Overview

overview

7

Static

static

3

Scrum.Canv...up.exe

windows10-2004-x64

7

Scrum.Canv...up.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

runtime/di...wVN.js

windows10-2004-x64

3

runtime/di...wVN.js

windows11-ltsc_2024-x64

3

runtime/di...x.html

windows10-2004-x64

3

runtime/di...x.html

windows11-ltsc_2024-x64

3

runtime/node.exe

windows10-2004-x64

1

runtime/node.exe

windows11-ltsc_2024-x64

1

runtime/no...DME.js

windows10-2004-x64

3

runtime/no...DME.js

windows11-ltsc_2024-x64

3

runtime/no...dex.js

windows10-2004-x64

3

runtime/no...dex.js

windows11-ltsc_2024-x64

3

runtime/no...les.js

windows10-2004-x64

3

runtime/no...les.js

windows11-ltsc_2024-x64

3

runtime/no...dex.js

windows10-2004-x64

3

runtime/no...dex.js

windows11-ltsc_2024-x64

3

runtime/no...lts.js

windows10-2004-x64

3

runtime/no...lts.js

windows11-ltsc_2024-x64

3

runtime/no...ies.js

windows10-2004-x64

3

runtime/no...ies.js

windows11-ltsc_2024-x64

3

runtime/no...dex.js

windows10-2004-x64

3

runtime/no...dex.js

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/11/2026, 11:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Scrum.Canvas_1.0.2_x64-setup.exe
  • Size 23.4MB
  • Sample261110-n2hydsat3z
  • SHA256 aeecf4cec1ed50d5804a1ce4a8a3821cbd2519b319a9d6d6328eb6f2642810ff
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Scrum.Canvas_1.0.2_x64-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Scrum.Canvas_1.0.2_x64-setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:1836

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .nycrc
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\call-bound\.nycrc
        • Size 139B
        • SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\call-bound\LICENSE
        • Size 1KB
        • SHA256 5e325595b4ea8cfec3802f545b1def5d7b73e4a5b8e9ba63e32a320f67732292
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\content-type\LICENSE
        • Size 1KB
        • SHA256 257aed98914108e91a337912727b6a802eef218248507f74b76faffaff517a38
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .eslintrc
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\es-errors\.eslintrc
        • Size 43B
        • SHA256 0694050195fc694c5846b0a2a66b437ac775da988f0a779c55fb892597f7f641
        • MD5 SHA1 SHA512
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\forwarded\LICENSE
        • Size 1KB
        • SHA256 bd47ce7b88c7759630d1e2b9fcfa170a0f1fde522be09e13fb1581a79d090400
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .nycrc
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\function-bind\.nycrc
        • Size 216B
        • SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        types.d.ts
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\long\umd\types.d.ts
        • Size 9KB
        • SHA256 84206a85be8e7e8f9307c1d5c087aedb4d389e05b755234aa8f37cc22f717aaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        .eslintrc
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\math-intrinsics\.eslintrc
        • Size 229B
        • SHA256 945b2b35c8d6dc3bb008e7a6391fb98f8d4103ca0dc64652b13dcbea0dd090e1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\math-intrinsics\LICENSE
        • Size 1KB
        • SHA256 2b770a704c15de238c3f622b01b0044ddd60b49ee30608ea6991ebf19db7a7a1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\mime-types\LICENSE
        • Size 1KB
        • SHA256 71f83c4c0621102a56d9853812777b85751bce7e9726f686f5b056c1f8a4b0e6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\pg-cloudflare\LICENSE
        • Size 1KB
        • SHA256 192b8f5c96900f04a1271dec39688655d7416c1c6ea84a508e18b50d2b6751f3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        inbound-parser.test.d.ts
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\pg-protocol\dist\inbound-parser.test.d.ts
        • Size 11B
        • SHA256 8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881
        • MD5 SHA1 SHA512
        Submit Download

        license
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\postgres-bytea\license
        • Size 1KB
        • SHA256 f057f36739d53d228a746de4440c1e0c644ecde06d6beab45337d39c9d12a393
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\proxy-addr\LICENSE
        • Size 1KB
        • SHA256 a7996721249a136fbcfc1c201bcb5f414f38a701d4a24f28abe65e16cfcce813
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .editorconfig
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\side-channel-list\.editorconfig
        • Size 145B
        • SHA256 f3e9230a5e411831564b0a83313248a7455929098f389c5bc07e8241a754d3fd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .eslintrc
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\side-channel-map\.eslintrc
        • Size 185B
        • SHA256 7a1a04ff516aa6b2905885fe15f4f57858ea1703c92456daed9763fa7b4ea7c6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .eslintrc
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\side-channel-weakmap\.eslintrc
        • Size 203B
        • SHA256 9e6424ea116f1edba0e876b422bc162db44411cab9e2af08e0aef08dee6206f6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\side-channel-weakmap\LICENSE
        • Size 1KB
        • SHA256 cfc3f455254c0af0655cc3ff46a41ed644b67599f6043346169d285bf2b3cf3b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        tsconfig.json
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\side-channel\tsconfig.json
        • Size 116B
        • SHA256 6346ee4c020f341387588479dd83740a65ab902a462b8c6b3b8bf51f032c6795
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        types.js
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\sql-escaper\lib\types.js
        • Size 77B
        • SHA256 d43aa81f5bc89faa359e0f97c814ba25155591ff078fbb9bfd40f8c7c9683230
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\type-is\LICENSE
        • Size 1KB
        • SHA256 23d466b1b134b415b66fa50c6526b4cf3e7b9258554da88d3abb371721e7ce68
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        README.md
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\type-is\node_modules\content-type\README.md
        • Size 2KB
        • SHA256 ab20fde18d77c04276cacf5884b884d391cab2b75b905f6d24af5846bb671c90
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        index.d.ts
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\type-is\node_modules\content-type\dist\index.d.ts
        • Size 1KB
        • SHA256 33072e3d0e57b3860fe4dae3deae08ac8463fa94f3f7934659b77654fd057975
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        index.js
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\type-is\node_modules\content-type\dist\index.js
        • Size 5KB
        • SHA256 cc336c843465abcbc40e9b12ff17cf66932a7b3685202fc707e7120f60e5d510
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        index.js.map
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\type-is\node_modules\content-type\dist\index.js.map
        • Size 11KB
        • SHA256 afae79bbc2806914b2a72882c16d2e4f33d657b611de31675de67d6aec878f69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        package.json
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\type-is\node_modules\content-type\package.json
        • Size 1KB
        • SHA256 33102772db7c8375395bdcc11e7004c597b4cdbe457d8dd0ae2e56f5a2d28637
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\runtime\node_modules\wrappy\LICENSE
        • Size 765B
        • SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        scrum-canvas-desktop.exe
        • Path C:\Users\Admin\AppData\Local\Scrum Canvas\scrum-canvas-desktop.exe
        • Size 5.8MB
        • SHA256 15333e84fc335fb275b1d70059c6f61388a3195c954069070a94d0c902eee821
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa50B8.tmp\System.dll
        • Size 12KB
        • SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        modern-wizard.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\nsa50B8.tmp\modern-wizard.bmp
        • Size 25KB
        • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa50B8.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis_tauri_utils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa50B8.tmp\nsis_tauri_utils.dll
        • Size 33KB
        • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download