9f229d9467a12165ac6a0962ce2aa09969b0b9f43b809f6caf0a563a4338ebfd

Login
Reports

Overview

overview

Static

static

exiftool-1...k).exe

windows10-2004-x64

exiftool-1...k).exe

windows11-ltsc_2024-x64

exiftool-1...arp.js

windows10-2004-x64

exiftool-1...arp.js

windows11-ltsc_2024-x64

exiftool-1...ma.bat

windows10-2004-x64

exiftool-1...ma.bat

windows11-ltsc_2024-x64

exiftool-1...git.pl

windows10-2004-x64

exiftool-1...git.pl

windows11-ltsc_2024-x64

exiftool-1...avy.pl

windows10-2004-x64

exiftool-1...avy.pl

windows11-ltsc_2024-x64

exiftool-1...er.ps1

windows10-2004-x64

exiftool-1...er.ps1

windows11-ltsc_2024-x64

exiftool-1...ob.vbs

windows10-2004-x64

exiftool-1...ob.vbs

windows11-ltsc_2024-x64

exiftool-1...se.bat

windows10-2004-x64

exiftool-1...se.bat

windows11-ltsc_2024-x64

exiftool-1...ol.pdf

windows10-2004-x64

exiftool-1...ol.pdf

windows11-ltsc_2024-x64

exiftool-1...PS.ps1

windows10-2004-x64

exiftool-1...PS.ps1

windows11-ltsc_2024-x64

exiftool-1...on.ps1

windows10-2004-x64

exiftool-1...on.ps1

windows11-ltsc_2024-x64

exiftool-1...ag.vbs

windows10-2004-x64

exiftool-1...ag.vbs

windows11-ltsc_2024-x64

exiftool-1...ump.js

windows10-2004-x64

exiftool-1...ump.js

windows11-ltsc_2024-x64

exiftool-1...D3.ps1

windows10-2004-x64

exiftool-1...D3.ps1

windows11-ltsc_2024-x64

exiftool-1...TC.ps1

windows10-2004-x64

exiftool-1...TC.ps1

windows11-ltsc_2024-x64

exiftool-1...WG.ps1

windows10-2004-x64

exiftool-1...WG.ps1

windows11-ltsc_2024-x64

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 17:45

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

pdf evasion

Behavioral task

behavioral1

Sample

exiftool-13.59_64/exiftool(-k).exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

exiftool-13.59_64/exiftool(-k).exe

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

exiftool-13.59_64/exiftool_files/lib/Carp.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

exiftool-13.59_64/exiftool_files/lib/Carp.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

exiftool-13.59_64/exiftool_files/lib/Compress/Raw/Lzma.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

exiftool-13.59_64/exiftool_files/lib/Compress/Raw/Lzma.bat

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware persistence spyware

Behavioral task

behavioral7

Sample

exiftool-13.59_64/exiftool_files/lib/Config_git.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

exiftool-13.59_64/exiftool_files/lib/Config_git.pl

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

adware persistence ransomware spyware

Behavioral task

behavioral9

Sample

exiftool-13.59_64/exiftool_files/lib/Config_heavy.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

exiftool-13.59_64/exiftool_files/lib/Config_heavy.pl

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

exiftool-13.59_64/exiftool_files/lib/Data/Dumper.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

exiftool-13.59_64/exiftool_files/lib/Data/Dumper.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

exiftool-13.59_64/exiftool_files/lib/File/Glob.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

exiftool-13.59_64/exiftool_files/lib/File/Glob.vbs

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

exiftool-13.59_64/exiftool_files/lib/IO/Uncompress/Base.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

exiftool-13.59_64/exiftool_files/lib/IO/Uncompress/Base.bat

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

adware persistence spyware

Behavioral task

behavioral17

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool.pdf

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

adware discovery persistence ransomware spyware

Behavioral task

behavioral19

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/GPS.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/GPS.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geolocation.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geolocation.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geotag.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geotag.vbs

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/HtmlDump.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/HtmlDump.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/ID3.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/ID3.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/IPTC.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/IPTC.ps1

Resource

win11ltsc2024-20260630-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/MWG.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/MWG.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Report Analysis Logs

General

Target
exiftool-13.59_64/exiftool_files/lib/IO/Uncompress/Base.bat
Size 37KB
Sample260705-wb8ecsat4k
SHA256 9f229d9467a12165ac6a0962ce2aa09969b0b9f43b809f6caf0a563a4338ebfd
MD5 cc35a7ee132af7fbb5de8754fc9da169
SHA1 77b9ae31665478a1bf0285e4a8bf5240ff503408
SHA512 d4219136b8af9d7c18551b9ad59ed9148a138bcf5ccdf4f5de40cf1fb15364c4c9eea0e6a0f0480fc49d901de266ff996c0edbd5671dd9440d81fb8832c88eaa
SSDEEP 384:D1J/CD+nojrrOp57rkc7GziAEBNYCAYIc5iRPFFT6MW3taojPC2:D1J/CKojrrOp5rxyBbCHiRvC3tjPH
TLSH
T14703FFE0B9E391516696203A0FCD8898E62E44530D6DDE30B8BCD2957FC1D3AD9F939C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\exiftool-13.59_64\exiftool_files\lib\IO\Uncompress\Base.bat"
1⤵
PID:3056

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads