Overview
overview
3Static
static
3WebView2Loader.dll
windows10-2004-x64
1WebView2Loader.dll
windows11-ltsc_2024-x64
1audioplaye...in.dll
windows10-2004-x64
1audioplaye...in.dll
windows11-ltsc_2024-x64
1dartjni.dll
windows10-2004-x64
1dartjni.dll
windows11-ltsc_2024-x64
1data/app.so
ubuntu-18.04-amd64
1data/flutt...eep.js
windows10-2004-x64
3data/flutt...eep.js
windows11-ltsc_2024-x64
3flutter_windows.dll
windows10-2004-x64
1url_launch...in.dll
windows10-2004-x64
1url_launch...in.dll
windows11-ltsc_2024-x64
1webview_wi...in.dll
windows10-2004-x64
1webview_wi...in.dll
windows11-ltsc_2024-x64
1worddown_flutter.exe
windows10-2004-x64
1worddown_flutter.exe
windows11-ltsc_2024-x64
1General
- Target WordDown_Windows.zip
- Size 27.7MB
- Sample261107-wd133aex2p
- SHA256 7e8fe91837d79e1929b85c16981e0dfc5f67f050aaf084a8ba9c91d390b2c70f
- MD5 0ea4ffb9f79069e2cee11e568c3b5928
- SHA1 6ab51fc4375ab27611d020c606424a4734429aef
- SHA512 789c8c24cdc1f16280bcf7033a7fded3e31b1f1ebfae564db22f965b4b7d7ec44805685a1487ed356394576aef3f49ee25eaac7465ac91971edca9741b13b124
- SSDEEP 786432:u5qm38QulDgDA/GhfQba09Bz4zIfeNUchFK9oq1ukDWYPxITyL0Pg:u5qO1+a0j4Ufxchk5/xITq0Pg
- TLSH T1E15733A05B5A7C85DE9E90325C9B2156C1383982F92FD42FA0024646EFD348BEF65D3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
WebView2Loader.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
WebView2Loader.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
audioplayers_windows_plugin.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
audioplayers_windows_plugin.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
dartjni.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
dartjni.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
data/app.so
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral8
Sample
data/flutter_assets/packages/wakelock_plus/assets/no_sleep.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral9
Sample
data/flutter_assets/packages/wakelock_plus/assets/no_sleep.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral10
Sample
flutter_windows.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
url_launcher_windows_plugin.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
url_launcher_windows_plugin.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
webview_windows_plugin.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
webview_windows_plugin.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
worddown_flutter.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
worddown_flutter.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target WebView2Loader.dll
- Size 138KB
- SHA256 f0fccd520afd3056df3130b6ccd3386fef029fe8a5637f190b1da57c96330e85
- MD5 25303f7dc2efbef88a379553ca5271f3
- SHA1 6de1079c301749cd45f8bd0419d0adb6744dea7b
- SHA512 5df273791b9a72196a6606905de2898269edd800200b397096b1a7eea5f658f2c4ac0be11fa9777de42c347aa0243e7bf83995698131573903156e1c6c83d905
- SSDEEP 3072:LZAlYGX1ilSFqcBhams1BhF573g2es4TUZEtBeeWKZxk0wUl:LFlSFPnaz17/nEtjWKZT
- TLSH T10BD36B5B73E4007BE166C274C9A34A16EB76B85117609BDF03A4026A1F637E0AE3DF71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target audioplayers_windows_plugin.dll
- Size 198KB
- SHA256 4bb00e6d30e228f8e640f2cd6e79c3a8407fd69b0da8ef477c669f154ab09d55
- MD5 e1658d30981ed5f32a486915f068183c
- SHA1 4986a267b963f7499a01366af5c38a2554ac4052
- SHA512 e68d4ace5d7467f77118d2e7cce643a2d10c89c59fa561a5a87d83c86f19d06ee64c9c8cadc90bdcd0c5a2be6e1f986ded5b0d107f0986d47111920e56b1d63c
- SSDEEP 6144:OBVW2fQL56oiHyGWguQP7tSBOpsOtHcmj:OBVDkbiH3uQPgBOpsOtZj
- TLSH T12A143A6BB669809BE127D07CCD470A06FB72B8A54761A7CB275007BE0F67BE85E3D500
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target dartjni.dll
- Size 57KB
- SHA256 43c86344547d0215ce44e60cc29348ef04231c0e505b9d7538e4ba84f6783d42
- MD5 10ca5c71c21909a392c1dd9702a1af4a
- SHA1 e84c9fe1e14f8622c22d621eaaea1e9fe9eb9866
- SHA512 9a8a91a6d7f58bf7c52bdfba537acee82b5045fdca20c77fee13a3153ca5fbfb1be7f821e07348a21ac543544692983fe2ea0a27c2a550fbec618aa044d9f3ef
- SSDEEP 768:lr3lrat7JgSt4TAZDS8MY1qOLa4G6TN8sG+svx7BpZNh757wQBzm6:Jl+qTAZOLB1Vx7BpZNh757wQBi6
- TLSH T1E943A4A88BB441ADE16AC1B8D063891BD273F054138387CF927D459BAF2B7D13B3E645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target data/app.so
- Size 8.9MB
- SHA256 1e16a513b7ccb95d00d98d9ba3eefab692bcb533dbd2d35e14cacf9d9c05fe10
- MD5 7d11f8ce852700a0706b4905331ee371
- SHA1 7c60a0b960b9e7326f240a98d0e1ccd1f34e62a8
- SHA512 537c41c530dd823b209b8aa9cd57e404857502500e94c9bd1d33c52f2de545c2e05ec59d57d1e3ed174148b3b86f3c9c85139eaec5d207fd3b45fe1a4915e889
- SSDEEP 98304:fhXC1Ephd/NFGCJyvpInyNRbCVmmgyPvM5k:5XC1YH/NMpIn8RbCVm6vkk
- TLSH T18096F887D0A48761C423D773B75F62A29E1479DC4F70B74A19C85B263E8ACB44ACF236
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target data/flutter_assets/packages/wakelock_plus/assets/no_sleep.js
- Size 13KB
- SHA256 726c644cda17bf271d996fb629806a59409607e9b00e0dfbf75adfd3986bbb7e
- MD5 74499cf34f37daae14b51e3a23cd9f7a
- SHA1 fe19fb9e9711f45f25cef2d163bff949195aedf9
- SHA512 a9587be5634f3caa971950bd24f930346a76eb0dab4cf2b9e96e9071bad60fc1ef1069f47b82631120c6d4a5399b65b598dfb35fbec95e39e11ab71a00e773c6
- SSDEEP 384:Se/gzi+FrZJqbzrarAyUX5uHeJnDnYLbv:Se+FrZJqbzrJ/AHeJnDnYf
- TLSH T17452D83B27B5BC1BCF76647DCA2E60102C7C980F4A2D4951BE4C41889FF16709BA9EB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target flutter_windows.dll
- Size 20.3MB
- SHA256 30494fb08f9f101a8fbe42568110aaa160efbd7341f3cfe877dc14214be3a233
- MD5 39b24e258fc1d586fcd244d21265bd99
- SHA1 a61854e4f657cdfe7dea4c4213ab9a1d1df9cc7a
- SHA512 787dd13a1705da820c50f2771a07668d1fbd3d616d0ec75a8098c5c0012a7926601d3eff6b9385df4735f24cb6a99b2b7026b709bb735c6d7e8477d5685b252c
- SSDEEP 196608:XEJtOA3QUd3/2a1N+GEwasZ5kanNob3+x:XEJf14UasZ5kan2z+x
- TLSH T1DD276C03E29640EDC459E178971BAA27F670B84A0720BADF3B5C47213F66BE05B3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target url_launcher_windows_plugin.dll
- Size 96KB
- SHA256 37049e74e4d039b350ca9088c281b27df50406dd034bbfc5e0f3f59bc38bd4ad
- MD5 fa25ffe31c94b3806bcdf4e2b0f0364c
- SHA1 59526d7cc6478a6ca5d986dc1891b03b9d35b61c
- SHA512 599d5651e85775642fa7108001480af552b7cf83841c6cc5744d7cd149ebba502316f3496d3e38a1bfea89a5089307f5f947ac426b40b6653c835f5007781373
- SSDEEP 1536:rnY7CBIsJix63UiqX2zqwXimfY35sfmfQAW/VKJD1zO:bTBIsJ2GUiyy5feQAmVKJD1
- TLSH T166A3192AEA5D50AFE21BD4BCCA574D01DB72FC86476167CB23905A8B0E27BD90E3E501
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target webview_windows_plugin.dll
- Size 480KB
- SHA256 7382352602394322907d8dc512e702d0562e2ae4a4df140751ea2ba26e09ec98
- MD5 aa2403c1bc122789896779a0e95ae99f
- SHA1 0872dc07c312e3994a86245924021d7f121d0b2d
- SHA512 dfd6670e55ee2e66f38559e0ff951d35e9e13a2a0bbe2b2792e736e8885043485473f6e17c205cfeddfcc6c89fbda790d46f08504ddfc021b077bc6bd37dc907
- SSDEEP 12288:dCmt5oAx5iuWB2Ceph0lhSMXl+0o4qGQPW3Z9jIS1DYyjH1gsFy3Vcm6mZ73ZBTo:dCmPoAzijQh0lhSMXlPfQPWTjI
- TLSH T1D0A49E16F75C40EAE02AD0B88D6B0646E77378D9579193CF16A4E23E1F537E89E3A700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target worddown_flutter.exe
- Size 15.2MB
- SHA256 4fa2f9a7210ca22ddceabd5683c18154f2a991fd05449b932d60543c9c49ec9e
- MD5 f90b004b5408d994d4cd4bc7efabd869
- SHA1 a7b46215306ef505e6b41b11ef599f6d17dbfc99
- SHA512 c848ac241444e471185b1b2e3398a6b32c594560068c3725dc482ff8835f47c1624bfff51efe6625f3e539387096810f23a672ce07b0a55bf744b10f202b4a2f
- SSDEEP 196608:4h1Sq6lIe6AWTpDbCLN/sgZrDLlA7oP2v4cfPz4a:4h1SqPe6AWTpDbC2gZ/xA7oOvNPz
- TLSH T1FAF64B27736512ECD4BBC078CA968A23FA7174464335ABDB2AD0C6A31F537B09E39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10