mitm[.]zip | Triage™

Login
Reports

Overview

overview

8

Static

static

1

__pycache_...14.pyc

windows11-ltsc_2024-x64

8

__pycache_...14.pyc

windows11-ltsc_2024-x64

3

addons.py

windows11-ltsc_2024-x64

3

auth.json

windows11-ltsc_2024-x64

3

main.py

windows11-ltsc_2024-x64

3

run.bat

windows11-ltsc_2024-x64

1

stash_capture.py

windows11-ltsc_2024-x64

3

stash_dump.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

__pycache__/addons.cpython-314.pyc

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

adware persistence ransomware spyware

Behavioral task

behavioral2

Sample

__pycache__/stash_capture.cpython-314.pyc

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

addons.py

Resource

win11ltsc2024-20260630-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

auth.json

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

main.py

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

run.bat

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

stash_capture.py

Resource

win11ltsc2024-20260630-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

stash_dump.txt

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

General

Target
mitm.zip
Size 27KB
Sample260702-vw35psax21
SHA256 6f691270e23a792851b40a85b2c53cc3135f9abff3af46a116b4a443fb8f5865
MD5 ab496baf6f2235f55bf2f76a7293b963
SHA1 b12b05f7810b54b2606684f08016d4f51feea4e0
SHA512 fdfa0c169b2a5aa21eec2c58ebfa4600b261e7779aaec7c7c29f91f832c028e577bed513f37d226d70fb23fb3a155bcfe6465dcf9076aa8b31bd3d76238c315a
SSDEEP 768:ny481POuaHeMlIDt9mrEXGhXSwCClbH39RgRASvnh3k:y48wsM2mrJhXJjl5Rsvnh3k
TLSH
T1AED2E0CD913E63F6FA86327AE40E53D6D1FDFB04B27385287944F0B90D696CA8712280
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

mitm.zip

.zip 27KB
__pycache__/addons.cpython-314.pyc

1KB
__pycache__/stash_capture.cpython-314.pyc

6KB
addons.py

612B
auth.json

1KB
main.py

591B
run.bat

53B
stash_capture.py

2KB
stash_dump.txt

119KB

mitm.zip

SHA256 6f691270e23a792851b40a85b2c53cc3135f9abff3af46a116b4a443fb8f5865
MD5 ab496baf6f2235f55bf2f76a7293b963
SHA1 b12b05f7810b54b2606684f08016d4f51feea4e0
SHA512 fdfa0c169b2a5aa21eec2c58ebfa4600b261e7779aaec7c7c29f91f832c028e577bed513f37d226d70fb23fb3a155bcfe6465dcf9076aa8b31bd3d76238c315a
SSDEEP 768:ny481POuaHeMlIDt9mrEXGhXSwCClbH39RgRASvnh3k:y48wsM2mrJhXJjl5Rsvnh3k
TLSH
T1AED2E0CD913E63F6FA86327AE40E53D6D1FDFB04B27385287944F0B90D696CA8712280
MD5 SHA1 SHA512 SSDEEP TLSH

pycache/addons.cpython-314.pyc

SHA256 4eda215fb71f7f3ff079917ccac206c71ac6b25c127e58c2bb41775487832b81
MD5 ab54cdd69c53a11c8cfa985ae6069e24
SHA1 c83ebf9433bdeea8cba6cf7229f071a2b7df3fb6
SHA512 6f1b3531fd15c746a55c4b5d2f5c7b03b2536be95c987514c4e637d7cc2fcb8f3f772601344e8343de8e5cabeaba2df09dd8ecb3e723e33bfde5f4b2ec5578cb
TLSH
T1A73131B2C5A0D4A3DCCDD0B8E1E767FCF6629552A8648727611664FE2C8C3242AE3746
MD5 SHA1 SHA512 TLSH

pycache/stash_capture.cpython-314.pyc

SHA256 2ce3cee28149aa52f0ad0da2a1741326dc5b57f2f1370c70865b68c433729639
MD5 47354b59d02068901e48fb3440480ba5
SHA1 e3de5ff58e21d2e531aef0af9d895fce628559f3
SHA512 4d1a875889a851f5bf309184d4218c365a81fe9a3f59fb33e8c709b0d38e369589f458dab3a7876a471bada071d4d0828b793883457d2e58b4f905d133beb206
SSDEEP 192:+E7ca9+m7vdMXFaUMmGi8vWHvKPAb8nP7Z+0:+xa9+m7vSXFaUMPi5Pa68nN+0
TLSH
T196E1B4F08E008D37ED9EE578B6DB8AD2F322805A7250C717A010BCFE8CCD3109A6D619
MD5 SHA1 SHA512 SSDEEP TLSH

addons.py

SHA256 42e1fe0c070865e579b4b3c010d5bb382b6f8eb00c54ed5650e9824079bc7d7e
MD5 14b4f2f0d8ec7aa08524f362e4a8a72b
SHA1 0337a90b92998bdcdfeb40901aac2f10850beec3
SHA512 117b4afe2f41a35dc1cb54503c965f45aacb3d5df449080a1e71ae15e93ce426e9377b7d36e03ff2b154a8abdff93188b78d39d7c6541b7dd966dbe6975b30da
TLSH
T193F059A96A050885C7478AECCD009DA021077E131A5D2D31B8CC97D91F98632C6A209E
MD5 SHA1 SHA512 TLSH

auth.json

SHA256 d63f2425220128f0cfb8bafd35f89ab2ae8bad82fa351169745224c770af35f6
MD5 0c3a363b856e778235173e6251a14e53
SHA1 f48d586a900e93b9e87221979231331b18276f43
SHA512 43309db56ea1b2fa35442f46a179b693b114aa9147e2ef57f14272727b9ac9eb02e0b4c36fbff0de467bcbb50335b72aaa55ef23e54f20f31db3f316df3844dc
TLSH
T1491112622CE90BA9641A71A10DA50DC9872583EBA94C513DB9EF88D0FDC935FD0496E4
MD5 SHA1 SHA512 TLSH

main.py

SHA256 82c9bbdf24051526f28069d311fa3267be0b24ffe74a2d1cbe2e01a6680a06ed
MD5 fff78f116dcc5c58eb0a5b4508ff0d7c
SHA1 be4bd199f25af419d66372a5d404da8e5a8508c5
SHA512 6f22cf5faa59d4ab5988128750e9654a916e71dacb60eaf846054a26c7b75fbe27f7842c70a059dae564db015784a0fd15cb7659dc55231a0613303fe2f6cb85
TLSH
T1ABF0812088662361CDF7BACFC469E5519913AD131D98147636AE5E810F866B4A442431
MD5 SHA1 SHA512 TLSH

run.bat

SHA256 9282ff9322156d2ef77c2b7c6a5c3f5f6cbd8cafbfc8ca2225a7d74aec32746a
MD5 d8225561c52be873b8eb58647f469067
SHA1 c8c070c34591bf7ef72a23fdac915025c6369e30
SHA512 79b3a3519803cd2b2b83c6dab2ac5cab0bd3eebbc151faac963f1d9f119a16e7362dd92cfcad49d96b0a19c863e3009165715b41bcbd4cdccf723e3dcb516a49
TLSH
T1F89002159D2441F595171484D557189CDD0C518779424D5535932539054E54369454B1
MD5 SHA1 SHA512 TLSH

stash_capture.py

SHA256 c48f7493a117eb0b9e0f2cafc6583634742367062fc856dffc9c8c55b4c0ac08
MD5 5056b9589a00eff3479068590a8740ec
SHA1 06509bcf2434952e0a7a212c86252a47cafc03c5
SHA512 121bf5ea08083e8740c2b9f3d6d14d76860f1d15e36ee239b65c1f6b0feaed41b8151b68ba5ac70ab5b0fd95cf851b99361e8c39a76638e8ae4ab27de35ca809
TLSH
T1BD51204565052962CF1BC9288D52C6E133287FB376052C24B99C7BE85F99838C3A65FD
MD5 SHA1 SHA512 TLSH

stash_dump.txt

SHA256 209b1c37faf15556139ac65b3a1a1a0053c5b7872be5b3b916a44b6ba588c791
MD5 037acb1eaeaf511716c5d68e94fe372f
SHA1 578ef68d76f38d2944a7108555e927871b0ac1bb
SHA512 39f33326515f7a729c774d78faa3184f5eb103f38b03289afd4580d290b9296fdfeb0da8b6833dcd0747b66240112c9cc6101256d47643e3488ba846afedaffb
SSDEEP 1536:IZcHHHH+AzRaVrAHK5qD9w1Vx2Lcem+7aVrApsROfF4wQVxiA7a:IeuG9uGQu
TLSH
T196C34F2B9D04EAE39581F88C67BF7F37D0A4605CD184162CEB59CA4B090E378D97E49E
MD5 SHA1 SHA512 SSDEEP TLSH

© 2018-2026

Terms | Privacy