d6521db5570adde02aed6470ac50a37e019f9b4e3487d8b6cd466b6288899e84

Sharing

Copy URL Twitter E-mail

General

Target
Avatarlockpick-2026.11.12-b33-win-x64-standalone.exe
Size 102.8MB
Sample261113-cmp8daex7y
SHA256 d6521db5570adde02aed6470ac50a37e019f9b4e3487d8b6cd466b6288899e84
MD5 d55fce36fea346156f788edd3f112b3c
SHA1 c34fffadcd85f0a60fd44ae336bb82199085d3cf
SHA512 ab4acfd4584e9a38331fad5e0bc625424ed47541ddbc3181adb784a1fb065db244354b434478fb90e99fdb9abaec3b42cc72ff63607589c799cf80b2922581b4
SSDEEP 1572864:UuAUbQvXTkCF0K1MUzbilIuM2pFfe/8htq2rQqSdVkb71fYU0N3e97:UuAUbQvjkoSXlIuzzu8VH5Y3pq7
TLSH
T10B3833766503C8D9F975A3BD0A7553FB4B1CBDBA5CA098F22EDB39212D3047AEC50824
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Avatarlockpick-2026.11.12-b33-win-x64-standalone.exe
- Size 102.8MB
- SHA256 d6521db5570adde02aed6470ac50a37e019f9b4e3487d8b6cd466b6288899e84
- MD5 d55fce36fea346156f788edd3f112b3c
- SHA1 c34fffadcd85f0a60fd44ae336bb82199085d3cf
- SHA512 ab4acfd4584e9a38331fad5e0bc625424ed47541ddbc3181adb784a1fb065db244354b434478fb90e99fdb9abaec3b42cc72ff63607589c799cf80b2922581b4
- SSDEEP 1572864:UuAUbQvXTkCF0K1MUzbilIuM2pFfe/8htq2rQqSdVkb71fYU0N3e97:UuAUbQvjkoSXlIuzzu8VH5Y3pq7
- TLSH
  T10B3833766503C8D9F975A3BD0A7553FB4B1CBDBA5CA098F22EDB39212D3047AEC50824
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral1
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  Avatarlockpick.exe
- Size 235.2MB
- SHA256 0a2a3a2d484ccb2ff8e1861efdc7d0382616975ed5ab1cf97b4d2a9ac30c4cfd
- MD5 bc08d5da754aa35666e3d9f0abc4e70e
- SHA1 402056ebe843657bc270f5ea0899ce23614539c1
- SHA512 82aa30113a54ba970c585798294d2d167bb06085b0edb54cee1582cb8d4fbfd59aafa10e2c6e37fa737b86c17a353e0fda1f6c9668acee55af491e572c22f335
- SSDEEP 1572864:/oBLUvfi1b6LUMfFrx3PXYrdb/1SwRqdF4RoIHKhZnr2XoHbgE8jLiorpQGxkg0Q:qUykUYZnKktYYXYYhs
- TLSH
  T145C88C03F2A641D9C05DC1B58B5A9633FE71B8494B25A3DF2B5443922F76EE82B3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral4
- Target
  LICENSES.chromium.html
- Size 19.5MB
- SHA256 e6e6b1f9cb0f32235412be113de7716333e88121f9159a0ea0ff3be652021af7
- MD5 d260441f74fb71b91762f3285b4e8f16
- SHA1 e119948a919b733a9e4ffcb4564f4fd0a8427609
- SHA512 d7448129690721bfc52fc0bb53c5dd14e6cf0377eb9f52fff1b5b58a66fd61af2a6d6a90bf6e251dbc3e45be0b1cd98dc83d880abab5198176d1a9c45eba7845
- SSDEEP 49152:ZehWCrdOOoVo5TYp2xnuCQpc3txsJM+QAFId+Qi4WMEAccr:m
- TLSH
  T12827B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  d3dcompiler_47.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH
  T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  dxcompiler.dll
- Size 24.6MB
- SHA256 22d415f86ce445f4beb57afbb6856b3b83f19918ad270b6ae6047168ec73956d
- MD5 e301f37e2dfca8d2b501d3444c7ef14d
- SHA1 ab37e6e1c6e90979f087fc668477ca77d8fd5b48
- SHA512 3dcf375486027189d3b2ec571ed452df861e5e9cb8df7d0377ea10e3b7967fcf9be6db4e1d86e67aa154b54f320c10a6ed3e173c862dcfbb4e1ff800a9a0a1da
- SSDEEP 393216:90MTWaO7famOUjsa5NzmgVkWhKvSpOhqJUELYbPMn:Yaba5Nz6Whr+qJ0PMn
- TLSH
  T1AA4729122646D49CC099C879C7678B268A2C30E73FA7B9EFC0F451252B79DBC5B39235
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  dxil.dll
- Size 1.4MB
- SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
- MD5 c9a7241ce83437d54a82522aa0b54575
- SHA1 acff69399c4f17c4f20f70560fb89a9163d2b486
- SHA512 8ad8c77a2368e363ad16cc1f9b3a0e4ac15634722340bdebb0e4957e7e117faaf36db2d6e08cb49127849b64844a75ebdd7e19b3f8b7e1f4412fb0066dce1ad5
- SSDEEP 24576:YcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/2:YsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bX
- TLSH
  T109656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  ffmpeg.dll
- Size 3.0MB
- SHA256 d38957b4351486a16141bdd3162643b811564ba6bfa1d12f374c13b70207dc11
- MD5 b55e35efbec9cdd8887bd9ab651e83e7
- SHA1 849bd96ba5d71271ad9fb276baa6a61f17bd9eae
- SHA512 1ef1e6108629ee1ea7c734e4b4a0eb09b5369dfac890e078d012e39c4596b0884e6ec0c120aed2fba872c712d39d1d8720a3d01d461a432c5d3ef86a8266f700
- SSDEEP 49152:Yagye0i1JBlvS0ZU3oAQULMsvpTwDowaY9/Gz/YaLuPLuf0E6OOlz2H1:YJ1lS0ZcoAs9HaLuThe
- TLSH
  T182E5AE03F6D251EDD019C03497AB9213F271780A8F205AEF17A05A253F66FE86D7E768
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  resources/default_app.asar
- Size 108KB
- SHA256 0eb2491b0a9ac94790389d39c09dd5005c6c1f0665842943829bbd0193f6cc4f
- MD5 e54f42d2b33bbddc102a6d861f860f21
- SHA1 129694f72f5a850e92c9b2679624e074a82051f3
- SHA512 54a410f978c7e42e28e2025c501249489fa8b89f8d4c9569f52c862f265e24060b1e21690bf5d757b3973b727ec76c24c352268674c5338135267ddc0044828a
- SSDEEP 3072:nWDxvTvFRWrjXxs8xbKNkCeF1SBRbFdPQrZsH0L5uRD:nWDd5R4XxRYmS7orZsH0L8
- TLSH
  T100B3E19412F60231D86B4AFE9FAF16267A39241732CDD0C4722D87609FE15D2A5E3BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11
- Target
  vk_swiftshader.dll
- Size 5.3MB
- SHA256 e66cfe13aafbd7d80226e3ce085de5786479de35f7d6a75eded9ecb4ebf9784b
- MD5 62e84aed04270080784065064f245e95
- SHA1 9f46fcfa1d642a3ed4777385f7d67145204a3fac
- SHA512 64bde620122afeb27c524f24b2b414d4031ef5b5d3f657c8ba68739e58acd8f764b17cb64e215ed7ae2f84eadfe2865756d8f3c45a3486aead21955e20022953
- SSDEEP 49152:AsbF8aGwMFhn4X6t+LsctbWSRIWHyQ1TKhwI+AODvOrSfehTwm6+v16TbG4UqGBb:AsbF+YDkg5sBLa
- TLSH
  T1A5464903F69681D9C06DE6798B5FA623F631F8800B2276DF56A00F192E66FE0673D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  vulkan-1.dll
- Size 917KB
- SHA256 85d52af200d0020855e91477f6334b59e12167f051991b2a0bb35b9697c0c778
- MD5 c4a168d6b121f3f4a579327ea2a8a9d3
- SHA1 8f91e335b3d59d7f43c6aaaa320715c7e05a3850
- SHA512 47dfefac2794b7a8a59dffdd90c5f469bf845c6ff3c5b808a011625274fe2e146b34792a0b26c7dc355204a8881969a8438a0907227567d928c6c2429b11c46f
- SSDEEP 24576:8HzMfR00pJ8YRlEcFX0GoJyKqPHrKNlC1E+Dkw7+DQ6g3v0TAE7yoeHYV:azMfRbX8alto8KqTKNlC1E+Dkw7+DQ6N
- TLSH
  T12F156D6396948AB9D6768034DDD28A0389F174811322BACF03B41714BF5EFF46B7DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral14