6c1cee2408aa1a76d1b7379c46b47325c16150eb3daacdff8e4c035118b778f8 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

R6 Externa...sample

ubuntu-18.04-amd64

1

R6 Externa...sample

debian-9-armhf

1

R6 Externa...sample

debian-9-mips

1

R6 Externa...sample

debian-9-mipsel

1

R6 Externa...sample

ubuntu-18.04-amd64

3

R6 Externa...sample

debian-9-armhf

3

R6 Externa...sample

debian-9-mips

3

R6 Externa...sample

debian-9-mipsel

3

R6 Externa...sample

ubuntu-18.04-amd64

1

R6 Externa...sample

debian-9-armhf

1

R6 Externa...sample

debian-9-mips

1

R6 Externa...sample

debian-9-mipsel

1

R6 Externa...sample

ubuntu-18.04-amd64

1

R6 Externa...sample

debian-9-armhf

1

R6 Externa...sample

debian-9-mips

1

R6 Externa...sample

debian-9-mipsel

1

R6 Externa...sample

ubuntu-18.04-amd64

1

R6 Externa...sample

debian-9-armhf

1

R6 Externa...sample

debian-9-mips

1

R6 Externa...sample

debian-9-mipsel

1

R6 Externa...sample

ubuntu-18.04-amd64

1

R6 Externa...sample

debian-9-armhf

1

R6 Externa...sample

debian-9-mips

1

R6 Externa...sample

debian-9-mipsel

1

R6 Externa...sample

ubuntu-18.04-amd64

1

R6 Externa...sample

debian-9-armhf

1

R6 Externa...sample

debian-9-mips

1

R6 Externa...sample

debian-9-mipsel

1

R6 Externa...bs.ps1

windows10-2004-x64

8

R6 Externa...bs.ps1

windows11-ltsc_2024-x64

8

R6 Externa...32.bat

windows10-2004-x64

1

R6 Externa...32.bat

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
R6 External-Esp (1).rar
Size 5.4MB
Sample260628-evjrnse19x
SHA256 6c1cee2408aa1a76d1b7379c46b47325c16150eb3daacdff8e4c035118b778f8
MD5 7ef0535f4d24799fffd33f4b0853840e
SHA1 c858f0c9c44e47e64595d058b7d516c3d0ef2c4e
SHA512 8f419add05791f3154a2c83766026cd06c91db8623c0f21c0643cd640d33edb2e3570b9c5bbf8d77e0f9d8983e35b13f11b519bf38dcaed90fd8c905b6daf85d
SSDEEP 98304:+fSV+9iaTgD/3gJk8Nu4WxuQhG2tsvmSUF0Wl4WV5yGrmveHKiunn4yOGK/Q8ZpU:p+JMj3gG+0hPtom/09WZmveqihL5/bk9
TLSH
T1C0463350DAA580451B39FCC8732CC7A2C5B0868FE5A3DCB9979BDFBD006690355A863F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

R6 External-Esp/imgui/.git/hooks/applypatch-msg.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

R6 External-Esp/imgui/.git/hooks/applypatch-msg.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

R6 External-Esp/imgui/.git/hooks/applypatch-msg.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

R6 External-Esp/imgui/.git/hooks/applypatch-msg.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

R6 External-Esp/imgui/.git/hooks/commit-msg.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

R6 External-Esp/imgui/.git/hooks/commit-msg.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

R6 External-Esp/imgui/.git/hooks/commit-msg.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

R6 External-Esp/imgui/.git/hooks/commit-msg.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

R6 External-Esp/imgui/.git/hooks/fsmonitor-watchman.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

R6 External-Esp/imgui/.git/hooks/fsmonitor-watchman.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

R6 External-Esp/imgui/.git/hooks/fsmonitor-watchman.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

R6 External-Esp/imgui/.git/hooks/fsmonitor-watchman.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

R6 External-Esp/imgui/.git/hooks/post-update.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

R6 External-Esp/imgui/.git/hooks/post-update.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

R6 External-Esp/imgui/.git/hooks/post-update.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

R6 External-Esp/imgui/.git/hooks/post-update.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

R6 External-Esp/imgui/.git/hooks/pre-applypatch.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

R6 External-Esp/imgui/.git/hooks/pre-applypatch.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

R6 External-Esp/imgui/.git/hooks/pre-applypatch.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

R6 External-Esp/imgui/.git/hooks/pre-applypatch.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

R6 External-Esp/imgui/.git/hooks/pre-commit.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

R6 External-Esp/imgui/.git/hooks/pre-commit.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

R6 External-Esp/imgui/.git/hooks/pre-commit.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

R6 External-Esp/imgui/.git/hooks/pre-commit.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

R6 External-Esp/imgui/.git/hooks/pre-merge-commit.sample

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

R6 External-Esp/imgui/.git/hooks/pre-merge-commit.sample

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

R6 External-Esp/imgui/.git/hooks/pre-merge-commit.sample

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

R6 External-Esp/imgui/.git/hooks/pre-merge-commit.sample

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

R6 External-Esp/imgui/.github/workflows/build_windows_vulkan_libs.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

R6 External-Esp/imgui/.github/workflows/build_windows_vulkan_libs.ps1

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

R6 External-Esp/imgui/examples/example_null/build_win32.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

R6 External-Esp/imgui/examples/example_null/build_win32.bat

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  R6 External-Esp/imgui/.git/hooks/applypatch-msg.sample
- Size 478B
- SHA256 0223497a0b8b033aa58a3a521b8629869386cf7ab0e2f101963d328aa62193f7
- MD5 ce562e08d8098926a3862fc6e7905199
- SHA1 4de88eb95a5e93fd27e78b5fb3b5231a8d8917dd
- SHA512 536cce804d84e25813993efdd240537b52d00ce9cdcecf1982f85096d56a521290104c825c00b370b2752201952a9616a3f4e28c5d27a5b4e4842101a2ff9bee
- TLSH
  T125F02781599AB7374046051BEB2CF6AD9880D8D893926F10A0EC4938B67F5E862FAF51
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  R6 External-Esp/imgui/.git/hooks/commit-msg.sample
- Size 896B
- SHA256 1f74d5e9292979b573ebd59741d46cb93ff391acdd083d340b94370753d92437
- MD5 579a3c1e12a1e74a98169175fb913012
- SHA1 ee1ed5aad98a435f2020b6de35c173b75d9affac
- SHA512 d6bb7fa747f4625adf1877f546565cbe812ca7dd4168f7e9068e6732555d8737eba549546cf5946649e3f38de82d173aaf9c160a4c9f9445655258b4c5f955eb
- TLSH
  T1C81127DE95656BB6480701011E1CB3F96D40D63C42C5EE10E0CE983EFB1D85602B9FDE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  R6 External-Esp/imgui/.git/hooks/fsmonitor-watchman.sample
- Size 4KB
- SHA256 e0549964e93897b519bd8e333c037e51fff0f88ba13e086a331592bf801fa1d0
- MD5 a0b2633a2c8e97501610bd3f73da66fc
- SHA1 0ec0ec9ac11111433d17ea79e0ae8cec650dcfa4
- SHA512 5168643c1768ec83554a9066754507a781b6d14251a46a469222d462efc6ca87a72c90679154e8a723349c91e7772b32ac9b08dfe313cded0ee0a6f17885079e
- SSDEEP 96:GFCscBOvOFXDgRvi/3UCwN4ZlkRo/j5SpoNOBoi+geBIzCa:GFCsEOmWRa8CwN4ZqRo7geEk3IzCa
- TLSH
  T122A1A6B0D38AD363927A74C9EE4845B43AFF40B023705C68693C463167A8536D3B9CF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  R6 External-Esp/imgui/.git/hooks/post-update.sample
- Size 189B
- SHA256 81765af2daef323061dcbc5e61fc16481cb74b3bac9ad8a174b186523586f6c5
- MD5 2b7ea5cee3c49ff53d41e00785eb974c
- SHA1 b614c2f63da7dca9f1db2e7ade61ef30448fc96c
- SHA512 473ad124642571656276bf83b9ff63ab1804d3c23a5bdae52391c6f70a894849ac60c10c9d31deff3938922ce83b68b1e60c11592bbf7ea503f4acd39968cefa
- TLSH
  T119C0C0C89D41F4105091114A003D44BC4E0B80416106083070744B1FE28C45F3F4FDB8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  R6 External-Esp/imgui/.git/hooks/pre-applypatch.sample
- Size 424B
- SHA256 e15c5b469ea3e0a695bea6f2c82bcf8e62821074939ddd85b77e0007ff165475
- MD5 054f9ffb8bfe04a599751cc757226dda
- SHA1 f208287c1a92525de9f5462e905a9d31de1e2d75
- SHA512 cb78aa7e9b9c146e5db65d86dd83f04e2b6942a06fab50c704a0fd900683f3b6ad1164e74afe2f267f6da91cdff0b9ab07713e12cefc6f8d741b5df194f4fda6
- TLSH
  T168E0A3204496637340410059AF3561FC4F40C4CC83E2394040ED8BA9F62F5D461F9D30
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  R6 External-Esp/imgui/.git/hooks/pre-commit.sample
- Size 1KB
- SHA256 57185b7b9f05239d7ab52db045f5b89eb31348d7b2177eab214f5eb872e1971b
- MD5 5029bfab85b1c39281aa9697379ea444
- SHA1 8093d68e142db52dcab2215e770ba0bbe4cfbf24
- SHA512 4fed684b7e262fc847610ca646074fca45c3c677c40d8fb6c7ae522b9c8a9be7327b41a59b4550ceadd41edf57ec5ed07e575e02dbc6c003951e1822ac3ddd5b
- TLSH
  T1B43161429BE0B535022043844A9EB5BAAF0796EC0331702A16D9C1ACF36D661A3BEDF1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  R6 External-Esp/imgui/.git/hooks/pre-merge-commit.sample
- Size 416B
- SHA256 d3825a70337940ebbd0a5c072984e13245920cdf8898bd225c8d27a6dfc9cb53
- MD5 39cb268e2a85d436b9eb6f47614c3cbc
- SHA1 04c64e58bc25c149482ed45dbd79e40effb89eb7
- SHA512 e4dc204494f5062efa3032b00c64707a4f38978040482501b3e085f071e3ee5a9737d537e6a52002ceb4ebe2bfe09e555c5d969581e80b3eba2a922015c67960
- TLSH
  T1CDE02B11495A63B340C60210563861BD6B41D8CD93E1589061DC8F3FE71F6CA21F9EB1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  R6 External-Esp/imgui/.github/workflows/build_windows_vulkan_libs.ps1
- Size 1KB
- SHA256 56b63e4c9e209569e4f74dddcf34044c12b338879fa143a8f8557d41cbc95ac1
- MD5 e2417af0cff74c6542132532eac039a7
- SHA1 362086c040885447a52c4b642271ac1c8472cae3
- SHA512 8175b56626488739f8a22c1d571b2cdae9f253177314a336a4e4c6332a403d54a21ed3fcdfc9d6f50418784a195be58977b596aa3b5a6e338d21148e6c34d792
- TLSH
  T1F6319E38275E23B14DF1AF94DCEEAFE0CE0A97464B98E64FE012552C24B38C1D4A1C2D
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral29 behavioral30
- Target
  R6 External-Esp/imgui/examples/example_null/build_win32.bat
- Size 263B
- SHA256 7a70866dd8a926f746745af416bac03e4bc6654314fcfff3fc9d28f44d229ddb
- MD5 9d479708de1ba9546f8718a44f26b3b5
- SHA1 8d44e06057ebc13303e1e260c2e70bd3b0ccda49
- SHA512 b85f22250acfef72716168acac25d811e08735a322a8557989ad9ffcd795f14358dcc922285379623b0d3c8f10bb955d9ba1b01b6a8724585b4bc08788bab5a3
- TLSH
  T178D02B5E544E3C43B3015A46A42D852BD381B9070A618C405091157D8B2B647F73DD62
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy