63d0f0d8e4128a8bbb6cbef70ec76e21ac84a03ab3ec3bc250af30059f3a8e4d | Triage™

Login
Reports

Overview

overview

7

Static

static

1

pgptools.c...min.js

windows10-2004-x64

3

pgptools.c...min.js

windows11-21h2-x64

3

pgptools.c...t.html

windows10-2004-x64

4

pgptools.c...t.html

windows11-21h2-x64

4

pgptools.c...t.html

windows10-2004-x64

4

pgptools.c...t.html

windows11-21h2-x64

4

pgptools.c...y.html

windows10-2004-x64

4

pgptools.c...y.html

windows11-21h2-x64

7

pgptools.c...x.html

windows10-2004-x64

4

pgptools.c...x.html

windows11-21h2-x64

4

pgptools.c...e.html

windows10-2004-x64

4

pgptools.c...e.html

windows11-21h2-x64

4

pgptools.c...n.html

windows10-2004-x64

7

pgptools.c...n.html

windows11-21h2-x64

4

pgptools.c...e.html

windows10-2004-x64

4

pgptools.c...e.html

windows11-21h2-x64

4

pgptools.c...y.html

windows10-2004-x64

4

pgptools.c...y.html

windows11-21h2-x64

4

Sharing

Copy URL Twitter E-mail

General

Target
pgptools.com.zip
Size 135KB
Sample260428-am7fjsbs3x
SHA256 63d0f0d8e4128a8bbb6cbef70ec76e21ac84a03ab3ec3bc250af30059f3a8e4d
MD5 48c279f3d6534c2e37d96aa5adb5efff
SHA1 5c3ec78bd83e8cb7301cb45f80857354d7c157b0
SHA512 ac336ce354bd38dc142d03563508d47147b8ee4fb4f89304479fb6459e714a7ccd273bb6ccdb1d1a7e4e7ecee775eba3f0a4597fbcf998e346fec617f4a75da1
SSDEEP 3072:BPz5xQ2fFaY4JX5OFDKEQgs4YgQp3mFhkFTdxpN1g:x5tfFWJX8IEXsfgFiFBg
TLSH
T1F5D3132A641040B9F4E5C57133032C7E18C2039FEAA8F66F23DA4BE56D9966B6F43335
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

pgptools.com/JS/openpgp.min.js

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

pgptools.com/JS/openpgp.min.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

pgptools.com/decrypt.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral4

Sample

pgptools.com/decrypt.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral5

Sample

pgptools.com/encrypt.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral6

Sample

pgptools.com/encrypt.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral7

Sample

pgptools.com/generate-key.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral8

Sample

pgptools.com/generate-key.html

Resource

win11-20260130-en

windows11-21h2-x64

12 signatures

150 seconds

Behavioral task

behavioral9

Sample

pgptools.com/index.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral10

Sample

pgptools.com/index.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral11

Sample

pgptools.com/sign-file.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral12

Sample

pgptools.com/sign-file.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral13

Sample

pgptools.com/sign.html

Resource

win10v2004-20260130-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral14

Sample

pgptools.com/sign.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral15

Sample

pgptools.com/verify-file.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral16

Sample

pgptools.com/verify-file.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Behavioral task

behavioral17

Sample

pgptools.com/verify.html

Resource

win10v2004-20260130-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral18

Sample

pgptools.com/verify.html

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  pgptools.com/JS/openpgp.min.js
- Size 384KB
- SHA256 46d3e5b6bfe4f0d19b44fd3aa826ac1c67174e95a97be082a3982160b6caae4e
- MD5 ce8134ac788d82418447d628820e5efd
- SHA1 fcfc7c22633bd018b7793de050dbde9b0d284799
- SHA512 35546cb84fde2aa79f3889b9c780632ae40620206e75176c7a95aabe504aa6d050b72dd8e97792ff29c406c4aaf673c5a285e3c53fb651b6766c51af98be10ee
- SSDEEP 6144:OQ/pTiHURyM6POM9iA6h8mTQ833IRYbSNs6Jk309Q9oCmFfGaP1R4AgZYUMh:ZwFPOwiA6HPnzgTvFfGA4Q
- TLSH
  T106843A9837A1A07283D219F340764005B33B997938694E4CF759ECDF3CA58C596BAF3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  pgptools.com/decrypt.html
- Size 3KB
- SHA256 e989a6b99481bddadd5d64e5b12dd6eed5c465858636424ae429a6b2af4e1afd
- MD5 c199f2ea71741b2ad64af3d82520aedd
- SHA1 ca95416569b2f745594289816d4b7304bf529456
- SHA512 64906180a36dbf8d2f7c765651fb24559532265cd8e9a359e356c524953de612d9a56ccab7baf7489e14661004f48130317834554f5bac4a50154ad3cf28d0dd
- TLSH
  T142613F477CF90D3442B765BEB6B3E35A3450820F1A0C9980FB4CAD945F58DA2C23EBA4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  pgptools.com/encrypt.html
- Size 2KB
- SHA256 0c930f36412bae3f83668f7c2e45a705cc4e221cf24068a81ae4556a581d7980
- MD5 48a1f45021a3af2720a47fe71aef37bb
- SHA1 4c1bc971c7b7a22a4de4d509f81c35d8d448b16e
- SHA512 f4b4e9519b448db81fdebffd51747a87516ea50123d209097e240ec3e96e408225047189b1fa785ec27c8be96cee5f29fbb80d70325ae720e2a3a5f81b80809f
- TLSH
  T1565123472DA90D3492B7226E36F7938A3056620B141CEB95FF4C6E948FC0D56C29AEB4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  pgptools.com/generate-key.html
- Size 7KB
- SHA256 0feac01c9c3db73e8a9611245e6340712939c5d5717e44b9bf341cc92611c09d
- MD5 8205992b3434a55bcff8c7259143e18a
- SHA1 458ce9ac66dfbd4ca8fd1d3d2d6c7876f1b93211
- SHA512 cec840190dda92a8b3a2a8160394496cb5549c8dd0e963c2c048572d6131144a04323e4fada449264a3c6fe2eea139fcf028c9f935096f09d2c7a9fa4a7401e2
- SSDEEP 96:hmu3MHN3r5uB1PZK3yIIV+AhLvqvYaI9dj5Z2FrvZ+p9Q2g0EiGVaAsrbG:3MHNVc1Hp4i9dl0Jm9Q2g0j7HbG
- TLSH
  T173E1219371A24D7042FF24EB1613835D787093072E16C5C5F90C9BEA5F21D86C6BFAA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral7 behavioral8
- Target
  pgptools.com/index.html
- Size 12KB
- SHA256 fe7b063c9ac9164853d98214b298de416b5389b41212ba23984031cdcf1c4c9d
- MD5 278c9424d52961249db1f23544177e6c
- SHA1 53498aae5c6215cdb8e7cc69c2aefa3cd84bc201
- SHA512 7d0f1b62f6121136ead71af748595fe93147d09bc906dab459ccafcc8f787978f3039a6f258b73d042c33db3bd737623df9e5c7cd3d1d65b7ab1a1b602a93f9f
- SSDEEP 192:RJwwT05Cp7ze/eqJidrQJTREZlBltcjzu8lJA4LOMvxvTsk3CnG5fDAxa:RlzMeqJi5SotMnlJA4LOMvxvTsk3ixa
- TLSH
  T1A642445BDDF11617064341667E21637B2F1BD10FF30D25A236EDC29CAF98A424A3638B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  pgptools.com/sign-file.html
- Size 3KB
- SHA256 b029c5443be10c358b1d6ef96aeb4f241bb858ba66f3468631f76a50750eddaa
- MD5 a3e083c4514d8abd22d420e2885797f3
- SHA1 afe19c3590568ba3d1c037135dc2d20d5259bcb9
- SHA512 eb57e1a51e87c4f792e4ffa48e8c31f1f78abf8b06eab245683ddd6273f132af7bf39da18df1db2f184a91baeb9d9dd74047d4bda19cd0b0aa68fe55e4e6cff8
- TLSH
  T1F271555FA5B60C20427735BD93A3C3193890910F2A488885BF5CDE586FA8D56C1BFAE4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral11 behavioral12
- Target
  pgptools.com/sign.html
- Size 3KB
- SHA256 68077f0b170fab7976051c0afd06804d2f4ca4215f34dae6d91f1ccd261551ac
- MD5 84433fe48fd03046a0bef7523503bfd4
- SHA1 a2b26055bcd0f0287ddce8afc2a4b7cc593e7b92
- SHA512 06a19d96169a4322ee45056552302e1851b29ab63e1db1acd0d4c7d67ddd8778f721ae272db0d4553e36be61d5ffd7087571e7362d5e84fbb996e38387bc4ea1
- TLSH
  T16D71924B64B60C24827B656EB2A3D34A34A0400F2A4CD895FF5CCDD54FA8D46827FBA4
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral13 behavioral14
- Target
  pgptools.com/verify-file.html
- Size 6KB
- SHA256 5e992c60d335ea1b63f0473858cee898147b7876fa7a522d27fcc690ca66a747
- MD5 c136a6ca31d430696b8cee4cf824538c
- SHA1 6741c11b6d4240da9199a95bf59044bdbca910ac
- SHA512 75ef70e55308afade76ed3a80019025f076088c53c617566749b849a81bb957ea2882399194f9c0fa56baa88bcca4630f65210bdd8e44d16fb1dbe744fa990a8
- SSDEEP 96:YIual3krEYIqFvYaU7MAjzkZcJpm389z8IQEV1R8V263mhwLdV85KryvvVPITAgf:xUGq1yYb4pckQQI/2VgtDD
- TLSH
  T14BD1555FDA610428057BE47D4747834A3A53A34314A99A44BE0CCADC9F48D66C3F96FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  pgptools.com/verify.html
- Size 3KB
- SHA256 85ab5cdcd34aff15eda567331a749991b2651a5d7596a05abaf62b3a38f928e0
- MD5 ba79403d10fc9b90eafe1bb301d5fe6c
- SHA1 85417f7c93e89c1a639c578ca3e087f19ace3b58
- SHA512 5d6e517c9a743550ce7e87af2485ddbd7c77a47b76881315828e2be14401a43fec9856e6a71ddd49d42de2cdf144ad79c60f654155e8f5a0c30869764ce1d7dd
- TLSH
  T1D161A65BA86A0834057B32AF721352DE3867920B18AD9BC1FD5D8E940F44D0AC35EBB5
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy