Overview
overview
7Static
static
3Polystat-1...up.exe
windows10-2004-x64
7Polystat-1...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3Polystat.exe
windows10-2004-x64
4Polystat.exe
windows11-ltsc_2024-x64
4Uninstall ...at.exe
windows10-2004-x64
7Uninstall ...at.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3app/Polyst...al.pdf
windows10-2004-x64
3app/Polyst...al.pdf
windows11-ltsc_2024-x64
3app/Polystat.html
windows10-2004-x64
3app/Polystat.html
windows11-ltsc_2024-x64
3General
- Target Polystat-1.0-Setup.exe
- Size 5.7MB
- Sample261104-w1b3fsec62
- SHA256 671da61a2aa8db194172d8842d15094abfea4757b79ff7a039c1a2d191f8a9b1
- MD5 f738667064d26b4ae15e6dbbee75290e
- SHA1 3be088067c93aaa8f5e0ed04d54c66efddab3b21
- SHA512 944a5fe6d6b2661e2345c07f21657f6c9ffac3818016fb56ba1ebcf0485c1dca6f30c540090cf81f55736f5660b267fba941dd732961d71304f0c74cd1b2b2ae
- SSDEEP 98304:MO1oj139qnOoYKclLMIR8oxHVU4EikCOaGzGYcD75AuIL104RaGiVeT0/XoVRzUe:MP39InS5MIGp4mCOaGCx35HgueT0/Xo1
- TLSH T1BE56333CF580783AF3743434E4662B87194EB9610A7979C6E3C80A16EA5B7F245F4A4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Polystat-1.0-Setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Polystat-1.0-Setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Polystat.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Polystat.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Uninstall Polystat.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Uninstall Polystat.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
app/Polystat User Manual.pdf
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
app/Polystat User Manual.pdf
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
app/Polystat.html
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
app/Polystat.html
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Polystat-1.0-Setup.exe
- Size 5.7MB
- SHA256 671da61a2aa8db194172d8842d15094abfea4757b79ff7a039c1a2d191f8a9b1
- MD5 f738667064d26b4ae15e6dbbee75290e
- SHA1 3be088067c93aaa8f5e0ed04d54c66efddab3b21
- SHA512 944a5fe6d6b2661e2345c07f21657f6c9ffac3818016fb56ba1ebcf0485c1dca6f30c540090cf81f55736f5660b267fba941dd732961d71304f0c74cd1b2b2ae
- SSDEEP 98304:MO1oj139qnOoYKclLMIR8oxHVU4EikCOaGzGYcD75AuIL104RaGiVeT0/XoVRzUe:MP39InS5MIGp4mCOaGCx35HgueT0/Xo1
- TLSH T1BE56333CF580783AF3743434E4662B87194EB9610A7979C6E3C80A16EA5B7F245F4A4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 9aa388c7de8e96885adcb4325af871b470ac50edb60d4b0d876ad43f5332ffd1
- MD5 9eb662f3b5fbda28bffe020e0ab40519
- SHA1 0bd28183a9d8dbb98afbcf100fb1f4f6c5fc6c41
- SHA512 6c36f7b45efe792c21d8a87d03e63a4b641169fad6d014db1e7d15badd0e283144d746d888232d6123b551612173b2bb42bf05f16e3129b625f5ddba4134b5b8
- TLSH T1948171FB93E80DF2E05443BB41A318E36AB5CE705B1B001F49474A9A24D1A6BED7EF05
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Polystat.exe
- Size 67KB
- SHA256 1cc6fcc9b161cd251c50278d89cde2d7ea170aedff77d9d32560012407ac0b52
- MD5 7054b53ad2bc2871cb2bd86346048c74
- SHA1 4dd57b92901f2c6ebcaec738eadd81be0618b132
- SHA512 6c5a1993396621665fe38a9aa23fa95a24a330e98a2fb9e5bcd592edda814b20871ace1b006a07696c402d947c464e681f780e7432405ea732311f157da6d6a1
- SSDEEP 1536:ywh9C4jEqJUL+8gS+C5cY4juA6Qh5gsQKbdtDThNbNZ:ywWxff+FY4juA6Qz+Kb5NbT
- TLSH T1FE63C0007BB0D037EAF30F311E7A6A17AEFAE5151131570F53106B6C3A2A6969A0F792
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target Uninstall Polystat.exe
- Size 98KB
- SHA256 b4e554bdc0db392943cd93b44a5ec6603eccfbf93c6a3f8db87a1fc0a2c867f8
- MD5 2ec29d53e31a58001eaff1257f8bf45b
- SHA1 ae14da7428242f4b9f79ccd92ccfd108df268511
- SHA512 224d8b333f27f8410734aa0194bd6c1724eb0bfa07aa172a3bd66a825a33ba6496ab129086321e4f7edfdd544c914b5a5c0129688c33956274ff34c411570967
- SSDEEP 1536:Uwh9C4jEqJUL+8gS+C5cY4juOH6Qh5gsQKbdtDThwwAmOaianbr4OmHI:UwWxff+FY4juY6Qz+Kb5PtOQn4Omo
- TLSH T169A3E1007BB0E027E9F20A711D7AE627AEF9B7791035571F6740AB1C7E66582CD0E382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 9aa388c7de8e96885adcb4325af871b470ac50edb60d4b0d876ad43f5332ffd1
- MD5 9eb662f3b5fbda28bffe020e0ab40519
- SHA1 0bd28183a9d8dbb98afbcf100fb1f4f6c5fc6c41
- SHA512 6c36f7b45efe792c21d8a87d03e63a4b641169fad6d014db1e7d15badd0e283144d746d888232d6123b551612173b2bb42bf05f16e3129b625f5ddba4134b5b8
- TLSH T1948171FB93E80DF2E05443BB41A318E36AB5CE705B1B001F49474A9A24D1A6BED7EF05
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target app/Polystat User Manual.pdf
- Size 4.1MB
- SHA256 85aadddc9940027cfff13d504354d64ae8ae7ee80e3114e592a75d391103c1a4
- MD5 b1dd53b7522b672332aee5c2e6e8d5a8
- SHA1 a466cce84ee9af301be668c9540021c584a84b50
- SHA512 7065c074b86e0ae0c6974972d7d9d9060918c7e243a46bb4dc2a29a8a64abd8c0e182ec1da28b2cb295d18aa609ccadf18e4255ca008d5723fdd3ba8f4c3eb27
- SSDEEP 49152:6aPDobKhMDFvwVYqeZ/GXTVjShkGQVwveWKVrRCB6VNTkR/VbtxASqZcW4Hxn1gN:6aPDHh+ve0oYnWWKpRWMknnHtHxn1XWn
- TLSH T1DE16CD63AD52C42BF01FA1304A55392D678A61A2278322712C2C6FFFF26C59FDDDB845
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target app/Polystat.html
- Size 564KB
- SHA256 ca5deaf200c3df7308c1c49ab464bea98af779f5133ca8ad60ca52c6727a4164
- MD5 1676475ac668c72022f1b6c27d3d6d94
- SHA1 9dfbd29afec4ca706f9a4f49320deebc1da7b6a7
- SHA512 5068922c5d132b8b44dadf2b155fa8c7008d545bf0c85cf64f435671196a5ce38a732db6b681bc15b3f065315afd5d6e28499782bda8e5d470b78abf613d57f7
- SSDEEP 6144:9PCqNkT1I/a3WQ/g8oEBDnBLvBbLqd5J7x4mkfrwEPP59w0B8lv0vjJKodSuyul9:9PjNkT1a7EBDnBGZGv1F8lvIn9D3z
- TLSH T1A3C48E61B3A912368AF350D0295F0295F6388417B545C8C4FDAE85D20F8BD7291BFFAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10