b36d1ae1aa64d0c27bb049ad318d8d195416b6ceb30471fa2381427fdc989b6b | Triage

Submit
Reports

Overview

overview

Static

static

1

Bin/AddFonts.ps1

windows7-x64

1

Bin/AddFonts.ps1

windows10-2004-x64

1

Bin/ConvertReg.ps1

windows7-x64

1

Bin/ConvertReg.ps1

windows10-2004-x64

1

Packs/IE11...ct.cmd

windows7-x64

Packs/IE11...ct.cmd

windows10-2004-x64

Packs/Medi...ct.cmd

windows7-x64

Packs/Medi...ct.cmd

windows10-2004-x64

Packs/Medi...ct.cmd

windows7-x64

Packs/Medi...ct.cmd

windows10-2004-x64

Packs/NetF...ct.cmd

windows7-x64

Packs/NetF...ct.cmd

windows10-2004-x64

Packs/NetF...ct.cmd

windows7-x64

Packs/NetF...ct.cmd

windows10-2004-x64

Packs/NetF...ct.cmd

windows7-x64

Packs/NetF...ct.cmd

windows10-2004-x64

Packs/NetF...ct.cmd

windows7-x64

Packs/NetF...ct.cmd

windows10-2004-x64

Packs/NetF...ct.cmd

windows7-x64

Packs/NetF...ct.cmd

windows10-2004-x64

Packs/Powe...ct.cmd

windows7-x64

Packs/Powe...ct.cmd

windows10-2004-x64

Packs/RDP8...ct.cmd

windows7-x64

Packs/RDP8...ct.cmd

windows10-2004-x64

Packs/RSAT...ct.cmd

windows7-x64

Packs/RSAT...ct.cmd

windows10-2004-x64

Packs/RSAT...ct.cmd

windows7-x64

Packs/RSAT...ct.cmd

windows10-2004-x64

Packs/VCRu...ct.cmd

windows7-x64

Packs/VCRu...ct.cmd

windows10-2004-x64

Packs/VCRu...ct.cmd

windows7-x64

Packs/VCRu...ct.cmd

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

Bin/AddFonts.ps1

Resource

win7-20230831-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

Bin/AddFonts.ps1

Resource

win10v2004-20230915-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

Bin/ConvertReg.ps1

Resource

win7-20230831-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

Bin/ConvertReg.ps1

Resource

win10v2004-20230915-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

Packs/IE11/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Packs/IE11/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

Packs/MediaFeaturePack/w7/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

Packs/MediaFeaturePack/w7/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Packs/MediaFeaturePack/w81/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

Packs/MediaFeaturePack/w81/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

Packs/NetFX462/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Packs/NetFX462/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

Packs/NetFX48/w10/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Packs/NetFX48/w10/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Packs/NetFX48/w7/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

Packs/NetFX48/w7/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

Packs/NetFX48/w81/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Packs/NetFX48/w81/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

Packs/NetFX481/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

Packs/NetFX481/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

Packs/PowerShell7/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

Packs/PowerShell7/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral23

Sample

Packs/RDP81/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

Packs/RDP81/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

Packs/RSAT/w7/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

Packs/RSAT/w7/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

Packs/RSAT/w81/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

Packs/RSAT/w81/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral29

Sample

Packs/VCRuntime/w7/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

Packs/VCRuntime/w7/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral31

Sample

Packs/VCRuntime/w81/DownloadExtract.cmd

Resource

win7-20230831-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

Packs/VCRuntime/w81/DownloadExtract.cmd

Resource

win10v2004-20230915-en

windows10-2004-x64

5 signatures

150 seconds

General

Target

b36d1ae1aa64d0c27bb049ad318d8d195416b6ceb30471fa2381427fdc989b6b
Size

440KB
MD5

88b558140748c32e399ed269b1e4901f
SHA1

f0528186103e54b69db45c471eac646107a63c83
SHA256

b36d1ae1aa64d0c27bb049ad318d8d195416b6ceb30471fa2381427fdc989b6b
SHA512

03cc2269793d4e7770372417289c3b275b10ff8657e0a6209706dc511a6a470913129ff08d0ab50efd2ef96433555e550d86c0c7804199b6f069105ccadcae0d
SSDEEP

12288:OKh0nZFHO7mBzLDZRuYnjM3/TvRxPtMfT1UUryJM/B9/mjOp7DLB5WwPLEfn7X5g:UxjhudUliG

Score

1^/10

Malware Config

Signatures

Files

b36d1ae1aa64d0c27bb049ad318d8d195416b6ceb30471fa2381427fdc989b6b
.zip
Bin/AddFonts.ps1
.ps1
Bin/ConvertReg.ps1
.ps1
Bin/LICENSES/7zip.txt
Bin/LICENSES/NSudo.txt
Bin/LICENSES/ResourceHacker.txt
Bin/LICENSES/ToolkitHelper.txt
Bin/LICENSES/Wimlib.txt
Packs/Apps/GettingApps.txt
Packs/IE11/DownloadExtract.cmd
.cmd .vbs
Packs/MediaFeaturePack/w7/DownloadExtract.cmd
.cmd .vbs
Packs/MediaFeaturePack/w81/DownloadExtract.cmd
.cmd .vbs
Packs/NetFX462/DownloadExtract.cmd
.cmd .vbs
Packs/NetFX48/w10/DownloadExtract.cmd
.cmd .vbs
Packs/NetFX48/w7/DownloadExtract.cmd
.cmd .vbs
Packs/NetFX48/w81/DownloadExtract.cmd
.cmd .vbs
Packs/NetFX481/DownloadExtract.cmd
.cmd .vbs
Packs/PowerShell7/DownloadExtract.cmd
.cmd .vbs
Packs/RDP81/DownloadExtract.cmd
.cmd .vbs
Packs/RSAT/w7/DownloadExtract.cmd
.cmd .vbs
Packs/RSAT/w81/DownloadExtract.cmd
.cmd .vbs
Packs/VCRuntime/w7/DownloadExtract.cmd
.cmd .vbs
Packs/VCRuntime/w81/DownloadExtract.cmd
.cmd .vbs
Packs/VCRuntime/w81/Windows8.1-KB3118401-x64.txt
Packs/VCRuntime/w81/Windows8.1-KB3118401-x86.txt
Packs/WMF/w7/DownloadExtract.cmd
.cmd .vbs
Packs/WMF/w7/InstallOrder.txt
Packs/WMF/w81/DownloadExtract.cmd
.cmd .vbs
Start.cmd
Toolkit.cmd
.cmd .vbs

© 2018-2025

Terms | Privacy