral20
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/__init__.py
    • Size 216B
    • SHA256 c0709b59f69e7daf9f93a4c74b0f6d87d7c952c4ad268ef6e39c1f141aa676e0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral21behavioral22
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/__pycache__/__init__.cpython-314.opt-1.pyc
    • Size 227B
    • SHA256 5cb3f5aebbac5bd50e7c3d55fe508d0d0827cbb73b521f18e715ea5e9a3b8f3a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral23behavioral24
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/__pycache__/__init__.cpython-314.pyc
    • Size 272B
    • SHA256 2528117b402bf726d7a0b674bfd2712c180d35831aad40c0cfbe97127ccdeb04
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral25behavioral26
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/__init__.py
    • Size 216B
    • SHA256 c0709b59f69e7daf9f93a4c74b0f6d87d7c952c4ad268ef6e39c1f141aa676e0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral27behavioral28
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/__pycache__/__init__.cpython-314.opt-1.pyc
    • Size 235B
    • SHA256 a5f092421416a684eb031cbe2011ff28abf2b1c590af274262b75cfd7d995549
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral29behavioral30
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/__pycache__/__init__.cpython-314.pyc
    • Size 280B
    • SHA256 4643989f8e9524b6ce3a2586870b3f9a105b6a9c50bf90203e756144a21ab250
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

pdfevasionbackdoorberbew
Score
10/10

behavioral1

Score
7/10

behavioral2

Score
7/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10