ee97786ea62efe794604d8ce87f0917f8f3faed8a7fe08c8774754ffcb18cb4f | Triage™

Login
Reports

Overview

overview

3

Static

static

3

dist/Templ...per.py

windows10-2004-x64

3

dist/Templ...per.py

windows11-ltsc_2024-x64

3

dist/Templ...ker.py

windows10-2004-x64

3

dist/Templ...ker.py

windows11-ltsc_2024-x64

3

dist/Templ...ner.py

windows10-2004-x64

3

dist/Templ...ner.py

windows11-ltsc_2024-x64

3

dist/Templ...gen.py

windows10-2004-x64

3

dist/Templ...gen.py

windows11-ltsc_2024-x64

3

dist/Templ...mer.py

windows10-2004-x64

3

dist/Templ...mer.py

windows11-ltsc_2024-x64

3

dist/Templ...mod.py

windows10-2004-x64

3

dist/Templ...mod.py

windows11-ltsc_2024-x64

3

dist/Templ...kie.py

windows10-2004-x64

3

dist/Templ...kie.py

windows11-ltsc_2024-x64

3

dist/Templ...mod.py

windows10-2004-x64

3

dist/Templ...mod.py

windows11-ltsc_2024-x64

3

dist/builder.py

windows10-2004-x64

3

dist/builder.py

windows11-ltsc_2024-x64

3

dist/pyarm...t__.py

windows10-2004-x64

3

dist/pyarm...t__.py

windows11-ltsc_2024-x64

3

dist/pyarm...11.pyc

windows10-2004-x64

3

dist/pyarm...11.pyc

windows11-ltsc_2024-x64

3

dist/pyarm...me.dll

windows10-2004-x64

1

dist/pyarm...me.dll

windows11-ltsc_2024-x64

1

setup.py

windows10-2004-x64

3

setup.py

windows11-ltsc_2024-x64

3

start.bat

windows10-2004-x64

3

start.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
builder.rar
Size 267KB
Sample260718-ybvvdaa12m
SHA256 ee97786ea62efe794604d8ce87f0917f8f3faed8a7fe08c8774754ffcb18cb4f
MD5 f57fa732c7b01c2f89a394faeb03f305
SHA1 e09c2b44be7265f025501a9fe90df21826e26a75
SHA512 6f05add342ca9144d092b5a16603b10448aa482db56bf42fe41d17493a666f84ebe2d778607fd8f6bc8846744d116794deb97eb2e6852d2aa0c8bd63a2678e31
SSDEEP 6144:osr/pJkGJHVgKfYx+YWV1zqUX9iMTmfNacZo:1rxJkG7oAY4zVihVdo
TLSH
T1194423F608A844B1EA3B95507B5ADBC15E60FB3B944E83217E13C477BD173E1646ECA0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

dist/Templates/Discord/Sniper.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

dist/Templates/Discord/Sniper.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

dist/Templates/Discord/checker.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

dist/Templates/Discord/checker.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

dist/Templates/Discord/joiner.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

dist/Templates/Discord/joiner.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

dist/Templates/Discord/nitro gen.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

dist/Templates/Discord/nitro gen.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

dist/Templates/Discord/spammer.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

dist/Templates/Discord/spammer.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

dist/Templates/Minecraft/Hack/mod.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

dist/Templates/Minecraft/Hack/mod.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

dist/Templates/Roblox/Cookie.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

dist/Templates/Roblox/Cookie.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

dist/Templates/Roblox/mod.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

dist/Templates/Roblox/mod.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

dist/builder.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

dist/builder.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

dist/pyarmor_runtime_000000/__init__.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

dist/pyarmor_runtime_000000/__init__.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

dist/pyarmor_runtime_000000/__pycache__/__init__.cpython-311.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

dist/pyarmor_runtime_000000/__pycache__/__init__.cpython-311.pyc

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

dist/pyarmor_runtime_000000/pyarmor_runtime.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

dist/pyarmor_runtime_000000/pyarmor_runtime.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

setup.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

setup.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

start.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

start.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  dist/Templates/Discord/Sniper.py
- Size 3KB
- SHA256 6c9691c1317a73c587c73441759c4a2dd744ec32b865822ce6e973bb6c5522d6
- MD5 ed57e5b696761ed4b7fcdf776018ef62
- SHA1 0141503cf13d37380e1275538d81b3933da1a4e4
- SHA512 c5b760d97eed70c5e491ff72aa00e306ce29fc4d23217118dc733ebb72b742f650c5d9e994232e0df32db7bdb38c2bf0eb2c50d76be9c1abde458099a13ea427
- TLSH
  T1928140D10C010528427A5A5FEE03E1A6F705423B86367036BFDC85ED9FB61A84AF5EF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  dist/Templates/Discord/checker.py
- Size 4KB
- SHA256 468aefdec02e3f8c372dc75464e65911cb252e3ea658e2c4a8cf7db4e53f9479
- MD5 8b4bfaed66d05d7968604666c84490ea
- SHA1 e4369948b8ef7d3a3fdd960df930b0af73014ccb
- SHA512 e6d9f90f2d84bd311b5aad6c8dc3ddf2946d1648f8963bf3aa61b9dc748598366f269cdbd023127bd2175b3ef33ae4a2c45543d9fc7d70640b7051640bcd29cb
- SSDEEP 96:ACNw98Crs1dh1EBSBq/Puu9CkZvtM+zyvMe4BBZ2bBTXzZgzJIaJAyxun:AoUe4O0GyvZiMe8SbBTXzZgzJI4Akun
- TLSH
  T18E9144E10C42141042378ADEFE03E0ABF185427B4775642B7FDC86E51FF54E049EAAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  dist/Templates/Discord/joiner.py
- Size 2KB
- SHA256 6336415a75dac6d6974b7333a2f35fb5e9ce3031e57ac4f2a4c68b3eb2bacee9
- MD5 373a150e33862a412003fe2d7730be26
- SHA1 2dad536542d7028c1d0eb6d8461a4da5f5f6babd
- SHA512 f7bd1ff311d405c77d2914f525c9623cb18513fdfd112d4e35c5c6d35dd019e54ff5f8c78eb03e56a203e75727baf82f627fac72fa69600bcc0a4ad6ee55c21a
- TLSH
  T1305120911C020129413662FD6D03E0D9F254413BD671707ABEDC42BE6F761E44AB4F98
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  dist/Templates/Discord/nitro gen.py
- Size 2KB
- SHA256 bda48ba5af2b581ada5e8b03574fcc15734363d99b9c6e6db541885477ef1690
- MD5 baacbc636b895b8bd9f55b6a9ba01d7b
- SHA1 b52b0bfb2e225043d12de7a107c96b2a286967c8
- SHA512 f06832d4e6bdee72055aae46a942fb19bd47e3bbc7c84d9ea1c92ebc1f3275f7551aeb9a764c35a92ebc965e51bfe30c4afdcfcff4b94a2c3afbc9a53e38e367
- TLSH
  T19F41CBE11C010519023707AFA802F199FB224227973578BDBFDCC1BA8F361C48A65EF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  dist/Templates/Discord/spammer.py
- Size 2KB
- SHA256 adccb990eb8700001a5e918b46c0a7ddd1ab01b3dfa3603c6bf284c4041f6a28
- MD5 c30d92ed0b3db1b0139d55803c1ca36e
- SHA1 810b62af4cd7dbdd9cda3f9a976f548c8e3cc339
- SHA512 9ff8824d29e9006116549bf927d3caf2ecfabf31ccb691bfde59f7bd3a20a7b7921046e995e14f4150e8556760e472aebbf92f52063cae8cebfc6a9ad2ffcdb0
- TLSH
  T1F85102524C11022E063A27EEAD47D095F654813B9A71703ABECC46FD5F376A00EB8F68
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  dist/Templates/Minecraft/Hack/mod.py
- Size 2KB
- SHA256 cf504dd6a3f60550c770025d9bbcea568f1536d8c83ef98037989345e62f4dd0
- MD5 638d046fced81b388fcaad3e41536024
- SHA1 80e7319a17df1d5b244ac7b144d9ca8127e94609
- SHA512 0fe22e01350e61daf38b52b25d6d84dac44f7764284773cbbe5bb9101887ee4c522647dcc59ceeb3a25067197e7ba3f7265c15309f958d896a363b1c3a37f2de
- TLSH
  T17C51BB724C050110BB3BD5AC1D029054F198733BB62A11A6FEFC792EDBFE5E040B4A79
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  dist/Templates/Roblox/Cookie.py
- Size 1KB
- SHA256 1916bd1ff84842ce2baba983cf98154af39259e3bd3f231b81c22a89bfc31a74
- MD5 215ed352f6c513697210c4945a36f296
- SHA1 26d4b5b23e8be660bab32b84fc6eccf14cba6dd0
- SHA512 fc2a7c687244e77eacf24999197f8c7712621fc8638d53cb0abfd3e624f752539d1ba2a111b291415044a9d60c34db76def0ecbe78cacd2c60fb0d902123b994
- TLSH
  T18831E1D25C1111194236F3FA3807F18DF6604113D7A020BABFEC86BE4B321C54A3CE95
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  dist/Templates/Roblox/mod.py
- Size 2KB
- SHA256 f7aac142396f509e8dc8fac169842bd0202f9aa81da6b18d2256e985847a4fcb
- MD5 61d90e4e5a21abb16a5d89a52be58eeb
- SHA1 cb768bb77fb9059f2e0f7172ecf58190eb60acba
- SHA512 39561432987e06f7768006e84c588bf14a535de206d26999586df623d94033338cbc227aa6e1a4b4e7e4e6e827fa61a805d39498a521a0f2a644535de44e15fc
- TLSH
  T1A84133520C491125873B5ABC5D02E044F229833F96312476BEFC467E6FB37A58578F6D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  dist/builder.py
- Size 142KB
- SHA256 c81734cbde54c2181f30bdeac0512e08c131687c3cecb753864ccdb41eb827e1
- MD5 04c53c42d5fd174373e34d094f26ab91
- SHA1 533d7ec7f9de8e707e5254a7b3d4dfaea52e650a
- SHA512 007ae6c5168edf0f216b62c37cd2e669f8afa9f6d1c1779a60f856aeb494c6196dbe1f6499120a2da3631e4d804a1b5dfd52fed1d779359162120be957bbf508
- SSDEEP 3072:SOw+3ktslTl+7KgmnOyQfuglKEFjrGJCLqekIUj62CURoK8XLDlMgk7QG:ZnhnIfuKKEFjaReLg4OBUBMR5
- TLSH
  T144E3B7855622E13E5B97CA182F43AEDC2869D9EFC5C9E701F0C41A4FE0A873C94E57C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  dist/pyarmor_runtime_000000/__init__.py
- Size 103B
- SHA256 f2e9404218f4614b549051c363df43b34a6d207fefbe776dc2ee71f4e669c758
- MD5 ec439a127b1d4e299671d81913e3a3cb
- SHA1 fde3d73e05f5630149bedc6e1db5bf5b7695ec3c
- SHA512 1a37d89c959398e364ead0964872242615708beeeb334773930d3c095779bc5115096a92f1711ffea0bf03911d2e0d402dc8f3b6e42d8f15df84c3aaaae1c4e2
- TLSH
  T139B0125505363EC3923861D2C265503C437A74822F8204B41EB421B047C2929EF44211
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  dist/pyarmor_runtime_000000/__pycache__/__init__.cpython-311.pyc
- Size 244B
- SHA256 5c73aac540aed66112b69215bb2eee8e48e8332c53bff4e4b399885c93be050a
- MD5 b74a42dea5e584ec61cb681ed755d01a
- SHA1 420d337313ac75c1f54a199c333349d7680da544
- SHA512 535ef850600334ab5690541eb135feb8cba34918da2c07257978cf73c8f108488bed836732d92ad5b0169de634053f2182ea7fcf6c28cdc6cbcbaf5bf1c58e35
- TLSH
  T1AED0A7817A42560BDCB5517A422173B862E4FD96BDD240421D0C527176FD1114D50D85
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  dist/pyarmor_runtime_000000/pyarmor_runtime.pyd
- Size 617KB
- SHA256 c5561d9d7321e0c0693d16995949e6e28d7ef583276f326004a5ec632317018a
- MD5 883941001f1be7627fb3e0cee1616c70
- SHA1 89d9ed2bea9c72ee6ad4b3a042071c8bf2823319
- SHA512 3ce9a67eb17307f54fd665dc63d17666556d63fadd33d50d5f7777235709c81fb964b81ae78bcc6e1eaf1a08eaacd6244bc17210a240ef310e74811b815b933f
- SSDEEP 12288:UqbfkjxXKxPctjdcg7fUoPOuKz4CnEkpMc:rdctjdcg7fUoPOuKz4CnFK
- TLSH
  T136D4194BE1FA15D0E6B6E17C078FF2337C3ABA588160B75B355CD3A127D0A5212E5B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  setup.py
- Size 83B
- SHA256 672683298dd6138f1a54a9798cecf8d4d969e5dbd6ee3342162be90733b83b45
- MD5 ffdbf3e33423763b4c9f52fd365524d4
- SHA1 e92166f09162b532ceaed711d1b8019784e0eed4
- SHA512 c3774a37ccfa51e49407d48a6662455170c7ad4dae756fc300fa57e2f27a42d057f2f942ad09eced24f4b1b61d0d21b31d8265ea612db010e0613cdb313fd4cc
- TLSH
  T1F4A0122A821E03206AC48490100446564FE145109242182A61555380855F429D40991D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  start.bat
- Size 243B
- SHA256 4768de57e64ad42ca48c310ea41bfe6e41b4116356a60b9ae12c1bba17fa6477
- MD5 434ebd44f7daee030c6ec51893a9917b
- SHA1 8058628bc587c5c3bc26b6021a0f4b28db369ca1
- SHA512 8a724fd5936ba71571cfb5798251c71a0298ec2d3ff7917fc2ac8f35c85387205823956b6a0ad3074b8f4fcc334979294e3980aba869f3eb5510e673232ae9fb
- TLSH
  T100D09702D44AC00A68A28E17030E7B99A60382C3B3C1B2FE307818305C1BDA01499232
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

© 2018-2026

Terms | Privacy