Overview
overview
4Static
static
3patch_16.1...25.exe
windows10-2004-x64
4patch_16.1...25.exe
windows11-ltsc_2024-x64
4$PLUGINSDIR/7z.dll
windows10-2004-x64
3$PLUGINSDIR/7z.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...te.exe
windows10-2004-x64
3$PLUGINSDI...te.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...er.exe
windows10-2004-x64
3$PLUGINSDI...er.exe
windows11-ltsc_2024-x64
3General
- Target patch_16.10.0.6093_16.10.0.6125.exe
- Size 7.6MB
- Sample261113-w2awsaez61
- SHA256 25b7e99cf8c74799d813d0b1e2de6d146fcc12ddb03372711b2097a7e80cf004
- MD5 2c8a14d231b8e835e5147185aad320c2
- SHA1 bda08991e23e4b45dfce1d95c42c4ced9f04d44a
- SHA512 3ca13d9be74af970cfa5c39b60fda9e72b2eb2fe42c0d6e76c85a0096a235264fdea6f16cb8cb42eb0e93f841c4ae350faf251cfd748e21e2b58958fb23bd5a7
- SSDEEP 196608:7woJrDSxMI/HBIz+bbgomkqT63bGvDwTzEpPeZu+Kd:7KrhIz6VbSv46GI+Kd
- TLSH T169863381E2369194F1574FB294B2D0B04213BF561B39EA7F056CBB0D1A375EB81A3D3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
patch_16.10.0.6093_16.10.0.6125.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
patch_16.10.0.6093_16.10.0.6125.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/7z.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/7z.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/courgette.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/courgette.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/patchupdater.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/patchupdater.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target patch_16.10.0.6093_16.10.0.6125.exe
- Size 7.6MB
- SHA256 25b7e99cf8c74799d813d0b1e2de6d146fcc12ddb03372711b2097a7e80cf004
- MD5 2c8a14d231b8e835e5147185aad320c2
- SHA1 bda08991e23e4b45dfce1d95c42c4ced9f04d44a
- SHA512 3ca13d9be74af970cfa5c39b60fda9e72b2eb2fe42c0d6e76c85a0096a235264fdea6f16cb8cb42eb0e93f841c4ae350faf251cfd748e21e2b58958fb23bd5a7
- SSDEEP 196608:7woJrDSxMI/HBIz+bbgomkqT63bGvDwTzEpPeZu+Kd:7KrhIz6VbSv46GI+Kd
- TLSH T169863381E2369194F1574FB294B2D0B04213BF561B39EA7F056CBB0D1A375EB81A3D3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target $PLUGINSDIR/7z.dll
- Size 1.2MB
- SHA256 a2fa67ab7fb997ce8e8eea4ad31b358737e71a96fce4da6b3ca6d0780b121d5a
- MD5 ebfff615a5f6ae2c40adfd576034d8bf
- SHA1 91765fa71eb329dd9fc9b35de60fadf0b242cf6b
- SHA512 b7354bf79b95999ddb55340aee3a172b1eba20e754e33a618258b9676017d9ea3d02b4ff79448a0b8ed08e90d3196ed729236925ee74f890837a1f2c8a3be9d6
- SSDEEP 24576:4RpEUlWvbXqUQS6bRg+PlG6M50T+BXrlGyzx43H9OFfsgM:MATq6wolbjx43kFfsgM
- TLSH T1C0457C16E7F1C5B4C98D11304B34BB6612ADF7188712A9DBB3883E6E1F32CD1D636989
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 93a8e95708882e56250ae55aef93417333b2dbe7ea99590abed34cdca2227e61
- MD5 c51fc979c1c3e17bece7bd194aeb6ea2
- SHA1 9a5d000d6393f2980062b4cc6e8f543493b1be8f
- SHA512 716cdeb890307ff42901464dd24aa94e29415ef20d4e975c2733e34330fdf85edfd4ad9e00878edbe98921deebe44153279cb95acb309c5e1812026716dcdc4e
- SSDEEP 192:sfer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4SyYXe:sw7Xws4FVWig86/5eCBqSyYXe
- TLSH T1B9322A3657A0D2F2D6A1827408A639336BBA762412B50D1BDFF74481FC15BC67E39327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/courgette.exe
- Size 255KB
- SHA256 470c494e1d92fd49b73631ffb652e734fed65cd3c9f6c025c56c95c86d972834
- MD5 4fc409cca4215f7c8825050b15998362
- SHA1 a9181477bdfcb6c0750f26cee45c8ddef5ba4cd8
- SHA512 d2a863d4cbea2ee96a2037a6a4bb5ff6a2fba973291e2f8f070de90403c0aab43a8a398f28e6007d076ac6195e8a73c46da493c7ad9b761010b8bc71e816683e
- SSDEEP 6144:gLMo6XqRdkQOfeGz0v1YgpYXsABx7YrVddmL:gLMo6aRdkBWGzte1oGrrwL
- TLSH T113447D30EF1BC1B7D64604B5181ADB6FA6346A158F11D5C3F3C02FAAD9B43D32A3664A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 74e2c4b7905e3daa30a6d10d9e4de6b56316b965b4be068c4ed9017febd4613b
- MD5 d7d0c9d3b5e38be79ce8765a9b492787
- SHA1 27873370f5f3e88365612e0606247173a43eae60
- SHA512 ed10326f8cf747b173c707fa3b4d0ef6c46492bda2eb712cf32a10544de0dd35a13a8cf1948e335df08fad418545be12a2d782fea5cefae453dafd578b53d36b
- SSDEEP 96:/sspq2y5jOEEQrhySvUgfj74/vvrTBzfYZA4YF3Telac1nIqf2:/2rjOELhySv5f2vvBjiAflaB1nIq
- TLSH T15CC108F656C005F3E40D04B93E31280F87FEE426073242769E9B1ECA19D2AB6FD68751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/patchupdater.exe
- Size 3.0MB
- SHA256 f2674f32026d0c39baa682493d9d4d0ba52884892ec6dc10653cf80a946489a9
- MD5 8ce13a6140de9c71916453ea3472d802
- SHA1 fc85dd4f3c4f7663f6c4a613b2fce9e8349cd223
- SHA512 f200b7acce99f1dd4d02e892700af1c45f3337fc2c480a95172fd9ab6f76beb82161bd2d17128a9028cf069e5d819cd3aa1b4a291f46dba0e8effbfbca835473
- SSDEEP 49152:yXp2ANrLAeWGWOMaGo6UD0H6iyJLwTB+7JdnTK+tPy4KDTCHr5bKTGp:yXpFNc7OMvs5iyJLwIT3A4KY
- TLSH T13AE5AF13F7425536F8B70279A9FE573E8C3CAA211328D4D3E3C4196E45A19E17A3B386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10