General
- Target Cline_0.0.49_x64-setup.exe
- Size 127.3MB
- Sample261104-vxethaea82
- SHA256 fa2242d743e2b75d422c16cfab4d534a1c2bc687ec73572be643a6d34663bcba
- MD5 2340825c56fcf7092fe4270404644619
- SHA1 9143ee9dc871d38ea1c8faed227acd2405fb72d6
- SHA512 e5b92bc60558004974e3ef88f0888b5c2a78b05a74e2d137b8cd69381671fcd184a50e4c5ce960848f884ac0a2f025f2ca43323acb2df13039d1b50d80b4db4f
- SSDEEP 1572864:aS9zXILc3W2fOpr05VpDK+MyvULAKHkrAfzHwdWSYQg0chtyZpj5r1EHzP/oCePC:ao0c3SpMDRkkrqH/0cPyZjr12PZel/G
- TLSH T1E958335F423E5C38E5AB2AF233125E26487028D5D09F279BCCFB15635B35942BC762CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Cline_0.0.49_x64-setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Cline_0.0.49_x64-setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
cline-app.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
cline-app.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
cline-cli.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
cline-cli.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Cline_0.0.49_x64-setup.exe
- Size 127.3MB
- SHA256 fa2242d743e2b75d422c16cfab4d534a1c2bc687ec73572be643a6d34663bcba
- MD5 2340825c56fcf7092fe4270404644619
- SHA1 9143ee9dc871d38ea1c8faed227acd2405fb72d6
- SHA512 e5b92bc60558004974e3ef88f0888b5c2a78b05a74e2d137b8cd69381671fcd184a50e4c5ce960848f884ac0a2f025f2ca43323acb2df13039d1b50d80b4db4f
- SSDEEP 1572864:aS9zXILc3W2fOpr05VpDK+MyvULAKHkrAfzHwdWSYQg0chtyZpj5r1EHzP/oCePC:ao0c3SpMDRkkrqH/0cPyZjr12PZel/G
- TLSH T1E958335F423E5C38E5AB2AF233125E26487028D5D09F279BCCFB15635B35942BC762CA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target cline-app.exe
- Size 17.8MB
- SHA256 9507badbadf78edcfa9d17cfb95c5df85d7d212defdc4a49405d10d5c7404c3f
- MD5 499611698483dbc418104ae0d961f0ee
- SHA1 f9b4ac075e93fb00bdeb62830b2d57a850df0d63
- SHA512 2263990035b29857dfda195cb4de500f45e921f23c60270ddcc66b0dd2d19d70b413ed34f1ea295f02bac00ec81b84cb3aa756d96e8d68723744f11cb0a51054
- SSDEEP 393216:hsg89hYuSUaW2cnzp1JJJJjIJJJJJmRZNtqk9:aT912cn9bz
- TLSH T1F01749257A5A9968D09BC4B483478A660A3134DB0B35B9FF44C4923D2F7EBF42F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target cline-cli.exe
- Size 136.6MB
- SHA256 2b5c37a383355c70a7021de4bf68e3b14408e119d8055826bde6988f1fd56962
- MD5 294bbe3918739ccf919fb0fab16e2e41
- SHA1 1cc2ea7e47432e84107dbdb28961f32955cf8cfe
- SHA512 bcfe1179a2ec50927864c48f25a05b6a295fdcdebd2981e0634af867c42af5ded6848ac6faa43c8e694335d0395ee946b7259befbcea8a5193e46620194bca7f
- SSDEEP 1572864:ZpxkLxJCmQSFJHVigeQ7Qz7KjsR6NsTrJz+D6VlfW0SnNNY9IkU:Xij6Trr9a
- TLSH T1FD68AE53B2E1656DC29AC1F0A59F4603A775B845171C48FB328CCAB13FA68D61B3EB34
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2