Overview
overview
3Static
static
3WebView2Loader.dll
windows10-2004-x64
1WebView2Loader.dll
windows11-ltsc_2024-x64
1audioplaye...in.dll
windows10-2004-x64
1audioplaye...in.dll
windows11-ltsc_2024-x64
1dartjni.dll
windows10-2004-x64
1dartjni.dll
windows11-ltsc_2024-x64
1data/app.so
ubuntu-18.04-amd64
1data/flutt...eep.js
windows10-2004-x64
3data/flutt...eep.js
windows11-ltsc_2024-x64
3flutter_windows.dll
windows10-2004-x64
1url_launch...in.dll
windows10-2004-x64
1url_launch...in.dll
windows11-ltsc_2024-x64
1webview_wi...in.dll
windows10-2004-x64
1webview_wi...in.dll
windows11-ltsc_2024-x64
1worddown_flutter.exe
windows10-2004-x64
1worddown_flutter.exe
windows11-ltsc_2024-x64
1General
- Target WordDown_Windows.zip
- Size 27.7MB
- Sample261107-weml3afe64
- SHA256 73c781a42bd4df5f30d8a24d223f2ef63550c0763c279739ada6d71c0cd5fa46
- MD5 006683955a2adfd9d675573c33ea2eba
- SHA1 80e521752eb612facf21926adb21326a8c6bd16b
- SHA512 176dbad7910d7418da29db7b54d6f70bcd5ecebc9918bcb910cdbc8c8afc383e523c8cf04d7266453a4bd6426b455bc53af3fde0b9d42e2fdaa9cfab1731f45a
- SSDEEP 786432:Trj3NiIrBlDWcA/GhYa8zsfHuVnr9QwQvXXkM88+hEJ15bijupY:TrbNi+qTPsCJQp0IkEJL2L
- TLSH T19A57334098C53110D6FFDC612AF878B52B4E2EE4645BAC6EE1818F0BD7035EA9E4BD35
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
WebView2Loader.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
WebView2Loader.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
audioplayers_windows_plugin.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
audioplayers_windows_plugin.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
dartjni.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
dartjni.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
data/app.so
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral8
Sample
data/flutter_assets/packages/wakelock_plus/assets/no_sleep.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral9
Sample
data/flutter_assets/packages/wakelock_plus/assets/no_sleep.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral10
Sample
flutter_windows.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
url_launcher_windows_plugin.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
url_launcher_windows_plugin.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
webview_windows_plugin.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
webview_windows_plugin.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
worddown_flutter.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
worddown_flutter.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target WebView2Loader.dll
- Size 138KB
- SHA256 f0fccd520afd3056df3130b6ccd3386fef029fe8a5637f190b1da57c96330e85
- MD5 25303f7dc2efbef88a379553ca5271f3
- SHA1 6de1079c301749cd45f8bd0419d0adb6744dea7b
- SHA512 5df273791b9a72196a6606905de2898269edd800200b397096b1a7eea5f658f2c4ac0be11fa9777de42c347aa0243e7bf83995698131573903156e1c6c83d905
- SSDEEP 3072:LZAlYGX1ilSFqcBhams1BhF573g2es4TUZEtBeeWKZxk0wUl:LFlSFPnaz17/nEtjWKZT
- TLSH T10BD36B5B73E4007BE166C274C9A34A16EB76B85117609BDF03A4026A1F637E0AE3DF71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target audioplayers_windows_plugin.dll
- Size 198KB
- SHA256 caee61008855da5d5cc1b1cef4cf1263ee32e05445e2e913af232dd293be83ce
- MD5 3bd99d65579f22465ea02dde1913f628
- SHA1 d1a3e6577978d34d9ca2855baab8f9280a576d6c
- SHA512 91494461321a1b95c48a6adbd9c1c83e281cb9290c5cefe80c61550131da65b43343072802a124f82817fa37d91959c8ab209461082a2ed34a34e3ca81a2b5c8
- SSDEEP 6144:GxVgK/Ybq6QiHylqguQP7tS698sW2Qcmj:GxVlbziH2uQPg698sW2sj
- TLSH T1F8143A6BB669409BE127D07CCD470A06FB72B8A54761A7CB279007BE0F67BE85E3D500
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target dartjni.dll
- Size 57KB
- SHA256 1c585cb16c77ee86873a6a8a3a5eae9912a77e1359cca330a09f837e28d5e1b1
- MD5 bad034eb7df9ba5b266b23f846ad587e
- SHA1 56519834e11163c4c315e8d44b720937255e9423
- SHA512 3fc63f8de06f91d4239109a6be6fba63d4c7d6c3a84581a153c95133e93141e92b87317426fc58b97a619711cef2b0463ebe985635abe98be506354e77b0c4e4
- SSDEEP 768:yr3lrat7JgStDe3CZagCCtulJMXoa8tNSy+svx7BpZ2h75jwQQ5wPREo:yl+N96j7dtcyVx7BpZ2h75jwQQ5Kio
- TLSH T1554393A99BB4416DE16AC1B8D063891BD273F044178387CF927D429BAF2B7C53B3E245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target data/app.so
- Size 8.9MB
- SHA256 62624789b687c4f6ca22017456e926c2051a2cd38dee366ca41cb9a9dcd28ebf
- MD5 5bb4a1b6842a7d81292f3ecc8763267e
- SHA1 040f0b01d1badf75a02fe5367ed073561353e15d
- SHA512 30c4d9c9dc1ec873df692f93944cb3940cc689745c9b580bb9292fbbb56470fd27cf8a732ba74812a2c65348fc7f136c9955135839a79450754e778ee1cc064e
- SSDEEP 98304:LTMP3c4G3RmcewTdH42wnHXhklkWObhfyEuT:Q+RzH424HXhklShfyzT
- TLSH T16F961987D0A58761C463D776B76F72E29E1439DC8F70774605C85A263E8BCA48ACF232
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target data/flutter_assets/packages/wakelock_plus/assets/no_sleep.js
- Size 13KB
- SHA256 726c644cda17bf271d996fb629806a59409607e9b00e0dfbf75adfd3986bbb7e
- MD5 74499cf34f37daae14b51e3a23cd9f7a
- SHA1 fe19fb9e9711f45f25cef2d163bff949195aedf9
- SHA512 a9587be5634f3caa971950bd24f930346a76eb0dab4cf2b9e96e9071bad60fc1ef1069f47b82631120c6d4a5399b65b598dfb35fbec95e39e11ab71a00e773c6
- SSDEEP 384:Se/gzi+FrZJqbzrarAyUX5uHeJnDnYLbv:Se+FrZJqbzrJ/AHeJnDnYf
- TLSH T17452D83B27B5BC1BCF76647DCA2E60102C7C980F4A2D4951BE4C41889FF16709BA9EB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target flutter_windows.dll
- Size 20.3MB
- SHA256 7b03815958c49d72385be497fbd0eb1bb2ae27d24989d6c9aee83eafbd93e9d3
- MD5 4beb7f06bef02c01c0c631c17c56e86e
- SHA1 8c7c07b9c880cd11d999fc30290b33ec7db3f447
- SHA512 bbccbb0d17cc0358e747caaf48917447a2404d91f003c9be2d3da5d9330f7c10d842f6587abce1252daeba79b2a4eff85ac93d2a08a48f080b9f06bcc6a7e6d2
- SSDEEP 196608:6sNn9G+u3IPXkZ5JZ6igxIcfwItg/X9Tdr:6sNnU1I65iZIcfwIaVdr
- TLSH T117276C03E29640EDC459E178971BAA27F670B84A0724BADF3B5C47213F66BE01B3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target url_launcher_windows_plugin.dll
- Size 96KB
- SHA256 cb25065fab59e13cd07f441b00c60b826ac4c22a7d3de2be22b04919b18e5864
- MD5 fe53e1de141936f509e08257d8f2f35b
- SHA1 4028e8505c51494958d5bb9712107de413fb5893
- SHA512 d20e6791b1c70732c73ff8de38344ed0aae85a71a21267ff65c953e07ce2a5f05cd14e3783426ba7587b3fca9928f0316e029623d016720e8ecf1c4b82ce5efb
- SSDEEP 1536:inY7CBIsJix63UiqX2zqwXimfYY5sfmfQAWZV0JU1zO:qTBIsJ2GUiyyMfeQAkV0JU1
- TLSH T100A3192AEA5D50AFE21BD4BCCA574D01DB72FC86476167CB23905ACB0E27BD90E3E501
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target webview_windows_plugin.dll
- Size 480KB
- SHA256 06a82470614084e07b29be8e424af149d37f250ce74343fa1dd70b6607b6630c
- MD5 8d2b4d2bb33bded930a117c8c1fe0e83
- SHA1 88f4a560110e1a031b64b73cd775dcfa7cbb669c
- SHA512 7e440727ced8824b12e3d262bb24be8ac71c3958afa79a868bcd9aa603d8d90a78feb541b403d29873f5f40d1514b95d4eef02486cb594ada5964d1a2b1df91a
- SSDEEP 12288:GCmt5oAx5iuWB2Ceph0lhSMXl+jo4qGQPO3ZMjs/1DYyjH1gsFy3Vcm6mZ73ZBTx:GCmPoAzijQh0lhSMXl4fQPOejs
- TLSH T192A49E16F75C40EAE02AD0B88D6B0646E77378D9579193CF16A4E23E1F537E89E3A700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target worddown_flutter.exe
- Size 15.2MB
- SHA256 6bdb1c5ee4887f4633d1fcc2fe91be1cb887879871fa6bfd8ee4a38b90385513
- MD5 21934f64c5e94a9d3c4319ec0ece56ce
- SHA1 18ecf769b4dadc4409115b453c06415780244a83
- SHA512 eec4e59cfd915b228cad6b5b2897e4591970dd644e34da39786c4d7e5c96e3fa716ef00db213c70f8edee856c3f21d990789390ad40636a3d0b18bc86952c5f8
- SSDEEP 196608:26jAl72mwFKKu9WF39EYEGZrwnXCsrh5V4UVvYM:26jAlpwFKKu9WF3YGZkXCsrh5VXv
- TLSH T125F65B27736112ECD4B7C178C6969A23FA7174464334ABDB2AE0C6A31F537B09E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10