Overview
overview
10Static
static
10Qt5Core.dll
windows10-2004-x64
3Qt5Core.dll
windows11-ltsc_2024-x64
3Qt5Gui.dll
windows10-2004-x64
3Qt5Gui.dll
windows11-ltsc_2024-x64
3Qt5Network.dll
windows10-2004-x64
3Qt5Network.dll
windows11-ltsc_2024-x64
3Qt5Qml.dll
windows10-2004-x64
3Qt5Qml.dll
windows11-ltsc_2024-x64
3Qt5QmlModels.dll
windows10-2004-x64
3Qt5QmlModels.dll
windows11-ltsc_2024-x64
3Qt5Quick.dll
windows10-2004-x64
3Qt5Quick.dll
windows11-ltsc_2024-x64
3bin/027.js
windows10-2004-x64
3bin/027.js
windows11-ltsc_2024-x64
3bin/MSPTLS.dll
windows10-2004-x64
1bin/MSPTLS.dll
windows11-ltsc_2024-x64
1bin/Micros...nt.dll
windows10-2004-x64
1bin/Micros...nt.dll
windows11-ltsc_2024-x64
1bin/Micros...it.dll
windows10-2004-x64
1bin/Micros...it.dll
windows11-ltsc_2024-x64
1bin/Micros...ge.dll
windows10-2004-x64
1bin/Micros...ge.dll
windows11-ltsc_2024-x64
1bin/alread...ied.js
windows10-2004-x64
3bin/alread...ied.js
windows11-ltsc_2024-x64
3bin/array_021.js
windows10-2004-x64
3bin/array_021.js
windows11-ltsc_2024-x64
3bin/array_...on2.js
windows10-2004-x64
3bin/array_...on2.js
windows11-ltsc_2024-x64
3bin/bug48336.js
windows10-2004-x64
3bin/bug48336.js
windows11-ltsc_2024-x64
3bin/bug51368.js
windows10-2004-x64
3bin/bug51368.js
windows11-ltsc_2024-x64
3General
- Target Installer_L_X64_x86_2024.zip
- Size 52.9MB
- Sample261105-gx93raxwdv
- SHA256 b7b67b9bb10531738ad2b46cf7d342b8e326577bef5f3505adfc62ed1fc072fb
- MD5 0d3a3aa49f315d9a21e80a77b68f86a1
- SHA1 4e0bc042befe71458a18d42ad1f337ef71ccb25a
- SHA512 094ec2a54e05343fff65d76f27c7b8da9744717f6f8eac27ab4fb7446480321b5ca3994af9639b770633f5a397f2c6b21fa301d1dfb863d8e238fcd52fa802fe
- SSDEEP 1572864:w1kR7BDwQz7wlnI5WM9Jh2NM9Olqq+xg5Mh81aP/jxu2i:4cDDnPWM9Jh2e9Q5MaYPbxu3
- TLSH T149C73345FA5C528ED7A6ADF2A4C616ADD672C9074731E82F06A840912CD37F70F1EE0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Qt5Core.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Qt5Core.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Qt5Gui.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Qt5Gui.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Qt5Network.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Qt5Network.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Qt5Qml.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Qt5Qml.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Qt5QmlModels.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Qt5QmlModels.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Qt5Quick.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Qt5Quick.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
bin/027.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
bin/027.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
bin/MSPTLS.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
bin/MSPTLS.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
bin/Microsoft.Azure.Management.ContainerInstance.Fluent.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
bin/Microsoft.Azure.Management.ContainerInstance.Fluent.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
bin/Microsoft.TeamFoundation.Git.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
bin/Microsoft.TeamFoundation.Git.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
bin/Microsoft.VisualStudio.CMake.Package.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
bin/Microsoft.VisualStudio.CMake.Package.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
bin/already_occupied.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
bin/already_occupied.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
bin/array_021.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
bin/array_021.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
bin/array_diff_uassoc_variation2.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
bin/array_diff_uassoc_variation2.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
bin/bug48336.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
bin/bug48336.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
bin/bug51368.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
bin/bug51368.js
Resource
win11ltsc2024-20260911-en
Malware Config
Extracted
-
hijackloader
-
directory
%APPDATA%\sys_system_stream_x86
-
inject_dll
%windir%\SysWOW64\ieframe.dll
Targets
-
- Target Qt5Core.dll
- Size 5.1MB
- SHA256 ab59bbf77d79437ba0cdb8e52ae4857ef32ff08c7dc9de623996aee61f05b4bd
- MD5 d3e85c136db32008401d4d8630f8adef
- SHA1 0368fae2f117cb1a77264808957313bf3c4ab320
- SHA512 0875be33c6bd1969a29b3ccd69ecf74d7a7242b42baa7905c48c3d9018a3d0577b6cc4c6b2217051c467917593e631061a42afc1e9b7f7848b63c0fa091f2af1
- SSDEEP 49152:91AH+7g4QrRpvOK8Bbl+Gy+/LZsxRFNAlZTlJsv6tWKFdu9C/cPk4VHEYI9CV4ew:35gje5lCjaJsv6tWKFdu9Ctv6Sgwh
- TLSH T18146AFA17B57857AE5A2D270C8BA632F0539AD124B1385C7D39C370A4A746E23F3B707
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Gui.dll
- Size 5.6MB
- SHA256 80016776efea2b2a838c3ffa4c82e5f146baff68c36073c0c34668809d1c4297
- MD5 5b0f3d5b1b29b5e650375093c7afa243
- SHA1 1920cbc98bd46a3a72bcfb45caefcfa2649a92e6
- SHA512 9db9a90ab5a1a768e079cf9b10f1da868ac7dae774e90e139ee047c9c8fb43cc5b3e01ae3724ea74efd64409eeeafbcda4f04da3e86265575a3831a4fc69cc8c
- SSDEEP 49152:FKUDGaBVW3sDAPNaiCZPcSnt8KQ6oOtA/tiG7WwjrAxLXwQ98vd+hc0WM66fL5cQ:wUKssPdOy/tZWnXThVc5tnB6NDrd
- TLSH T15B562BD1F18671B3C962D2BB270F623FA076A956C30483C3C6996E9558743FA0F7B906
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Network.dll
- Size 1.0MB
- SHA256 37275f3ea79d15a2792bf21f71f1df825f201cf8b33aa1f94ca93d62d76b216c
- MD5 2e3db1cd1ec59d08706438258e86ea30
- SHA1 bc20b1e40049386e6bea3f448a6852bc879a8821
- SHA512 0c0e0e02ccadc3f2b3f6c8cbf2c162fb73734b0b244c80048968a6fe268450a270a3f92b155daf6268fef246d26ad417e6cec224133fd66e6ffb3a5394b04358
- SSDEEP 24576:Aul0ktv339DOBVXaIFP698DWk7PVmr0qwjb:A8sJVWAcwnH
- TLSH T1BD256C92B786C0B2E84481F5455EEB67E53DB1388B0666E3E34C6FE2D151ED21E3F182
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Qml.dll
- Size 2.8MB
- SHA256 e45f26ebbc2b0499e0e90f1666fd13f1bb2bed1073e828d30b6a3a70599d4bc9
- MD5 7cda5037206a57cadd50b5f032876a8e
- SHA1 314b671b27e9602a66396ec37bdd6e70bb180d92
- SHA512 1450a79b017b4809c83c2fc4ef53df926e3a725959b6e378c5a55c853d2151a2ba70272848962931c58596fb4174601e3defedb120fd0a211d57be9d1908ee3e
- SSDEEP 49152:grHpbRcgtgEgnLDYZeQok3e3QiBMKbjcbKYI1YLTFXrwWGw6cTWptNrSdSG779LZ:ARcgOnLDYZeQokwuT5E7NrSdSG779LL9
- TLSH T1BBD58D83F2C304FBDC429274589E6B379932B51903659BD3E788FA8EB6316E1593F181
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5QmlModels.dll
- Size 341KB
- SHA256 065c8d687dc74964123f4bb06319565b163b164ab09dadc1eb6929ee19755735
- MD5 78e8091feb2e6ce5646459db0ea9e465
- SHA1 1731d2d47cfe21394f208f7baff7ea1f2e702546
- SHA512 b3fdf745336c7473b9afa57432379ff32ca5105eb956779da16de3cd55453af54e1420e5f514a1bd9f78107dad4ef719089640cfd0f144d8b7a36e3e39e319d5
- SSDEEP 6144:hX6wb2uBTVgttAC/trZYzAZpebGUvteg0NYMr7XPqfQ3G/7fOTvFmqi9:3BVgXt9EAUGUQg/MfXQ0m/9
- TLSH T1DD747E82F26280F2E8C547B994596637D67DF10287D1DBC3D788AE8961A12E31D3D3CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Qt5Quick.dll
- Size 3.3MB
- SHA256 5f246016691ff883243ee9b3c9215eb16b859b12aefc5f4bbd2fbda3911883de
- MD5 07266e7d049ac4499f34ce281f3a50d7
- SHA1 257968090b95fae67f92f82db9cab1f7613d75e3
- SHA512 d7f9ce2fb11de178d6d38a5580c503c21fed6777067b8a8259f9fe35b44047040b705903db4ed3fbac821806cbd5ca1db0f5fcbec68cdc49282dc0e63a3257c3
- SSDEEP 24576:wLAgn4tj+U6JL9iji/2LzruK/bEdKUEAWzeauejEM5OmTi/bIi6+LPt1rt83FCbW:zT1HZEHr7OCsKbKzVZPXMC0FEUO71
- TLSH T172F57C54F2D381B2D881A279186ED7239539B0904F0956DBF3787F4A66322F21EFB385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/027.phpt
- Size 2KB
- SHA256 323fd1f93e0048ad7c67bd0225823e13dcb497e3a60530d1f531a32193dafa6d
- MD5 9d8e43e3131fd6c299499e938f46cdc3
- SHA1 0acf4470139269686c1b469cb7dfc75a10af0150
- SHA512 d0f2d447389fe9794f75b6fb35db0e12e20c8cf54172fd19ab43afedca6c9cbae7ddd853f303fd97051dfeff644c428885920b6e01f49aca206d740828a7dd5d
- TLSH T17B412766B5E72C3504EBC46C3E1D8209355CC74FE190AB686E2542AB2F80BD216FD5B7
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target bin/MSPTLS.DLL
- Size 1.1MB
- SHA256 7226480ec7a67706947615e76ad35cb8124b1617e3e2383f5c81bac5cb6df3a0
- MD5 5fddaf5725e947ea2a7458f3b39dca96
- SHA1 03e619ca0c81e31373bb8ff98845790e4a1a1de2
- SHA512 4c5d0ac99a6b4c07b9131ea8749ea50222690118a9ba3278380c8a410559273ca039d7c9bdf2cdef339cc97aa5f3c9d1e0fcf30030cccfd63e565714726696fb
- SSDEEP 24576:A9HgzU86R0DZ3/qGa63kCymUAwi2xHoX1JAAz1T:AJgzU86R0DZCGa63kClwi2xHoX/A
- TLSH T18045EA52D2B281F5C467C5F4CA66A377FFB13C4D9018A71A9B90CB522B27B60E12F325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/Microsoft.Azure.Management.ContainerInstance.Fluent.dll
- Size 230KB
- SHA256 2d0752dc9d84160cf13e91d7e00be3507a6d0183c0f02904bcaced5a8b00a777
- MD5 37973e95f7ecab1e72c43932264bfcd2
- SHA1 da8e0312368fa895d16b46bda35426957933c92b
- SHA512 3ac771fe513d3c6610423021ee055dad96db4ddaee6496b0eafbbc4c5f9b0a273b537e2807dc02f4d14ce33e7ad540ebe81fff0b35d16c42097514ce0c7d88c9
- SSDEEP 3072:y3Mx1/rA0HYJ03ILgpsNe0S/AIqyNgEXdOhyiWlGMHx6QNbhEzKde+:HvD0J5e0S/qyuEchCUMRXEed
- TLSH T1C3342B06A7E84F32F1AF973EE4118202AFB1274BA419DF5D9F4CF4E9146B7828913617
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/Microsoft.TeamFoundation.Git.dll
- Size 720KB
- SHA256 f4833cb4c2145870b3f68f22c468913c1bcd386d71af393c629add4653548598
- MD5 5324be8edd8aba45c76e741ea4da7731
- SHA1 4c4b97ec0dc25828d5d5bf26b976b2db6fd96524
- SHA512 953d75068610092bfa1d9f7b1de3ee328d4d2a3335a46e0dff022d3017c52e5b4aa07d1e6a8ed097588a2fcba9f69d191777d1d4ab481b997d0bbb8be89536fb
- SSDEEP 6144:dkw2GPbFNZKiNFiyRc08nIg0UGQkaZDCCUgc8GbqhIIi7QFOEMML/QjCUtYfVytI:tn98nsUGjw2mc8kNxeytCWyi6lbCt0
- TLSH T1F7F43A4033F88617E2FFAB78A53185144BB9FD43B662FB8F6148D5A92C62B54CD60723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/Microsoft.VisualStudio.CMake.Package.dll
- Size 1.1MB
- SHA256 1950becf00f9aab8a7fda01f4aa02599946331d9953e87fe86625996c0445088
- MD5 607001fe8b9aaa0792451cbb3c12e9d8
- SHA1 e7e9935f23bd70779d5649be5545247e042ef199
- SHA512 1d60c473ac11fc37ebec1a50a6df4e22ef7948b702e299e6ef4b9e02e17ab4a795b0d0b26ffb4ac72f0b1990509d7e277e0661dc488c7a1c73fb0be30df0fb82
- SSDEEP 12288:BJzp0+7dalQeyFz1zWDrc7qLrAc2FAlGfnIywvnqu6Trsjcr35W:7e+7clTy/zjCGwyWWrUcr35W
- TLSH T194353A1273FC8679F0FB2B31AAB95249CE76F9C26A11D31E5194619E1823F848F117B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/already_occupied.phpt
- Size 753B
- SHA256 8610e5bf1e47c063ff6ce7491eb1e07610b2663528b89b436fd411dd5d8b0806
- MD5 5696dfac19ec980c35c2f270490c55dc
- SHA1 a5fa52272940705576db9f3b0d3c30aa810103d6
- SHA512 cd2605691504bb0d64e02f793af16f0930236069b6cbdbe2aa01af7896ff1402b61342088249b281a2b3d58a6112ffb3c3def735b502abb6b11de18f95795d13
- TLSH T1A001B14731C80AB5D8D198262A1F1664629EC18D5501B2C3808E54933FE85B257E57CE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target bin/array_021.phpt
- Size 377B
- SHA256 23cf6d0168a0ed263e8fb8e5fea5f3a70f30b3e9254ea6b31f792b36d63c876c
- MD5 41c64d9dbeca227fef0dfe4a168dc391
- SHA1 c5c441e92377647b0912a3de4918a99965908b75
- SHA512 110231d543ae95b13fc9730d979328158942a3df3224d6461652525f8cbf5b0cc3c2a0927b058fc00c33bf70de632d8ac61298f2207f2746c48d9da27ca777c2
- TLSH T137E0C054B4AA1E6540D740F10178D2AB6377820BE19D463AF0DD89501F91871CAE394F
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target bin/array_diff_uassoc_variation2.phpt
- Size 4KB
- SHA256 14537f8ab40c1ec23cf77848b0dffd4f9cb60980668cca64065f3bb0bc570042
- MD5 e268d0310263d14fe4249d482176a2c9
- SHA1 568ca5d033a2230a345ef1bbd933ffede9694192
- SHA512 56a316834c8b7255272f60cf6a96a60746db61a9878cad29109f36f6f7aa67d65194404da9be2eb65628d0c1e7e8bcff5c852bfbd6d827eb2bc3455fd65a2b3f
- SSDEEP 48:bNdN2cgBxOnQ/kg5/01b/DUoPVF5g2sgZcWGTgoKjjN0lPwNj/NCNeNnNuNsNoNO:dgLOnQ/kq8V/gc9MPP9O
- TLSH T1F4A1CF95F14B627A81E7325497C57E246C64C02213F379B0F1BFCA2A2FD2CA421F82D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/bug48336.phpt
- Size 652B
- SHA256 29049189023a9e93e6133d21a1cddfb53fd9a796c9f8233cf0b74d1e303ae27d
- MD5 f8a0076f9bef54119551b5174af385d4
- SHA1 c9ecc7829377b2c4afd4d4bf0dfabb8fcfe77a05
- SHA512 5e867e572ab3640771a3917410e56c1f8f45457c88d6d9d6aa65eb88cd4546b2f7abdb1b97d8b0f7e16a5870773f0a7cdb64d3c45cd3f2b65d0e0974f922b9a7
- TLSH T18DF07851B5A71EFC0AF3448A88564560F08E2953C3BD9F74C1F821081E38DB699C6C3E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target bin/bug51368.phpt
- Size 656B
- SHA256 00634260f43ac14e66d4cd2d21587bb1744185011340ebdf2f21dbc888055231
- MD5 a17df9abb644803b23ee8ad43a90a137
- SHA1 764eca610472991057ddc8e996110a1c882e5212
- SHA512 7d55def069d3dc1a27434e5e99cfa57750fec656e4f73e36b8372373bff2e41f94909e35afd91b9df643cb9e819a12c5776488c9a81a632634cb2627bdbd7d41
- TLSH T146F0DD0C54AC0B424CF302D96918141CE428C39AD3C4ABDDE9AC62D426EF37EE1F71D9
- MD5 SHA1 SHA512 TLSH
Score3/10