Overview
overview
7Static
static
3Loader.zip
windows10-2004-x64
1Loader.zip
windows11-ltsc_2024-x64
1Loader.exe
windows10-2004-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....re.dll
windows11-ltsc_2024-x64
1Microsoft....pf.dll
windows10-2004-x64
1Microsoft....pf.dll
windows11-ltsc_2024-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows11-ltsc_2024-x64
1Octokit.dll
windows10-2004-x64
1Octokit.dll
windows11-ltsc_2024-x64
1bin/Monaco...o.html
windows10-2004-x64
3bin/Monaco...o.html
windows11-ltsc_2024-x64
3bin/Monaco...der.js
windows10-2004-x64
3bin/Monaco...der.js
windows11-ltsc_2024-x64
3bin/Monaco...lua.js
windows10-2004-x64
3bin/Monaco...lua.js
windows11-ltsc_2024-x64
3bin/Monaco...in.css
windows10-2004-x64
7bin/Monaco...in.css
windows11-ltsc_2024-x64
3bin/Monaco...ain.js
windows10-2004-x64
3bin/Monaco...ain.js
windows11-ltsc_2024-x64
3bin/Monaco....de.js
windows10-2004-x64
3bin/Monaco....de.js
windows11-ltsc_2024-x64
3bin/Monaco....es.js
windows10-2004-x64
3bin/Monaco....es.js
windows11-ltsc_2024-x64
3bin/Monaco....fr.js
windows10-2004-x64
3bin/Monaco....fr.js
windows11-ltsc_2024-x64
3bin/Monaco....it.js
windows10-2004-x64
3bin/Monaco....it.js
windows11-ltsc_2024-x64
3bin/Monaco....ja.js
windows10-2004-x64
3bin/Monaco....ja.js
windows11-ltsc_2024-x64
3bin/Monaco...nls.js
windows10-2004-x64
3General
- Target Loader.zip
- Size 9.2MB
- Sample261113-pgp2msvw2n
- SHA256 a89216a5a4ee93a0204ef74e8c8f371bbf7275a6d3cbb28a621062331dbc0a8d
- MD5 49cc4c1939405e5bb8a94c902ddf0fba
- SHA1 13d14db71348942e9d3042297cac0f51f417aa69
- SHA512 bc5323253e98ca984e8e3dbbd66b76c9d43adbf400784818a91a257bf9caa50a046262768fdb1eebda9b50ced3aa03bcaf74e73c9730317184ef42541cd0a200
- SSDEEP 196608:IZYGEscaTY7NEbXHIyCHp1AK1e1yhtiLojuoHSiHrcQIRRQPkdVH:ISGJc0SNEbzsgokMuoHPLIR2PkH
- TLSH T125A633A180614329E23791B9B4E5D13918DD0FFEF5D4A98D6120C28316DBEC7CF9F68A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Loader.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Loader.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Loader.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral5
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral6
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral7
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral8
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral9
Sample
Newtonsoft.Json.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral10
Sample
Octokit.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
Octokit.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral12
Sample
bin/Monaco/Monaco.html
Resource
win10v2004-20260911-en
Behavioral task
behavioral13
Sample
bin/Monaco/Monaco.html
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral14
Sample
bin/Monaco/vs/Loader.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral15
Sample
bin/Monaco/vs/Loader.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral16
Sample
bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral17
Sample
bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral18
Sample
bin/Monaco/vs/editor/editor.main.css
Resource
win10v2004-20260911-en
Behavioral task
behavioral19
Sample
bin/Monaco/vs/editor/editor.main.css
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral20
Sample
bin/Monaco/vs/editor/editor.main.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral21
Sample
bin/Monaco/vs/editor/editor.main.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral22
Sample
bin/Monaco/vs/editor/editor.main.nls.de.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral23
Sample
bin/Monaco/vs/editor/editor.main.nls.de.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral24
Sample
bin/Monaco/vs/editor/editor.main.nls.es.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral25
Sample
bin/Monaco/vs/editor/editor.main.nls.es.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral26
Sample
bin/Monaco/vs/editor/editor.main.nls.fr.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral27
Sample
bin/Monaco/vs/editor/editor.main.nls.fr.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral28
Sample
bin/Monaco/vs/editor/editor.main.nls.it.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral29
Sample
bin/Monaco/vs/editor/editor.main.nls.it.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral30
Sample
bin/Monaco/vs/editor/editor.main.nls.ja.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral31
Sample
bin/Monaco/vs/editor/editor.main.nls.ja.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral32
Sample
bin/Monaco/vs/editor/editor.main.nls.js
Resource
win10v2004-20260911-en
Malware Config
Targets
-
- Target Loader.zip
- Size 9.2MB
- SHA256 a89216a5a4ee93a0204ef74e8c8f371bbf7275a6d3cbb28a621062331dbc0a8d
- MD5 49cc4c1939405e5bb8a94c902ddf0fba
- SHA1 13d14db71348942e9d3042297cac0f51f417aa69
- SHA512 bc5323253e98ca984e8e3dbbd66b76c9d43adbf400784818a91a257bf9caa50a046262768fdb1eebda9b50ced3aa03bcaf74e73c9730317184ef42541cd0a200
- SSDEEP 196608:IZYGEscaTY7NEbXHIyCHp1AK1e1yhtiLojuoHSiHrcQIRRQPkdVH:ISGJc0SNEbzsgokMuoHPLIR2PkH
- TLSH T125A633A180614329E23791B9B4E5D13918DD0FFEF5D4A98D6120C28316DBEC7CF9F68A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Loader.exe
- Size 1.3MB
- SHA256 10a2e984540fed0b994bcbbc1a06be11d8dd7355e038455fafbf002141403bfe
- MD5 20b110ea031dea9781c4cbdf8b3a84d8
- SHA1 060489edb1b615bcdfd719cccf355a99b4c9896c
- SHA512 b545cb9aceba5b6b71bdbee504574f61f7ff3b8b6582a30fdebc9b39060c0941f505783a5a41ecb3f655f9f82fe75a9ce4acba7f870b3231b4b69578e89dee47
- SSDEEP 24576:goehbK6qQeIAiGyzMQItIMXGujO/KHYej5QgjJ91s6p0F7HpEWWscw3EtiyADjvp:goehbK6qQeIAiGyzMQItbXbjO/IYej5u
- TLSH T1CB554C6D93E850D9D6BAD27885494A19FA71780D2F638FDB00B4850A3F3BFE14D39B06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.Web.WebView2.Core.dll
- Size 615KB
- SHA256 4a4efdf712ceea4050eb2252ec2a9136cdcf32b9bfbb3ad58d79396f36e9665d
- MD5 46a2bad2d6b66af8279bdec2feb53afe
- SHA1 76e22a752b2720ad0329b5dcf833820bb73c73c3
- SHA512 b958cdcc84885bd67328f810163c087d45113cbc995fa35920297e037d1e1dcc41e03dcf25b060be528cce53ae46dc7fb3d43d2f12390d195978579091d1fc27
- SSDEEP 12288:v6AN7ERpkbC65sPiXqXcN/gIYxmG8WD6ptvxmgHAVxQz8tAgJrP322Uc+iKmDR57:tC
- TLSH T15ED4412223F94619F5F27F79563917608BFABC96BE78C35D8698502D0D72F8099A0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Microsoft.Web.WebView2.Wpf.dll
- Size 80KB
- SHA256 d797f41b5b125b7f155e995808ae68377f3f3876ad4dfd86fe2b5eaaf7f8a569
- MD5 4413cecfc59cd9cc067d8e9609ffa9cf
- SHA1 a345b1b36945279d72a22adbe8653ac81b1e3b90
- SHA512 680afd0c1a0427d440833161633ed47a110af782d6b43a62006b6c13176e3a7621e199a931610772fb3e8250cca0e81c49a6e3b55f7ca9a6c0f8d9b656d559db
- SSDEEP 1536:sG8rrcaIqqE6PV7gIM2KbQy9Zy1w44ha87Y1DHfFWyEb30mpc4Jjr4YeUq+HhxUf:rud96PVY2qm4a8+DHfFC30mpc4Jjr4YI
- TLSH T1EC836D4153BC4423C6EF1BFD7DA091240BB9FA837A52DB9E2A84B1DC1C9739219193B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Octokit.dll
- Size 1.3MB
- SHA256 6a48642d6ae464b43a6cb50292618af6c73ada8d726644e50d4fa44a1783f638
- MD5 2c2a65e9cf0776fa77600d5fe3b30783
- SHA1 5b1b997e041f8235ef5b60db885bd2ca2711170b
- SHA512 8b33f2ccb33dafb1bfc29dc8c5283c1483525007b5c4e36e90ade2cf26b223b029d0e24a51e0266c7852323644f44668b26e7ff9e7d4419482e4bd0b3afcab30
- SSDEEP 24576:l8PXZv3QFVC5gcrjWYXFWjeYwqseN63pfC35Ax5zg27nYLYFHVLYh9oH:4XGmmcOYXFWjeYwqseN63pfC35Ax5zgc
- TLSH T140553B313F9C9E6AD25D3776AC60022A9BF1D58A2362EB5B0730F5263C527C69DD0273
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target bin/Monaco/Monaco.html
- Size 10KB
- SHA256 b5e998236ced3177e44a7a35b33892751d758275b5623cc050872bab66a738c4
- MD5 6c54f348b6511858b8963c5f5bd836ac
- SHA1 7a87f9f4f7eb9c683f2ceb6766faa9af59ef0760
- SHA512 95cab71f791aa09ac10b4d300202703588fd905d3a844063b7b7fcb5dc86e775096d7f8df65b09cff5533960224a3a09dd921ac843a81a0332f1e83d6c778aca
- SSDEEP 192:aEUd3PorvYIc5FUp5keghKcCI2MCTJ3+NLSaPh/WCY/jZfOs+TIDnvnoae:8d3Potcv85keghHwjD+TIDnoae
- TLSH T10422A6B9B34E140B01D65315A8F77184FE3CC1369217489FBBDEE610E4ED499435B2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/Monaco/vs/Loader.js
- Size 27KB
- SHA256 0512d9ed3e5bb3daef94aa5c16a6c3e2ee26ffed9de00d1434ffe46a027b16b9
- MD5 8a3086f6c6298f986bda09080dd003b1
- SHA1 8c7d41c586bfa015fb5cc50a2fdc547711b57c3c
- SHA512 9e586742f4e19938132e41145deec584a7b8c7e111b3c6e9254f8d11db632ebe4d66898458ed7bcfc0614d06e20eb33d5a6a8eb8b32d91110557255cf1dbf017
- SSDEEP 768:3J6C/c2x0cAu57XQxJRDRi+R/TvrCv3zM2GRl0VEj:Z6grH7qTXRvmDI
- TLSH T17DD294CEBB9474234247F8E8D43F001BE2B6955E544D842C710DD8EE5CB998AA23EF78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/Monaco/vs/basic-languages/lua/lua.js
- Size 5KB
- SHA256 fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42
- MD5 8706d861294e09a1f2f7e63d19e5fcb7
- SHA1 fa5f4bdc6c2f1728f65c41fb5c539211a24b6f23
- SHA512 1f9297eb4392db612630f824069afdc9d49259aba6361fb0b87372123ada067bc27d10d0623dc1eb7494da55c82840c5521f6fef74c1ada3b0fd801755234f1f
- SSDEEP 96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfE:nD4Ldyn7Ss/TMmUtOfxhxjE
- TLSH T11CB11ED89C9951594AE1E766879EE0A6E1544203CC3C7D74B7EC438C4F8CA4C86BE73D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/Monaco/vs/editor/editor.main.css
- Size 171KB
- SHA256 2ec118616a1370e7c37342da85834ca1819400c28f83abfcbbb1ef50b51f7701
- MD5 233217455a3ef3604bf4942024b94f98
- SHA1 95cd3ce46f4ca65708ec25d59dddbfa3fc44e143
- SHA512 6f4cb7b88673666b7dc1beab3ec2aec4d7d353e6da9f6f14ed2fee8848c7da34ee5060d9eb34ecbb5db71b5b98e3f8582c09ef3efe4f2d9d3135dea87d497455
- SSDEEP 1536:ZxP4PUPVP0PAPeMi76Q4TVq5bbhLynlDTkDatDF8Jmmvgs0aMJkn:p2bIRkDSYmmvgs0aMJK
- TLSH T1E9041AAF96061F4F26E54423C195BFAA38FDC1B6F0128ED5E87D3B64C00D6D922961BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target bin/Monaco/vs/editor/editor.main.js
- Size 2.0MB
- SHA256 93d28520c07fbca09e20886087f28797bb7bd0e6cf77400153aab5ae67e3ce18
- MD5 9399a8eaa741d04b0ae6566a5ebb8106
- SHA1 5646a9d35b773d784ad914417ed861c5cba45e31
- SHA512 d37ef5a848e371f7db9616a4bf8b5347449abb3e244a5527396756791583cad455802450ceeb88dce39642c47aceaf2be6b95bede23b9ed68b5d4b7b9022b9c8
- SSDEEP 24576:SmmBNDw4gCXJkB4nIg2IxhbaeZYIMsNjvit4f:wDw4gCXJk62+aeKIMsNjvit4f
- TLSH T12A95E7997155342243C7A0B6A47F050FB33A54ADE80A406CB7B8D8ED2DBE5896337F78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/Monaco/vs/editor/editor.main.nls.de.js
- Size 36KB
- SHA256 0dee462d5fb231f169f6cbc432465a43fd445c011fe650e29f5fb2bccc31eaae
- MD5 4d83bc1bced6f773423be6f939472cfe
- SHA1 1b42889a7f580df9f7d399c33141d38548143ed1
- SHA512 c53d522438767a15b5711099fee0acb62ff21289b62640d1a4823a90c8a7d8836bc932daae477d5188b1ba78c50c581284c4d7379efb532f37d356add97ac8e4
- SSDEEP 768:jADv7LbgRyefe80QqYax/mZgb2ET1UZ0IMlYmz7w0hxH1N1Bg93RyFGAIDB7wZ9m:jADDx80QqYax/mmb2YLIEYmz7JhxH10D
- TLSH T111F208A2AD43A13B5F8523D2A6415C377E19E1AD7A12500D48BEC52B318B9FAC3DF433
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/Monaco/vs/editor/editor.main.nls.es.js
- Size 37KB
- SHA256 203ff3591e02eb7b55a591e53919cc337f8dea73e6446fc3493227761c0794ba
- MD5 b371235f971baa51f58f123f40c4435a
- SHA1 843d4a2d214c7d9da650cf4d0c6981ac1dab69c6
- SHA512 77d43490f1208dde16b6773551ea983cb2352455178ea0e3d4d4b2f2e05dc406cafae89738001d708b780b58882cf5448eb7a8d1c11aa7b8e87915a390da618a
- SSDEEP 384:hwuiA9wZFjNzWZQz7uDlnDEuoKZvGrkEq1EhBR3H6Sg4eUz+JWCHcxS+S9SxS9tf:Y9ZCZQOtDZSj1XJS+S9SxS9tx78teB
- TLSH T19503B83A46CC172315D343CEF193D513E144AC8AB168C2D7A1BD9BA630CCE9CD56FA66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/Monaco/vs/editor/editor.main.nls.fr.js
- Size 40KB
- SHA256 7fde40b2b212d274617232de09452c6cb896e8a3c6b9e0b459f067cd07f31a99
- MD5 d319e61fc6b357b9a5d8e3bbaa44ce3c
- SHA1 b1539b082b2b8290f05dfe17d6fee3d64b2ec244
- SHA512 6ba80b90242dc55ecfa1678e7f8506ed9add4bf08067b125ba63d42b8e8e4455507a86369f6fac6c9d10565d083e7364d4fc79d62e9bd460fe49957c91f598e6
- SSDEEP 768:HlKogi6Q3JbQWxxGmmrHeHPO10xSgGvJ1COIoJoZjbEMO9ms:Hl8KbQwKRavGJoZG
- TLSH T1AB03962BA6C422920EC317C3F5636593E834C48C739ED315ADAB56D912C64DCE2DFAE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/Monaco/vs/editor/editor.main.nls.it.js
- Size 38KB
- SHA256 f67cec6dbf98c98c834638d20df53c5a770edada7f26ebf6d0b7dfec60f7a4ab
- MD5 a8855a662eb4d3a771fdab7ba6287def
- SHA1 a78b57810ac8e9704e97897c6168f4140d2eadf7
- SHA512 1c03f8b243701870d8a17e5565da6c65c3f1d76dfb55c88cf68578a4754434a071565da9147e7c833de588a5907b5ece07e018dec52c79d9b2914c964a48a4b5
- SSDEEP 768:4klNUuMam1xYhz2LyXSXBjlHtvnYyjMbRgD5SL2KAqI0UGmGfpspuoeu317K93Ph:5f0SL2KAqKKNpCi
- TLSH T12203DA3A458122112DCB23DFF573648AFB6668CC7E5C315614BC462C21CED98B2DE7BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/Monaco/vs/editor/editor.main.nls.ja.js
- Size 41KB
- SHA256 ea9f5e8993017f858cd9ee70aac3d7990ca85eaf40a052025e530fb1c300837f
- MD5 a1f3c9e940206ca310147d644305a6e1
- SHA1 005a8f7023b9d873962c7272203cc0c0d0ccc624
- SHA512 f98ad1e4c127c3aa4a4ff2fa7ed2a65b5d32644211679e42d70aae03f9c0af1da7704061c28e95cbb25ad14745b1d086c9a49492119d0f97653a0b817823bc69
- SSDEEP 384:hIDtFoY0u0ZAITlMRFG1yu9RwJUcQ8bo6CdXtK+c3YcnI+PjnN3H6Sg4dcRID9Dh:VW6RwJrQNdbc9N1aBDzTG7e2ZLlx/
- TLSH T10213937CABC0A83A0D25D3B31A8DB4E67815ED5BFC227232807DF42579B02CDD585AB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target bin/Monaco/vs/editor/editor.main.nls.js
- Size 31KB
- SHA256 fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48
- MD5 74dd2381ddbb5af80ce28aefed3068fc
- SHA1 0996dc91842ab20387e08a46f3807a3f77958902
- SHA512 8841e0823905cf3168f388a7aeaf5edd32d44902035ba2078202193354caf8cd74cb4cab920e455404575739f35e19ea5f3d88eab012c4ebefc0ccb1ed19a46e
- SSDEEP 384:h03CdtOurX25WyV1Vdf40CJjocZC6F7PKUvRjAaswHq9x3H6Sg4NFVlQlUDZpLjb:23mmysb1zVes3pxCSgwgwjhb
- TLSH T153E2B767A78813372A8302DBB2DED194BB1A597D7351034678AD943832C64F0A3BF9F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10