914a9c885d6d03be7c3a68857b0649984db5c71a45360f91de2292055220c221 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

nbtool-0.0...at.exe

windows10-2004-x64

3

nbtool-0.0...at.exe

windows11-ltsc_2024-x64

3

nbtool-0.0...er.exe

windows10-2004-x64

3

nbtool-0.0...er.exe

windows11-ltsc_2024-x64

3

nbtool-0.0...st.exe

windows10-2004-x64

3

nbtool-0.0...st.exe

windows11-ltsc_2024-x64

3

nbtool-0.0...ss.exe

windows10-2004-x64

3

nbtool-0.0...ss.exe

windows11-ltsc_2024-x64

3

nbtool-0.0...ry.exe

windows10-2004-x64

3

nbtool-0.0...ry.exe

windows11-ltsc_2024-x64

3

nbtool-0.0...ff.exe

windows10-2004-x64

3

nbtool-0.0...ff.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
nbtool-0.04-win32.zip
Size 288KB
Sample260712-al952sbv8j
SHA256 914a9c885d6d03be7c3a68857b0649984db5c71a45360f91de2292055220c221
MD5 76f8b9479f41bc356b809d1118ac2a6d
SHA1 ddc77a7dba3058bab49b6dad7483ae58b7ebdd6f
SHA512 6219069167df0a79a929f7dde8e8f75707da645ccb02b6a353724104dcb2c8298b35756a4b29ce84deb7af08499d8c0d99827b00eacaf7d4079a085d8d2a4ab4
SSDEEP 6144:s2JVKibsu8ZGVlXW6cUB4rLThjORgtZjqkxTIDNYZDcj4cg:c+RWC4rLlOR4Z39yNYZD07g
TLSH
T10654238DFA964335D476D1B3AD385ABE15026C75C8707E36019B99CA0BB21F24CF74CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

nbtool-0.04/dnscat.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

nbtool-0.04/dnscat.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

nbtool-0.04/dnslogger.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

nbtool-0.04/dnslogger.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

nbtool-0.04/dnstest.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

nbtool-0.04/dnstest.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

nbtool-0.04/dnsxss.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

nbtool-0.04/dnsxss.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

nbtool-0.04/nbquery.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

nbtool-0.04/nbquery.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

nbtool-0.04/nbsniff.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

nbtool-0.04/nbsniff.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  nbtool-0.04/dnscat.exe
- Size 118KB
- SHA256 3bfb8e237f907872f22c8dc550b5dcacc752172e61c1b0065090a12b40b29845
- MD5 cfaf88bd69845c894ae365bc401cd4f0
- SHA1 d9f78c3a392696d1e06a9b379cb7a5b7979512db
- SHA512 3954d810973fc23e9e8686e08a1a21b17d16061d637c3aaa6dbd887445344bf25052a7e169b917e2d3dc63e44998e47da8d9e7464b1576b1f11f45fd3484c2e9
- SSDEEP 3072:WPC0xDRvWJ24p0vJictwXOazC1Vk8g51j:o9DcJ2CCJPtkT4Vl
- TLSH
  T124C38E213640D075E0065077662AC7F2EF3AE5742774D4D3FFA50B7A6E316D0AA3A24E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  nbtool-0.04/dnslogger.exe
- Size 84KB
- SHA256 0b9bb18ac80ce12cff8425db5c33820712adbca937224d73d3b414021988a523
- MD5 fd02aef1505be87f9628e317a2c2eae8
- SHA1 34996b2f94d8fd9563f230cf333e810d88fc4b3e
- SHA512 befbe2727c222beff56067f387ad695dea53cf790c8ac83c37c1992362c4ac8c9cb8a289ee2fa75150814170f6178d268f4d97cc90250b2d569ecf58a5d43afe
- SSDEEP 1536:6VCp+SMU8w6eqqooXXrSPXWQGFoJCIc5W/:6VCp+cRNQeoJE5W
- TLSH
  T127838D113A90C0B2E09554BA25ABD7F28B3FA0715B35A5C3F7B50B765F302D19E3B24A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  nbtool-0.04/dnstest.exe
- Size 83KB
- SHA256 bc92e61a82cd2a5e248f37d8e767074bb9feb104ca8fc5865941691f618c010e
- MD5 bdd848bb0afbc622ce3a976ef06d6ec8
- SHA1 5d8de74a4074acf373c6a5a327e2e51da8b4bf22
- SHA512 f5543a0bc6ecaf94d103964e0ca4c4f88eb582fda6a8175db0d67313f35f96682f3afb708776324791843958a5ac0bad3b8709ced88870aa08c07cc21721fa95
- SSDEEP 1536:GSPy+0IfFAJLsTtmTsQnikDPu80rCOGt5pH:GSPy+0IdAibk30r0t5p
- TLSH
  T1CB837E217A80D0B1D0551476296BDFF29B3EA5310B359DC3F7740BAA5F322E19E3B24A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  nbtool-0.04/dnsxss.exe
- Size 88KB
- SHA256 04779740315c784637dea7538f67f5ecba9602ff08299c2938fed87eb8dd9b0d
- MD5 452e2a44938a837266f6046466848522
- SHA1 a4136ac23827aeb3a0d3f78a2076ff07503870d0
- SHA512 4a07b69f6f1bc95d17de432ad0beb9172f651ee91a1da8adf3014097484a791bb51d2fb27ba3873bcaab9e98340d66556c1329d8bbfc91ca77a80fc6be7c36bc
- SSDEEP 1536:deKEoiSimmdi/9dpFgDCQ0LmrqzP9jfmWmyR5:dNEoiSimmYDWQfmWmM5
- TLSH
  T189939D617581C0B2E051547A2A67EBF2CB3EB5712B3495C3FBA407665F301E19A3B24F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  nbtool-0.04/nbquery.exe
- Size 88KB
- SHA256 e9a12dd75dca6a28a124624c9b4478da06022c5ffd438117bcab3b721ac78953
- MD5 c24967d4e34ce199f0e8c87a96390b7b
- SHA1 f2c5bb848645ac9af4eab06115d2662bf2d457f5
- SHA512 cf7fa22ad39c633a279f053dd110d5258f4c2cae30bc68174f745563dff2d4ba3a32dd42d9e40ce0bd24c28c4d0e01510866163fe346fbfb88e99191dee69802
- SSDEEP 1536:j6kM//jyfEXVwzxoM3YePYGSjIlnfNN3pJtw72HSr5F4f4:jLhfEXyzX32Ozq72Hy5F4w
- TLSH
  T16E937C723552C072E05A50772176DBF2DB3FA1711B3299C3F7680B79AE311E19A3A24B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  nbtool-0.04/nbsniff.exe
- Size 84KB
- SHA256 262e735ead2f9c96c68c6f4be6812557c55f08dd1f2d2036b66d533c308976e5
- MD5 52aa8997cb4bcad94f4bb63d4dae554d
- SHA1 b544602293dc439a49cc40cbc040900309f2a49f
- SHA512 38716e6513e31f74d05430b1c192ed7d872b5b736e6f13c9befa7e407080490760f7c184e2d2adc9d8a6fcf85272ad6e77186032e28745c18210be147e8a88ff
- SSDEEP 1536:5vice8GBJp9ahiH1IoXWGyHp68PzuMjiEJGnda15u7O:NiX8GB5meIuLOiEJGda15t
- TLSH
  T1D5837C513181D0B2D06650772667EBF19B3EB0744B6599C3F7A40BBA2F312E19A3B12F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

© 2018-2026

Terms | Privacy