e405d4bac1824001709d80270cc1feab96f034f0c89af85362ae4542a09d00e2

Login
Reports

Overview

overview

Static

static

exiftool-1...k).exe

windows10-2004-x64

exiftool-1...k).exe

windows11-ltsc_2024-x64

exiftool-1...arp.js

windows10-2004-x64

exiftool-1...arp.js

windows11-ltsc_2024-x64

exiftool-1...ma.bat

windows10-2004-x64

exiftool-1...ma.bat

windows11-ltsc_2024-x64

exiftool-1...git.pl

windows10-2004-x64

exiftool-1...git.pl

windows11-ltsc_2024-x64

exiftool-1...avy.pl

windows10-2004-x64

exiftool-1...avy.pl

windows11-ltsc_2024-x64

exiftool-1...er.ps1

windows10-2004-x64

exiftool-1...er.ps1

windows11-ltsc_2024-x64

exiftool-1...ob.vbs

windows10-2004-x64

exiftool-1...ob.vbs

windows11-ltsc_2024-x64

exiftool-1...se.bat

windows10-2004-x64

exiftool-1...se.bat

windows11-ltsc_2024-x64

exiftool-1...ol.pdf

windows10-2004-x64

exiftool-1...ol.pdf

windows11-ltsc_2024-x64

exiftool-1...PS.ps1

windows10-2004-x64

exiftool-1...PS.ps1

windows11-ltsc_2024-x64

exiftool-1...on.ps1

windows10-2004-x64

exiftool-1...on.ps1

windows11-ltsc_2024-x64

exiftool-1...ag.vbs

windows10-2004-x64

exiftool-1...ag.vbs

windows11-ltsc_2024-x64

exiftool-1...ump.js

windows10-2004-x64

exiftool-1...ump.js

windows11-ltsc_2024-x64

exiftool-1...D3.ps1

windows10-2004-x64

exiftool-1...D3.ps1

windows11-ltsc_2024-x64

exiftool-1...TC.ps1

windows10-2004-x64

exiftool-1...TC.ps1

windows11-ltsc_2024-x64

exiftool-1...WG.ps1

windows10-2004-x64

exiftool-1...WG.ps1

windows11-ltsc_2024-x64

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/07/2026, 17:45

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

pdf evasion

Behavioral task

behavioral1

Sample

exiftool-13.59_64/exiftool(-k).exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

exiftool-13.59_64/exiftool(-k).exe

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

exiftool-13.59_64/exiftool_files/lib/Carp.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

exiftool-13.59_64/exiftool_files/lib/Carp.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral5

Sample

exiftool-13.59_64/exiftool_files/lib/Compress/Raw/Lzma.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

exiftool-13.59_64/exiftool_files/lib/Compress/Raw/Lzma.bat

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

adware persistence spyware

Behavioral task

behavioral7

Sample

exiftool-13.59_64/exiftool_files/lib/Config_git.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

exiftool-13.59_64/exiftool_files/lib/Config_git.pl

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

adware persistence ransomware spyware

Behavioral task

behavioral9

Sample

exiftool-13.59_64/exiftool_files/lib/Config_heavy.pl

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

exiftool-13.59_64/exiftool_files/lib/Config_heavy.pl

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

exiftool-13.59_64/exiftool_files/lib/Data/Dumper.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral12

Sample

exiftool-13.59_64/exiftool_files/lib/Data/Dumper.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral13

Sample

exiftool-13.59_64/exiftool_files/lib/File/Glob.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

exiftool-13.59_64/exiftool_files/lib/File/Glob.vbs

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

exiftool-13.59_64/exiftool_files/lib/IO/Uncompress/Base.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

exiftool-13.59_64/exiftool_files/lib/IO/Uncompress/Base.bat

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

adware persistence spyware

Behavioral task

behavioral17

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool.pdf

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

adware discovery persistence ransomware spyware

Behavioral task

behavioral19

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/GPS.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/GPS.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geolocation.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geolocation.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geotag.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geotag.vbs

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/HtmlDump.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/HtmlDump.js

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/ID3.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/ID3.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/IPTC.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/IPTC.ps1

Resource

win11ltsc2024-20260630-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/MWG.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/MWG.ps1

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

execution

Report Analysis Logs

General

Target
exiftool-13.59_64/exiftool_files/lib/Image/ExifTool/Geotag.vbs
Size 76KB
Sample260705-wb8ecsat4k
SHA256 e405d4bac1824001709d80270cc1feab96f034f0c89af85362ae4542a09d00e2
MD5 608623e03cae6deef1620ea1bf812d0a
SHA1 05a99df41f2f10fe3c6c4ccbaae7d1b04344662f
SHA512 33126687d17c196a5b501699f6dcde3aa1701850ef168cf12ef3dab4f8d2ffd90f10ce1ff7ec229370637459e1242cb8c731b64ecf1100c06864153c8c3ac6bd
SSDEEP 1536:EXSJQaALtSIotBKK5+5/ccbMK53QcYxO4i:nQdfo2K5+50RcQcYBi
TLSH
T15173E7523ED312254253F0299BCE5854EB2EC1A76789DE2878EC81C83F41978E6FD7D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\exiftool-13.59_64\exiftool_files\lib\Image\ExifTool\Geotag.vbs"
1⤵
PID:3068

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads