Resubmissions

02/11/2026, 15:19

261102-sqlblaxs6j10

02/11/2026, 14:52

261102-r85yaaay4y10

02/11/2026, 14:22

261102-rplqaswz6m10

General

  • Target
    Gajim-2.6.0-64bit.exe
  • Size 152.1MB
  • Sample261102-sqlblaxs6j
  • SHA256 ac99c3e04a1282cc47346b75bcc597062a2d4ab4e246d32b52290a7821b4251c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Gajim-2.6.0-64bit.exe
    • Size 152.1MB
    • SHA256 ac99c3e04a1282cc47346b75bcc597062a2d4ab4e246d32b52290a7821b4251c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__init__.py
    • Size 216B
    • SHA256 c0709b59f69e7daf9f93a4c74b0f6d87d7c952c4ad268ef6e39c1f141aa676e0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/__init__.cpython-314.opt-1.pyc
    • Size 235B
    • SHA256 4db731f2db221b2f41d99a5efb06606cf552eed1ea035af07a0c7490219429f2
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/__init__.cpython-314.pyc
    • Size 280B
    • SHA256 50ce896a867a810cf55b0f3c1af0b009ce753a2f496ed59b849d13af912bff1d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/_conditional.cpython-314.opt-1.pyc
    • Size 8KB
    • SHA256 4aba829c8d716fcafd8459ec9e37c791e48c0e0c2880e5d1eb06061ec792d48e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/_conditional.cpython-314.pyc
    • Size 8KB
    • SHA256 1ff80a19c520667ed671c1a3d951c79a83e648df2b8fbe6c4d3c12e6e127a1ce
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/binding.cpython-314.opt-1.pyc
    • Size 5KB
    • SHA256 2f4b3349a482d978592bf10b6ce4f1100e366906bc267743ba8fd5a720f4cf2f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/__pycache__/binding.cpython-314.pyc
    • Size 5KB
    • SHA256 dd0ac6ea1fdb8661d3bb111560201a880aea188c4a2b5cc8d027d7bdadbc111a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/_conditional.py
    • Size 5KB
    • SHA256 bdfce2fb11dd4ad01c2508cbaaa3a54a8b3de0bf03feda85b417bb3afc3e2ad6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/bindings/openssl/binding.py
    • Size 3KB
    • SHA256 16cb8bc5b4e7aea5bad3e7405ad6a482e7deabb4e7a9a41a8b53dcec3a30ae3a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/__init__.py
    • Size 216B
    • SHA256 c0709b59f69e7daf9f93a4c74b0f6d87d7c952c4ad268ef6e39c1f141aa676e0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/__pycache__/__init__.cpython-314.opt-1.pyc
    • Size 227B
    • SHA256 5cb3f5aebbac5bd50e7c3d55fe508d0d0827cbb73b521f18e715ea5e9a3b8f3a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/__pycache__/__init__.cpython-314.pyc
    • Size 272B
    • SHA256 2528117b402bf726d7a0b674bfd2712c180d35831aad40c0cfbe97127ccdeb04
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/__init__.py
    • Size 216B
    • SHA256 c0709b59f69e7daf9f93a4c74b0f6d87d7c952c4ad268ef6e39c1f141aa676e0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/__pycache__/__init__.cpython-314.opt-1.pyc
    • Size 235B
    • SHA256 a5f092421416a684eb031cbe2011ff28abf2b1c590af274262b75cfd7d995549
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/__pycache__/__init__.cpython-314.pyc
    • Size 280B
    • SHA256 4643989f8e9524b6ce3a2586870b3f9a105b6a9c50bf90203e756144a21ab250
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/__pycache__/algorithms.cpython-314.opt-1.pyc
    • Size 7KB
    • SHA256 485bfb697543db1339d7240202ce9ae3ca89c78c1b07b8412d3b2dac0951742a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/__pycache__/algorithms.cpython-314.pyc
    • Size 7KB
    • SHA256 e3e14a5ddcfe3632d22e2f77496332d7075edc060c9cc112ff76c5388912ed76
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/__pycache__/modes.cpython-314.opt-1.pyc
    • Size 2KB
    • SHA256 1c4bcc17b718eb602609591e3e53c2e265d85b64868aff705574c98008c4bcd4
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/__pycache__/modes.cpython-314.pyc
    • Size 2KB
    • SHA256 f6e05418e0d971cb064e219f7f6c9814110aa619653e7caf4ca7a2c8585d9f1e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/algorithms.py
    • Size 3KB
    • SHA256 5923e3336b177eb2c35ebb4de51ecdeab0355c5edbf772357bf96f0f8cb1da80
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/decrepit/ciphers/modes.py
    • Size 1KB
    • SHA256 3aafcf1300a47b938b73339faffbf300e27ac0fc7eae5b2f1c05cf06e8796fda
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/primitives/__init__.py
    • Size 216B
    • SHA256 c0709b59f69e7daf9f93a4c74b0f6d87d7c952c4ad268ef6e39c1f141aa676e0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/primitives/__pycache__/__init__.cpython-314.opt-1.pyc
    • Size 229B
    • SHA256 9dc8039b12c01bcaf5972c675771b20e1f14c8d91751dcc5156b39009dff2088
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/primitives/__pycache__/__init__.cpython-314.pyc
    • Size 274B
    • SHA256 647f5d5832aac80679ca44048d033030977daf06caf85f9a107cd1c97711e020
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/primitives/__pycache__/_asymmetric.cpython-314.opt-1.pyc
    • Size 993B
    • SHA256 a214c0638fe8a44e509d64f9f4fe77c177a33f7256a071465f469d0575b98c34
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/primitives/__pycache__/_asymmetric.cpython-314.pyc
    • Size 1KB
    • SHA256 5f40c983f4730e7974eacca8fd35c6884cd40fd0407856b40f51547dcc79674d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/primitives/__pycache__/_cipheralgorithm.cpython-314.opt-1.pyc
    • Size 3KB
    • SHA256 3db212516b6b807d095001275b4ef6f6f78869852f7a06bbee76710a1d782957
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/primitives/__pycache__/_cipheralgorithm.cpython-314.pyc
    • Size 3KB
    • SHA256 912f04d7b3986103688f958ec6c97eae04752f2ff2e88063bdf253bb82c9b7dc
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/primitives/__pycache__/_modes.cpython-314.opt-1.pyc
    • Size 6KB
    • SHA256 f710102f310266d53b7d8f0811e697ea9adaef6fe378109c6d54bf1e9517890e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/primitives/__pycache__/_modes.cpython-314.pyc
    • Size 6KB
    • SHA256 029ed8589562ff607b55001294f35a417e39d08e9e97ed6769e2cb30d3524d8d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      lib/python3.14/site-packages/cryptography/hazmat/primitives/__pycache__/_serialization.cpython-314.opt-1.pyc
    • Size 6KB
    • SHA256 37bb23c59488ed25e16011d31fbc1232ed90a908a1bb00dc0c41cec4bc3e71d6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

pdfevasionbackdoorberbew
Score
10/10

behavioral1

Score
7/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10