ff854e2cccfcd78e6c22278c843ea61fda1d0164704b1aa8941fe05ff9dbbfe8

Login
Reports

Overview

overview

Static

static

exiftool-1...k).exe

windows10-2004-x64

exiftool-1...k).exe

windows11-ltsc_2024-x64

exiftool-1...arp.js

windows10-2004-x64

exiftool-1...arp.js

windows11-ltsc_2024-x64

exiftool-1...ma.bat

windows10-2004-x64

exiftool-1...ma.bat

windows11-ltsc_2024-x64

exiftool-1...git.pl

windows10-2004-x64

exiftool-1...git.pl

windows11-ltsc_2024-x64

exiftool-1...avy.pl

windows10-2004-x64

exiftool-1...avy.pl

windows11-ltsc_2024-x64

exiftool-1...er.ps1

windows10-2004-x64

exiftool-1...er.ps1

windows11-ltsc_2024-x64

exiftool-1...ob.vbs

windows10-2004-x64

exiftool-1...ob.vbs

windows11-ltsc_2024-x64

exiftool-1...se.bat

windows10-2004-x64

exiftool-1...se.bat

windows11-ltsc_2024-x64

exiftool-1...ol.pdf

windows10-2004-x64

exiftool-1...ol.pdf

windows11-ltsc_2024-x64

exiftool-1...PS.ps1

windows10-2004-x64

exiftool-1...PS.ps1

windows11-ltsc_2024-x64

exiftool-1...on.ps1

windows10-2004-x64

exiftool-1...on.ps1

windows11-ltsc_2024-x64

exiftool-1...ag.vbs

windows10-2004-x64

exiftool-1...ag.vbs

windows11-ltsc_2024-x64

exiftool-1...ump.js

windows10-2004-x64

exiftool-1...ump.js

windows11-ltsc_2024-x64

exiftool-1...D3.ps1

windows10-2004-x64

exiftool-1...D3.ps1

windows11-ltsc_2024-x64

exiftool-1...TC.ps1

windows10-2004-x64

exiftool-1...TC.ps1

windows11-ltsc_2024-x64

exiftool-1...WG.ps1

windows10-2004-x64

exiftool-1...WG.ps1

windows11-ltsc_2024-x64

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 17:45

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

pdf evasion

Behavioral task

behavioral1

Sample

exiftool-13.59_64/exiftool(-k).exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

exiftool-13.59_64/exiftool(-k).exe

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

exiftool-13.59_64/exiftool_files/lib/Carp.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

exiftool-13.59_64/exiftool_files/lib/Carp.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

exiftool-13.59_64/exiftool_files/lib/Compress/Raw/Lzma.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

exiftool-13.59_64/exiftool_files/lib/Compress/Raw/Lzma.bat

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware persistence spyware

Behavioral task

behavioral7

Sample

exiftool-13.59_64/exiftool_files/lib/Config_git.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

exiftool-13.59_64/exiftool_files/lib/Config_git.pl

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

adware persistence ransomware spyware

Behavioral task

behavioral9

Sample

exiftool-13.59_64/exiftool_files/lib/Config_heavy.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

exiftool-13.59_64/exiftool_files/lib/Config_heavy.pl

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

exiftool-13.59_64/exiftool_files/lib/Data/Dumper.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

exiftool-13.59_64/exiftool_files/lib/Data/Dumper.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

exiftool-13.59_64/exiftool_files/lib/File/Glob.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

exiftool-13.59_64/exiftool_files/lib/File/Glob.vbs

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

exiftool-13.59_64/exiftool_files/lib/IO/Uncompress/Base.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

exiftool-13.59_64/exiftool_files/lib/IO/Uncompress/Base.bat

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

adware persistence spyware

Behavioral task

behavioral17

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool.pdf

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

adware discovery persistence ransomware spyware

Behavioral task

behavioral19

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/GPS.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/GPS.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geolocation.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geolocation.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geotag.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geotag.vbs

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/HtmlDump.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/HtmlDump.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/ID3.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/ID3.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/IPTC.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/IPTC.ps1

Resource

win11ltsc2024-20260630-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/MWG.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/MWG.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Report Analysis Logs

General

Target
exiftool-13.59_64/exiftool_files/lib/File/Glob.vbs
Size 12KB
Sample260705-wb8ecsat4k
SHA256 ff854e2cccfcd78e6c22278c843ea61fda1d0164704b1aa8941fe05ff9dbbfe8
MD5 9339f9e86bd5ed7caff8f0d42495e422
SHA1 6269c492463a392b224e710c348e926f964b3189
SHA512 f0b0f10e61680498d2c5a8921bf86b226f5137c8e592fd5e1dfa1d64d62ed7853c5283e05f6bd877a4edf26bed6e38a4a6985994b3d5e7398030482404b21bb3
SSDEEP 384:Jtd8MlnrZLtxV30jQL+f+l4DTZPMRvDgQni8B2iPrNDS8rs1OrsfL9WAF:fblnrZLh0jhHZMni8phS85u9lF
TLSH
T1D442FA2F57C963B7849302AD130E95D6B3AAC07F532D9A1578BCA18C2F538A5C7B68D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\exiftool-13.59_64\exiftool_files\lib\File\Glob.vbs"
1⤵
PID:2696

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads