dde8ba05f83b5454046e107f70d538be0d1a52843f9f0674ff5a85917bf88537 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

leEF_v3 (1).zip

windows10-2004-x64

1

leEF_v3 (1).zip

windows11-ltsc_2024-x64

1

core/__pyc...14.pyc

windows10-2004-x64

3

core/__pyc...14.pyc

windows11-ltsc_2024-x64

3

core/botcfg.json

windows10-2004-x64

3

core/botcfg.json

windows11-ltsc_2024-x64

3

core/config.json

windows10-2004-x64

3

core/config.json

windows11-ltsc_2024-x64

3

core/display.py

windows10-2004-x64

3

core/display.py

windows11-ltsc_2024-x64

3

core/modern_ui.py

windows10-2004-x64

3

core/modern_ui.py

windows11-ltsc_2024-x64

3

core/paginated_ui.py

windows10-2004-x64

3

core/paginated_ui.py

windows11-ltsc_2024-x64

3

core/themes.py

windows10-2004-x64

3

core/themes.py

windows11-ltsc_2024-x64

3

install.bat

windows10-2004-x64

3

install.bat

windows11-ltsc_2024-x64

3

leEF.exe

windows10-2004-x64

3

leEF.exe

windows11-ltsc_2024-x64

3

main.py

windows10-2004-x64

3

main.py

windows11-ltsc_2024-x64

3

modules/__init__.py

windows10-2004-x64

3

modules/__init__.py

windows11-ltsc_2024-x64

3

modules/boot.py

windows10-2004-x64

3

modules/boot.py

windows11-ltsc_2024-x64

3

modules/bu...der.py

windows10-2004-x64

3

modules/bu...der.py

windows11-ltsc_2024-x64

3

modules/crypto.py

windows10-2004-x64

3

modules/crypto.py

windows11-ltsc_2024-x64

3

modules/di...ols.py

windows10-2004-x64

3

modules/di...ols.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
leEF_v3 (1).zip
Size 500KB
Sample260718-d7gmeae16q
SHA256 dde8ba05f83b5454046e107f70d538be0d1a52843f9f0674ff5a85917bf88537
MD5 261e4ccd078746861e4f67fd5ed7959c
SHA1 69728ac66ef7d4dd439de7af03080469e485f347
SHA512 f54307d67c3ac2a381238853f35efdd265439357557e433550c3b67a6f77343f99043fa612ce9fdcfa4659c6b22afaab875129bf946baeeba1d18c0cb28c0033
SSDEEP 12288:T7WargsBciDQREY+43TGlu9fH5XJL6EDcb382cJL/KlYWUPQZ5:PWYFTDyEV4DGlu9fHfLbgbMKlY3YZ5
TLSH
T17DB412D9923A8413F10D677EF58EC213CCBC9AC0E3D1960B585C15C69DC3AB98B9B726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

leEF_v3 (1).zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

leEF_v3 (1).zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

core/__pycache__/themes.cpython-314.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

core/__pycache__/themes.cpython-314.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

core/botcfg.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

core/botcfg.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

core/config.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

core/config.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

core/display.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

core/display.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

core/modern_ui.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

core/modern_ui.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

core/paginated_ui.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

core/paginated_ui.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

core/themes.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

core/themes.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

install.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

install.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

leEF.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

execution persistence

Behavioral task

behavioral20

Sample

leEF.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

execution persistence

Behavioral task

behavioral21

Sample

main.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

main.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

modules/__init__.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

modules/__init__.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

modules/boot.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

modules/boot.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

modules/builder/rat_builder.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

modules/builder/rat_builder.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

modules/crypto.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

modules/crypto.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

modules/discord_tools.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

modules/discord_tools.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  leEF_v3 (1).zip
- Size 500KB
- SHA256 dde8ba05f83b5454046e107f70d538be0d1a52843f9f0674ff5a85917bf88537
- MD5 261e4ccd078746861e4f67fd5ed7959c
- SHA1 69728ac66ef7d4dd439de7af03080469e485f347
- SHA512 f54307d67c3ac2a381238853f35efdd265439357557e433550c3b67a6f77343f99043fa612ce9fdcfa4659c6b22afaab875129bf946baeeba1d18c0cb28c0033
- SSDEEP 12288:T7WargsBciDQREY+43TGlu9fH5XJL6EDcb382cJL/KlYWUPQZ5:PWYFTDyEV4DGlu9fHfLbgbMKlY3YZ5
- TLSH
  T17DB412D9923A8413F10D677EF58EC213CCBC9AC0E3D1960B585C15C69DC3AB98B9B726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  core/__pycache__/themes.cpython-314.pyc
- Size 3KB
- SHA256 5834efd792fbb2094f61554455360eaf14c8b93c6b9cb7d6fde214cd301b1170
- MD5 b141fd97c3e8a05aca5e2e37404f7392
- SHA1 70a6007aa99fccab63c654d5a20fb1a2abe973d3
- SHA512 5167a466982da0c294d797c69447f997735be3c1c48bcff974b218de8da404d84dc7a2b3c004a1016ec04840a999ea5904a956b73d93bfe387a18c81a7176a49
- TLSH
  T19861F6F4D625A004C58AE27271F7A8AB2750FE4EF52920B9FAE1AE3655CD73065103CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  core/botcfg.json
- Size 660B
- SHA256 25e510b87ec76499429f6de3009fb999ebdb36f004aa72ad580390b2f668ba90
- MD5 3d6eccff752a8dfc1f3c0c7bfae88a65
- SHA1 cda0f9838322159e806f9479d0f801af93fc09e3
- SHA512 fcbfe915f717551b5dd7f46f850d1658809d9eb6799c9d1d5ca8f984f5b2cdab31da68659a1b8f93bc0ba863ee087464854a16331070dab373cceb11684ddfff
- TLSH
  T1CB01731781259E1F2B3D19449D99490BFA261F4F1934CC47FB739989087760235D13D4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  core/config.json
- Size 174B
- SHA256 702f5b97e09363a57e7c02dca6679a8077faaec8a58cf4910aa30aed7402a0f7
- MD5 726b7bf79cc51b72763d3bef71886054
- SHA1 a74d2fcf506caa1a2edf69d2ac9238105af90f90
- SHA512 87226a82efc601f887c3b1c38d946fa8dcd3fcfd59bcb7afef83de5d81ccf010fa4284d93f3eb979ac41bcd8db99fc2d1104a63a5734835d2f694e9b783090f0
- TLSH
  T139C08C77A022D2631B3201E82E391222FB200FCF023D1D4F683B060E54CFBA72488B01
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  core/display.py
- Size 8KB
- SHA256 9f6c873fdb06c32437c6290bbf0b08595f32c021d7646c5114f28c523c78e3a8
- MD5 f46a5f2238e3e328932e467cc457bf26
- SHA1 3767a816624778169c95f0be0c9b8a0e6be6142d
- SHA512 8ed4afba546714d23f22dfa1fc32cbe70afe2c98e25ad289fb055d9e6fb2385f94d86bc2ee6ebe1ad195406bd47705226c42736e45090ea2ff88ed2683156ee9
- SSDEEP 192:k6kkH0daWQMH4pwPbcrCSAj9MkXkWqNvXyYP:GO0da/U4psgrCfj9MkXkWqoI
- TLSH
  T1C40296319C191921493B38BD8E8BE018EB4E37139235951778AD87A17FB425222B5FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  core/modern_ui.py
- Size 2KB
- SHA256 e9b7ec30ac6779a38e61fbe94e4fcf512ff90f286794a36418b4abddbf357da0
- MD5 2ce18aabc69f2068e0387ad3f0a8ade7
- SHA1 6e3ab66a57467beeb9af1ba8b724ae3b7b2ffde6
- SHA512 c22cff83e0c71f103c3850a42723f632be4add627201bd798780b3ba8f742cacbb7f9a1cf2593789ec1fae0250ebf0c9c84fa8cd97f1daadca714cd3088a9831
- TLSH
  T10E51E2B17C1659305F0FD4FF8A02E63D27673D2387103C70B75D4AA5EF5A2E086929A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  core/paginated_ui.py
- Size 14KB
- SHA256 e33afc9f4d994a3e64c0e6e3a39c8f61fb8e766052f93a227aaca2362b1764c8
- MD5 9753a54ff3a0d72d9ce787bd798bbcc7
- SHA1 5d822da8a5b91eac6dca6b84cbe58ad032ff52a6
- SHA512 ef052d36c930c979832b8e2ec22b0cbf879582326db33cbab41d6f1e1814a631651dedcda96ec74840a78f5adc7b44efb2bf0d5d0be2a5e094363c160f39b2fb
- SSDEEP 192:axkyyY7G0anMgkHm8uO9o1vgAZrAc6L+9pmLRB0l6ERKw5Ka+7qSzUluh:ckoG0AebZc6LqGjERKmKv7B
- TLSH
  T1BB62B831C5140E73C74BA07D094BC158BA253E3747543D39BE4E45AC1FECABA82F9A6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  core/themes.py
- Size 3KB
- SHA256 8de4c5e245bdba4deddddc653f623628bd956b2a8c76d1beb371b4e3529d84d0
- MD5 ebdf589402bc21a3fd3344368e725d38
- SHA1 af1b240e691e994ac5496c22137928c4c7118cba
- SHA512 b1a2d4b5dd430f569df988ea6c43872a3c6c726719b6c64af89c7411d5764cdd9eedac6eb1410a3d84101c41685a8b72044e47156595cb07e7267cffe311e043
- TLSH
  T1F96108A4DE214E650FB322FE9CD60162E902B27F48218C2F7DFE914C5FBB4597841935
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  install.bat
- Size 2KB
- SHA256 944d24e883d155fe2f23b446da28f49c889601b2422ad58600a94f83ed45338e
- MD5 9b25cfb33fe56de0287deb0e941c5cec
- SHA1 d69bc61856b20e4670715dde3ff288f0c2b84796
- SHA512 497f9c6096c7932b762320b454d8fdb51e47ca2f17d1ea27fde1af8adbb1a8df3c84944f4ccffe381d3cfd5fef5abcd0a64a310adb28566224c8038f325a7378
- TLSH
  T1E941C92B72A8D5B96A9E8265CC6560337292025F00157CBCF0EF81640F50BD0BBECBE6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  leEF.exe
- Size 128KB
- SHA256 b392a070e84aa7048435520c8739ef8b1ee8240887a9a992103049f5c2504108
- MD5 5dc2f224fd26dab59f6a0d860fda887b
- SHA1 542cd9e327e7195690c322de50d154493fdd90bf
- SHA512 1f3a575a470fd97d023be018c799ffb1fa9385eae3cda024f9af41a729617651b063cea4ff9a1a9ec3500a71ad758ecb98d9ad9b2d008d81f53d4039b4dc003e
- SSDEEP 3072:M/25jvDSgsqsb5Uh28vAbTV1WW69B9VjMdxPedN9ug0z9TBfFSaWN:Ptzsb5Uh28+V1WW69B9VjMdxPedN9ug/
- TLSH
  T1E5D3275BB2E01189EBB581F6D5920786EB7074721721A3DB1B7423B71B2B8C59F3D3A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution persistence
behavioral19 behavioral20
- Target
  main.py
- Size 27KB
- SHA256 5ec7d38c2f902b5864cc1752b2a8aa59f52fe709c8bc9272b9e5e2483acb4fff
- MD5 5014606644078019146873f6698cdb6b
- SHA1 1ef5617c2eff24ca297bb55e083ea4495957b2fc
- SHA512 1403e2fcd6b0635fef16bd1773a83da3b9e1226f35b44396221b0f448e0bae3cc837e9fba92e09e91acebceeefd4970fab6c7e869c72219ec72e37bc7d9a1fdd
- SSDEEP 192:d9RtJNLs+9gaq7oJ7y2JDCdGwT+PKuM0f9avDzlkSKKQYa+68776LqSC7VnKpKf+:d9RCElJN2dGRfw5DQYFhREKIWwhLFGS
- TLSH
  T11AC2B83144191A33871FD45C6D81C0A06F933E538BA6B838B99C92ED7F6D3311AF6A6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  modules/__init__.py
- Size 301B
- SHA256 f86c31a151810977a1724f3332703ab48abb4908c3a62e83af3a398f6af60799
- MD5 6900068ba19cc2086c6a6b8caca60eee
- SHA1 2d7fe14168863f15d598cb1622f8498e4fb6bf5c
- SHA512 7dbcd865bbdf7bcef0d6d337f494b7e6ce2e4ef4a7ef82eb0e3fbc7542fdf796d548823f13f40c15a11385e93c06f6c8ee9264e6ba7922b5a48498d5fbecb505
- TLSH
  T1C2E02EF2E13922129E712E935C23722BA3EA025A902318F0FF9CC002F3068E1057089B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  modules/boot.py
- Size 2KB
- SHA256 e1e3ad8f5cf009bb1330c0f6e0d99311ea72ecec980f63efeb43e7a7ca845cdf
- MD5 ad9075152a4b11544935233200338ddd
- SHA1 4d29a6a6e9f39d3086b4e0b0a362f5619b384f9e
- SHA512 8edfad3ae2905f2bd714bdd5057cfa64f74e50735f33b2447d5773c759a48d101350f5f5f0847f5191270dbe291654c48c2983c4a720f5e9107d38002208a7f1
- TLSH
  T18B512162ACA96060D537882A4C52F423F38F795317DE5526F9FCC0547F3827095A8CBA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  modules/builder/rat_builder.py
- Size 4KB
- SHA256 a746deb0fbc41a5993e10c094a4e8cd96fe6794d87bac8447b9a43715f349fa7
- MD5 fb3406d05daeace690e1167762d7156a
- SHA1 55794d9937dc2fb4abe158eb1f6c892e942e3fae
- SHA512 43fb6ce86499192de98691bf76f95761b94db8756f1441a621f3e694f09d40a2798686d7389e54f53c946a19fd34a9fe46cb1111382dede44e93b7be09b2dc95
- SSDEEP 48:gmAJMGgZdEcXhc1Np8JlFNfgnWfqPh2zNvTlPBVaK2+z4ZzCsXKruC9FAV28dQv8:1AgrEkqNW30WQApTdBVizChAxQC41Wx
- TLSH
  T140A1243544050A374B0F806C9F819051BA87B9274A93BD34B5DDC1EC3F9C33895F6A6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  modules/crypto.py
- Size 696B
- SHA256 b004ce3dc24ba2a6ccc95e90e6cc8872ef9918ccae6eff1e00cdb9d2551f23ea
- MD5 6bd78dc3ec1f985f5693da4671f8ccac
- SHA1 0338dd8834e82e0a5e6581aa77380ece4d724724
- SHA512 ffda2a7f2a67918ff78967db98937e6c5df4eeb32f92452363dc915af36430b801267a0636caf1f82013adc64fbc46a4a3bd3d6af937ac046eb92573cfb4cc1e
- TLSH
  T18A01FEA299BB0449DDBA4E6304D76485F3FD390E002664E0FF8D9258BF3C5F08070878
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  modules/discord_tools.py
- Size 37KB
- SHA256 e57bda833f62a28d173e521708b0d75b06994374fcc0ae087ffec67023540d07
- MD5 fb6a0cc1783006f348cd29dc0a8b55a5
- SHA1 f9b8902978834e5777930de80335bd64b6ea8c4e
- SHA512 45b18f577f338bc7481696c4fe9fd59976dde053ad50161462344fda16352d7edd01cbd87ffe40467cd0b342a97c6543abbb007abcbe14348da1d6ba4a4e214f
- SSDEEP 384:0UC6n9kTyme4yf7mdi2u7Vgd6egLQ2N2dhLGqWAlLNdzuK:nCY9kQB6Ruid6egjNDmp
- TLSH
  T15803933684091432C74F44AC4E4290237B5BBD271A4A7978F9EC82E93F8C67A45F6F9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

executionpersistence

behavioral20

executionpersistence

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy