faf4d3b4da421c0e3b9611e9b861647ec1e6f14995c783a21689c8f44a0e5346 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

aipai_cliper.exe

windows10-2004-x64

4

aipai_cliper.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...if.dll

windows10-2004-x64

3

$PLUGINSDI...if.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/Inetc.dll

windows10-2004-x64

3

$PLUGINSDIR/Inetc.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...tn.dll

windows10-2004-x64

3

$PLUGINSDI...tn.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...oc.dll

windows10-2004-x64

3

$PLUGINSDI...oc.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

【多多�...��.url

windows10-2004-x64

7

【多多�...��.url

windows11-ltsc_2024-x64

7

多多软�...��.url

windows10-2004-x64

7

多多软�...��.url

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
faf4d3b4da421c0e3b9611e9b861647ec1e6f14995c783a21689c8f44a0e5346
Size 711KB
Sample261110-wlk2tact7v
SHA256 faf4d3b4da421c0e3b9611e9b861647ec1e6f14995c783a21689c8f44a0e5346
MD5 db04062dee636f0541f5647592443d59
SHA1 d0ef17439c4777bab5b3662086e1a36e1129f810
SHA512 7a0553e52c68031154b239505bbed3d635f528bde20e6495ffc596cd9296fb7c5e3451dd59db10ec7b9783f08fe4b085b1202ec2d7bb992e2e03c3ee64b7b120
SSDEEP 12288:brRq1bwg7Ea8zPY7b+Xf7ivbrgCHO7rBj+BX9KFUmZHMabg5fLsOrdSCP9HJ:biwhVj0Sl+B9rmRMa0GAdfP9p
TLSH
T176F433F8150FDB2288171BD43CD6860DE8FB2CB5FBBF7705D2A405A24482F195BB6989
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery installer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

aipai_cliper.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

aipai_cliper.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/AnimGif.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/AnimGif.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/BgWorker.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/BgWorker.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/Inetc.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/Inetc.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/NSIS7z.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/NSIS7z.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/SkinBtn.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/SkinBtn.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/SkinProgress.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/SkinProgress.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/WndProc.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/WndProc.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

【多多软件站-交流群】点击链接加入群聊.url

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral24

Sample

【多多软件站-交流群】点击链接加入群聊.url

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral25

Sample

多多软件站-提供绿色软件和热门单机游戏下载.url

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

defense_evasion

Behavioral task

behavioral26

Sample

多多软件站-提供绿色软件和热门单机游戏下载.url

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

defense_evasion

Malware Config

Targets

- Target
  aipai_cliper.exe
- Size 738KB
- SHA256 ec9065f4158ef0195a1b1341cf60888966046fbb2a7a14335bb461f8ab764e5b
- MD5 d5d4d3dd9f1784059f2b236ca7ade449
- SHA1 21f0b86539164a62386da19e7447dd1fcd8ab5c1
- SHA512 a89039c3371625883b54cc53a163e05527428320ee52eed1e31179c31cd131a7b88670e6e4b50a8987dd2a90291818843bd6218155c28e9ff95816c0e3258abc
- SSDEEP 12288:iOTtAoEMr+7b+Xj7ivb9oiiG5H+xrBj+DX9gFUmZHwib0ZAKgWsO3dSCPN4QY:TyoEOOvbsl+b9pmRwiw1gTWdfPNY
- TLSH
  T135F423C72A05C47BC4121BB019B69D4B7FFB8C7496E9210797783D6218B37422BBE987
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AnimGif.dll
- Size 12KB
- SHA256 751d3b248db6bc83927e6e30c18180a547e1f3a04ab55e06776eb377a9563542
- MD5 6ebf230433155f750832677a49a30ee3
- SHA1 3115d72099f1cb0dc5eea01e1b19741194c66967
- SHA512 b938514e17b1cfb7e0a7334c835788dd6fc70fb74cfbb0a2c678f6686d5674440fae7e9402d38ed614e3d9b0824940d73ac3fea83808f9a4a9761f39149f6b3f
- SSDEEP 192:0nJ/LON9CxheJr/7H2B6lHv0hXbh3IQ5w:Y/e80JTvH2Xbq2w
- TLSH
  T16242F902AA01C1F3E453753A15AE3972EAEAE382A5705F8BC727EC6918201527D3D34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/BgWorker.dll
- Size 2KB
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- TLSH
  T1C351B72E612C0BFFC2963C34BC96795B1B6FC060A39A6328813FC5853C141B4233DB2A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/Inetc.dll
- Size 766KB
- SHA256 d662da3c509ce0d4083d6bf502f7cae6ce15f42907e4ab04bc414da592480478
- MD5 4fcff2eff179f1001f9072376d980cec
- SHA1 2cbd03904717c24434b10cd2c79c70461674098b
- SHA512 e41ba1e953b93cddd744dfc1532e3f8ceb372b02d2b4c3eab0ba37a735396d967b0b8523181b2739995c14bd7fc601839f4a74a4f79397344ed8ad574adccdb7
- SSDEEP 384:v/WRIf3j70UHjUSuGDVFpy1Xe6Eo/HpXzQrNVpgwQ2WX0Ac9khYLMkIX0+GL0dH5:v/Wg3j70UD7xRbYe6EohjgawV4TIE
- TLSH
  T1F7F42980728CDCB3E1A077B59E1D12A2B0C00EC5571E3AE7A2ED564C34EA6E17AF5D1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/NSIS7z.dll
- Size 624KB
- SHA256 1d437a6c34af37d497067cc8f8bdf00f7dcf767f5185b8abc971fcbee2b43e05
- MD5 ca45db26bb1c02b6eca5103d2acd0985
- SHA1 b6d38ed55e41bd61c3a8e36b60b1b49ae1ac348d
- SHA512 fd03327e141b1cbb400c1f28df780753ecdc4e8d0ae017b1aa62de9e7cc69fdb886dcdaf01a1aee06f3049fa91191abbce6ef1b2b258e184c5b23b3a1a876e8a
- SSDEEP 12288:AiTC6gj/AeeftSrpNxGaR/gneKTKL2Uar8P25j+tURrmw:AiTCXApuGaZgneKeLk8P5krm
- TLSH
  T14ED49D23B981C076E23F12318D18F7BD12FEB6754924966BB7981B6D1FB04C1AB19B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/SkinBtn.dll
- Size 4KB
- SHA256 ee1c06692a757473737b0ebdef16f77b63afac864d0890022d905e4873737dd6
- MD5 e4ec95271ff1bcebab49bdfed6817a22
- SHA1 2c03e97f4773aea80ecdb98a1482e5896fe4677b
- SHA512 771a527133806307a1b17b7e956d6a3c16e9bc675bf084b43204ae784a057dac2726dbf90645692876043a4e7365ba8825c167621fde4760c79cd84679e2aa3d
- SSDEEP 48:iIf3aEDfeWm8JHFQbUrUPJJDFoetaxn/pFW3GNivz187eqzI/kMr8oX0Zbj:lv9Dfw8DQbhD2iaxn/PHmiNI/dQFZH
- TLSH
  T1E691B6BF33C48EF5E056017B1E9319935B9E49715379912F942329866B60DABCA3C703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/SkinProgress.dll
- Size 4KB
- SHA256 888b32ecbc37ce67d4edc28d894cba0a4f4e2488cfc2212d1af011bd0bfe97ff
- MD5 cc037c4703d3ec257efeef2ce0a1a20e
- SHA1 b3d6cc8f687a31fb2c1a5921a38de9429af20502
- SHA512 120bfa0a68775bef04c1863023b0e73a41982284fb36da7f497fbb7d5ed8631ad02fa09951424d339f6fefaa90a17c12f949dd68bb33bad64b1b7cace489d2a7
- TLSH
  T15E81833A76D109F3D01902BF169B49F3A7F545608375810D88B36E9EAB65E6BC87CB03
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 a0cac4cf4852895619bc7743ebeb89f9e4927ccdb9e66b1bcd92a4136d0f9c77
- MD5 b0c77267f13b2f87c084fd86ef51ccfc
- SHA1 f7543f9e9b4f04386dfbf33c38cbed1bf205afb3
- SHA512 f2b57a2eea00f52a3c7080f4b5f2bb85a7a9b9f16d12da8f8ff673824556c62a0f742b72be0fd82a2612a4b6dbd7e0fdc27065212da703c2f7e28d199696f66e
- SSDEEP 192:4PtkiQJr7jHYT87RfwXQ6YSYtOuVDi7IsFW14Ll8CO:H78TQIgGCDp14LGC
- TLSH
  T162324A1503904AF3F996C13C14263ABF7F792A218BF14E939FA39481BE2D5D96D39312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 0073337816509851476c2cc154f471a3e3a1a2806b97c363870acc09a30a5ed7
- MD5 dada3e1836af78d5b24499da252d01e4
- SHA1 d2a1c25405e3c74973cf18dec2c7138df9e96a83
- SHA512 f8bda8413dadb00a644341da5e076f203a3134daaefd2961fa0341f5a533eee28582ce9872354ead698bb1275ee7726fa574267e909a3e2f977908392e7a5c66
- TLSH
  T19A81717B62A80CF3C0940BBB41D71CA71376DC702793011E99470E9A34C4AAFED6E705
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/WndProc.dll
- Size 3KB
- SHA256 e7b3115fa2ce4a8fa09beeefa4fb634a474197f38a2854ce9be60d0a26016458
- MD5 f0cb331dd4bd92a6ebce45e7cd1cf5ef
- SHA1 b66ea0c10b08750295f2dc7c170b370402393214
- SHA512 7c33418f39b91ae0d4cc8b560f516bac293593eef539832815028878c2058bf1691c2d767a039cf312989839071f2f6f0b6d9d59835acdfff6b448bf1ffea271
- TLSH
  T1E951207317E005E2F4142BBD285B6BD7633BC27437A5C3DB816A49072A045EBBCB8756
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 062c75ad650548750564ffd7aef8cd553773b5c26cae7f25a5749b13165194e3
- MD5 eac1c3707970fe7c71b2d760c34763fa
- SHA1 f275e659ad7798994361f6ccb1481050aba30ff8
- SHA512 3415bd555cf47407c0ae62be0dbcba7173d2b33a371bf083ce908fc901811adb888b7787d11eb9d99a1a739cbd9d1c66e565db6cd678bdadaf753fbda14ffd09
- SSDEEP 96:oXHqZ4zC5RH3cXX1LlYlRowycxM2DjDf3GEst+Nt+jvDYx4AqndYHnxss:oXHq+CP3uKrpyREs06YxcdGn
- TLSH
  T108121A635A4455F3D5D7223A216A2F2FD77C9324A062BC0287779E462BF431A7E3A341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  【多多软件站-交流群】点击链接加入群聊.url
- Size 159B
- SHA256 3b10c3004ea794d27b95a901c8ce61c3168afa27f7885e27c16bbd5d44de8639
- MD5 a8f0fe295879119b6365410e0cc1ad49
- SHA1 d62d2c310106c15fd4be2ef542906c2e259d38d6
- SHA512 a8312763bb0b1d4c00e2ef4fa2e905743d140d8edb5553c441992c48dec40c5984ad700346e2fcd2cca22f43cf7b454a7ae9abeafc85b641a2568d1ec33bb1e2
- TLSH
  T165C02BAD0242CCCAC214944B6070FC0E9B0FB0620AD7D1BC3641DF892CEE0DAE04CB26
- MD5 SHA1 SHA512 TLSH
Score

7^/10

defense_evasion
- Uses Rundll32 to proxy-execute a payload
  Rundll32 is a signed Windows utility that executes code inside DLLs. It can load specific system libraries to run malicious executables or scripts.
  defense_evasion
behavioral23 behavioral24
- Target
  多多软件站-提供绿色软件和热门单机游戏下载.url
- Size 151B
- SHA256 8ce5067162b095958f82aae58b375228d6f0e987ee643729f6c860c74a2be055
- MD5 45c18450ef1bb6b023956b704797f7b3
- SHA1 41dc152a5cb6e6fd8c8fb6e0203221c8fe0de3bb
- SHA512 e6844e78a5ab4e323b2d8fd2960a1da326d333dc3096fda1c1e030a76f25e22858754623176add769e6a86c54de6cd7d877b5005891dfff689662acf176bca7a
- TLSH
  T140C08CA80101C0C6D300800A20B0F909990F716009C2C2A92A45DF492C8D0C2E048665
- MD5 SHA1 SHA512 TLSH
Score

7^/10

defense_evasion
- Uses Rundll32 to proxy-execute a payload
  Rundll32 is a signed Windows utility that executes code inside DLLs. It can load specific system libraries to run malicious executables or scripts.
  defense_evasion
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

System Binary Proxy Execution

Rundll32

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

defense_evasion

behavioral24

defense_evasion

behavioral25

defense_evasion

behavioral26

defense_evasion

© 2018-2026

Terms | Privacy