Overview
overview
3Static
static
3fragment/b...14.pyc
windows10-2004-x64
3fragment/b...14.pyc
windows11-ltsc_2024-x64
3fragment/b...314.js
windows10-2004-x64
3fragment/b...314.js
windows11-ltsc_2024-x64
3fragment/bot/main.py
windows10-2004-x64
3fragment/bot/main.py
windows11-ltsc_2024-x64
3fragment/bot/sql.py
windows10-2004-x64
3fragment/bot/sql.py
windows11-ltsc_2024-x64
3web/_tmp_aes.js
windows10-2004-x64
3web/_tmp_aes.js
windows11-ltsc_2024-x64
3web/check.js
windows10-2004-x64
3web/check.js
windows11-ltsc_2024-x64
3web/dashboard.js
windows10-2004-x64
3web/dashboard.js
windows11-ltsc_2024-x64
3web/dashboard.html
windows10-2004-x64
3web/dashboard.html
windows11-ltsc_2024-x64
3web/resell...te.ps1
windows10-2004-x64
3web/resell...te.ps1
windows11-ltsc_2024-x64
3fragment/b...aes.js
windows10-2004-x64
3fragment/b...aes.js
windows11-ltsc_2024-x64
3fragment/b...eck.js
windows10-2004-x64
3fragment/b...eck.js
windows11-ltsc_2024-x64
3fragment/b...ard.js
windows10-2004-x64
3fragment/b...ard.js
windows11-ltsc_2024-x64
3fragment/b...d.html
windows10-2004-x64
3fragment/b...d.html
windows11-ltsc_2024-x64
fragment/b...te.ps1
windows10-2004-x64
3fragment/b...te.ps1
windows11-ltsc_2024-x64
3fragment/b...64.dll
windows10-2004-x64
1fragment/b...64.dll
windows11-ltsc_2024-x64
1fragment/b...nt.exe
windows10-2004-x64
1fragment/b...nt.exe
windows11-ltsc_2024-x64
1General
- Target [paste-co.de] Fragment source.rar
- Size 29.3MB
- Sample260715-y3zmmsg14w
- SHA256 d00e460bc584919eb8de26a10f07be9d167e6e5feb94a98d02d2ccbcc2bac7cc
- MD5 fe30a6a59411d2fbdbbdee83118f7290
- SHA1 95e73c5c7ee4b1591c5f7ab0f48201232f072699
- SHA512 b9ca70bd4da4770a5a9fe6e605f008865154be934d66be7b8a6fcdee69a3be95277275f0dda61c189b28aeb48ad8200d6cc7dad36cbcd292fb4ae66bcde603d2
- SSDEEP 786432:CvPlnLfYKAI/YJwisMA4UPMAI4fFt0bbE3PR:SfYmYJw62PMAI4dtPp
- TLSH T14B6733EAF9AF61BC9D450B9763A385A8D18FF2446284C7FF568C09CB77194309324F26
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
fragment/bot/__pycache__/main.cpython-314.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
fragment/bot/__pycache__/main.cpython-314.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
fragment/bot/__pycache__/sql.cpython-314.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
fragment/bot/__pycache__/sql.cpython-314.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
fragment/bot/main.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
fragment/bot/main.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
fragment/bot/sql.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
fragment/bot/sql.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
web/_tmp_aes.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
web/_tmp_aes.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
web/check.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
web/check.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
web/dashboard.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
web/dashboard.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral15
Sample
web/dashboard.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
web/dashboard.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
web/reseller_validate.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
web/reseller_validate.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
fragment/bot/web/_tmp_aes.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
fragment/bot/web/_tmp_aes.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral21
Sample
fragment/bot/web/check.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
fragment/bot/web/check.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
fragment/bot/web/dashboard.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
fragment/bot/web/dashboard.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
fragment/bot/web/dashboard.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
fragment/bot/web/dashboard.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
fragment/bot/web/reseller_validate.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
fragment/bot/web/reseller_validate.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
fragment/build/VMProtectSDK64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
fragment/build/VMProtectSDK64.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
fragment/build/fragment.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
fragment/build/fragment.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target fragment/bot/__pycache__/main.cpython-314.pyc
- Size 32KB
- SHA256 2c5884c978466e2d479ef1773feac80f3ff9f5bd34dd827793756009a2fffa00
- MD5 1f8cd83b5319d5fd77a2ff45b1d16a3a
- SHA1 59fea4f34aacddf9691321f0b525181f48e0c854
- SHA512 482d6bc03ff0fb1901b4dd50e2187cce77cd2b047bd67f393773e2642808e3640a0e17b124c0ddd6c75c044cb101fb556621819b8ce0c3aef495a7ed4a46a29b
- SSDEEP 384:LE7X2IfaeN8q4RzlHxjaAEzAbT5nPEcbqACrK5G0+fC9J3vGq11xVu1l620a6:Ly2IfBO7F9E45nPE6qAMK5GPfck1g24
- TLSH T199E219FAAA548823FEC4F13830C2DEAAB732C0427504D75BD6252CFA5DDDB0259E562D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/__pycache__/sql.cpython-314.pyc
- Size 93KB
- SHA256 ddf639a8bf42db3ac6ee47508c96c4ba0460966184bd96089f87fbe9b23ee522
- MD5 0be01f8d1a3a6558101268f64f14fe84
- SHA1 6f65d53bd15edb7345676101a484a3120d9b895f
- SHA512 48488598d608f893f29b303f44cdcb79c47f2caae64eae28eaff096624335a55608f86b8c9b364e1bc462f0275597b331037ce5b46f21a66c47299a2429c6467
- SSDEEP 768:Cyr+0Shc4LbMA1/44UNdlJPdsIsHOd93duBQBk/3Odmt4Pe5b+SJoWteCimqZR8+:CyrFShbsAkX9NuBQBG4GbimqMias
- TLSH T1C493E5A9AAA04813FDD4F13830C7EE45B722C041A704C757F23C1CFA7FE9662A8A595C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/main.py
- Size 17KB
- SHA256 abe238a228936abda17dfd5821dea69f0728111cdbf79380ac7c4e140f7a79b7
- MD5 ea036fec674624f9632cf4aaa374ec0a
- SHA1 721a64cf833a0a24c3e5a2de91764d5d4665ad9f
- SHA512 8f669511f8e74974853ca1ce6d42fc85acae9370f4ef8f9233d05ccc30ad6122af3b23b7f4e4f0a31254b6d2926aef9a2b037a924a8c299755ec44c0f5ecbddc
- SSDEEP 384:SIJ2QaE3g5tVaVYiv5vaJVT7Ew7lidFqRtpZln:SI96iveidFqRfn
- TLSH T13E828452A9673C3367C795559CA6E1423725B807494D30E2BCFC122C4FADE3AA0F2ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/sql.py
- Size 53KB
- SHA256 900cc709c8359b1994066ba0e6c0de164d5a4a14921038d132ecf0aa9503461a
- MD5 b05585e5156efb4874cb4fcddf8a1eba
- SHA1 6c03eb9089e5157f04c937c80543cb8b3a4b14d4
- SHA512 066cd2ca409238b759fd2362ba840b5b65620379b834a57101a6a5b42029b07dca5a0d90db4540427de45f83204aafe35c410ce113bfd0f1afdb9b89822b3d33
- SSDEEP 768:kIqj6wOKVAQCYlywWDNixFWyiaiOvWyD6j+F1Dc6Fvg:kIqj6wOKVCXJDsxFWyANyE
- TLSH T19933B653D9A73C32A7D794659C96E1823318B807490D24E5BDBC94684FCE53BE0FAACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web/_tmp_aes.js
- Size 13KB
- SHA256 d9f7578eb92e72692d4ff21876deebbde478adc4a7db1ecaab269e2374729773
- MD5 6feec52c651bbf1cac2887175da96f88
- SHA1 8c09590d0e79a69b68c98b2abbf096a626614097
- SHA512 1cc2f4bf06209f2362077030af96c36398a5a678a2ad735f8e9a600848fe779a20227626386e9ddebc897ad047b90798d1fb4d24b45f053571a693db43f4aeb0
- SSDEEP 192:4hsoEj776Bn/tnHcgaollys/6+EgH3JLg7oLu0MyMVv:i50/3xoGs/jE839g2FBM
- TLSH T1F55200C203894A7CF2C92ED68C2F605620F3E54A3D251249EFB399DBBC77D895075A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web/check.php
- Size 2KB
- SHA256 b57fe43780588e25135f9311040190b3c4e23c64b0333accead43e85ffda0758
- MD5 ce179ccebe56f78e60de5046a7fed652
- SHA1 184c58f329dd5cfe977a2f6694f5e8bcec84a0e8
- SHA512 2e5342a60b03fda4b02ddfb1b6b6eccceb017248af96ddb4736fac0c3c33c74bc5b2ddb330be01dc353766483525103b5bde017d94a164d289cd1f250e57a834
- TLSH T18D511F92BDE3B21962B37834579F9006725C942B3905DA44BD1C03D86FC1661EEE8F92
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target web/dashboard.js
- Size 15KB
- SHA256 37f73a9333f9beae3a2eeccc9e599e79fe78bdc7535b44b725f6ae198285ac5b
- MD5 3d706a4b3681cec45af2652ee15443bd
- SHA1 d3aedc7541ac2d8a2925f12645df526855b4ff1a
- SHA512 48c48c51718b607eae6a125ac4f3924921bf6509f917382f2f497b29c44ff9cfcc06a2fc644ca9df943dbc95b5eebe321e85de7ebd4750c8ae4f3d2426bfb2bb
- SSDEEP 384:wajLOzA4g+8TGV0dF8/2ldI/rpez8n5G9wiWZJy1d8tvwvsfHCJpMQozlz1F6ePt:wajLOzA4g+8TGV0dF8/2ldI/rpez8n5R
- TLSH T1C662306F31F3243949A7B47B63DBD18A7622500B1C0CD9247E5C9A405FA2F6895FBBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web/dashboard.php
- Size 17KB
- SHA256 4d5cd7177f551248053013e74fd68591ca42e196f0d32d19c0e29a6e309e9af7
- MD5 e7d326d33617c75987dc542b7abcd467
- SHA1 fce5b7ee55a59e1a0fabd4e1dffef907d1123bf7
- SHA512 2210f9f4edb1d84e0cd88c67814115f3aec000a94c3011f543bef05916a92499a60169f9793e7b9618d76531d5e2846c0f066d98a9177c971ccc81b21dada96f
- SSDEEP 384:fsc3Fx0gvECLZCLW6CLokCLXqCLX0CLXRCLq3Q:fsCECLZCLW6CLokCLaCLX0CLXRCLF
- TLSH T1BD82226120F10AAFA0D7C791F6506F16ADAE9717C45B917DB5AD82D12F83CB2CD8F208
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web/reseller_validate.php
- Size 1KB
- SHA256 b920e0d2fdf7193f1f7ae44fd12a242ecdb4713cdb22655ebc7106730e77b994
- MD5 aa128360376ca285bfb18df35433dadc
- SHA1 35304eb551f0868215256406d8970bcb74fcc0b0
- SHA512 7fa8dbb511568c09b52bf4b57366090bd62e1ddac1cbea4c200f976f55d08bcf6110f2bd06ceabc8a4a0462ed1f77247008d68e965698f6134b91eb4d55b5d2e
- TLSH T16941543154F377189A7794E747E5AA41B7E504034D029457B75E2EA31FD46ECC9F0B08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fragment/bot/web/_tmp_aes.js
- Size 13KB
- SHA256 d9f7578eb92e72692d4ff21876deebbde478adc4a7db1ecaab269e2374729773
- MD5 6feec52c651bbf1cac2887175da96f88
- SHA1 8c09590d0e79a69b68c98b2abbf096a626614097
- SHA512 1cc2f4bf06209f2362077030af96c36398a5a678a2ad735f8e9a600848fe779a20227626386e9ddebc897ad047b90798d1fb4d24b45f053571a693db43f4aeb0
- SSDEEP 192:4hsoEj776Bn/tnHcgaollys/6+EgH3JLg7oLu0MyMVv:i50/3xoGs/jE839g2FBM
- TLSH T1F55200C203894A7CF2C92ED68C2F605620F3E54A3D251249EFB399DBBC77D895075A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/web/check.php
- Size 2KB
- SHA256 b57fe43780588e25135f9311040190b3c4e23c64b0333accead43e85ffda0758
- MD5 ce179ccebe56f78e60de5046a7fed652
- SHA1 184c58f329dd5cfe977a2f6694f5e8bcec84a0e8
- SHA512 2e5342a60b03fda4b02ddfb1b6b6eccceb017248af96ddb4736fac0c3c33c74bc5b2ddb330be01dc353766483525103b5bde017d94a164d289cd1f250e57a834
- TLSH T18D511F92BDE3B21962B37834579F9006725C942B3905DA44BD1C03D86FC1661EEE8F92
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fragment/bot/web/dashboard.js
- Size 15KB
- SHA256 37f73a9333f9beae3a2eeccc9e599e79fe78bdc7535b44b725f6ae198285ac5b
- MD5 3d706a4b3681cec45af2652ee15443bd
- SHA1 d3aedc7541ac2d8a2925f12645df526855b4ff1a
- SHA512 48c48c51718b607eae6a125ac4f3924921bf6509f917382f2f497b29c44ff9cfcc06a2fc644ca9df943dbc95b5eebe321e85de7ebd4750c8ae4f3d2426bfb2bb
- SSDEEP 384:wajLOzA4g+8TGV0dF8/2ldI/rpez8n5G9wiWZJy1d8tvwvsfHCJpMQozlz1F6ePt:wajLOzA4g+8TGV0dF8/2ldI/rpez8n5R
- TLSH T1C662306F31F3243949A7B47B63DBD18A7622500B1C0CD9247E5C9A405FA2F6895FBBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/web/dashboard.php
- Size 17KB
- SHA256 4d5cd7177f551248053013e74fd68591ca42e196f0d32d19c0e29a6e309e9af7
- MD5 e7d326d33617c75987dc542b7abcd467
- SHA1 fce5b7ee55a59e1a0fabd4e1dffef907d1123bf7
- SHA512 2210f9f4edb1d84e0cd88c67814115f3aec000a94c3011f543bef05916a92499a60169f9793e7b9618d76531d5e2846c0f066d98a9177c971ccc81b21dada96f
- SSDEEP 384:fsc3Fx0gvECLZCLW6CLokCLXqCLX0CLXRCLq3Q:fsCECLZCLW6CLokCLaCLX0CLXRCLF
- TLSH T1BD82226120F10AAFA0D7C791F6506F16ADAE9717C45B917DB5AD82D12F83CB2CD8F208
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/web/reseller_validate.php
- Size 1KB
- SHA256 b920e0d2fdf7193f1f7ae44fd12a242ecdb4713cdb22655ebc7106730e77b994
- MD5 aa128360376ca285bfb18df35433dadc
- SHA1 35304eb551f0868215256406d8970bcb74fcc0b0
- SHA512 7fa8dbb511568c09b52bf4b57366090bd62e1ddac1cbea4c200f976f55d08bcf6110f2bd06ceabc8a4a0462ed1f77247008d68e965698f6134b91eb4d55b5d2e
- TLSH T16941543154F377189A7794E747E5AA41B7E504034D029457B75E2EA31FD46ECC9F0B08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fragment/build/VMProtectSDK64.dll
- Size 115KB
- SHA256 ec3235136a4daee2a6f72c0f2994a8365ca8427c8068d068130b74c9fa64cd02
- MD5 c0ce8c981bda19d2be17aca0774d9df1
- SHA1 895052a42efa50043f473f072578bee69be8d2f8
- SHA512 1578948dba2492263c0b174816451218c70df89e6b4440981db9513c664d97f6253fc1c0dab4164c620b9cb7794f4789677a0c38e0a5ac9636aee1dbc3d16062
- SSDEEP 3072:0RcqYHq7Aiytzg2ScpvgJcLYsqYX6UDdyBo:K0Hq7AiyegZgJoZXBa
- TLSH T171C35B47B3E540BBD1B6C679CD234A56D3B678150B249BAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target fragment/build/fragment.exe
- Size 28.2MB
- SHA256 aae8ed274a35023f0b645984618d7741f1f9e5e3cab85b77849ded1d05af6dc8
- MD5 1c5e74253ef82db83c5304e4bfbc3b09
- SHA1 5a319690834b107dc1f28a7c0005f8e02167333c
- SHA512 fb6d1d700ee63296bd67429821d67c1123da42c2126b5ef4d44ef69e43afe74619e765d952c8c4ee1793db69a20f1313f0d89cfd6132a690a22120d572806883
- SSDEEP 393216:vYj24gfPCd3G50yIESf1qk4K4T1ngXjFDsldvwWhuZvJYAmXeDu0ieeA5S3CsJ2R:vYjkXZIESt41KRhYQMrA5S3Vk8e9
- TLSH T1205723E698D423D4D6D30900A38F43AF61D2987A47DA592D1BC73C035A20EF7A749EB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10