2ac703f0356ba859567b53faac5451f5815315726f25ee339458d0d89013b2d7 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

THUKUNA Nomad.zip

windows10-2004-x64

1

THUKUNA Nomad.zip

windows11-ltsc_2024-x64

1

THUKUNA No...b.json

windows10-2004-x64

3

THUKUNA No...b.json

windows11-ltsc_2024-x64

3

THUKUNA No...e.json

windows10-2004-x64

3

THUKUNA No...e.json

windows11-ltsc_2024-x64

3

THUKUNA No...h.json

windows10-2004-x64

3

THUKUNA No...h.json

windows11-ltsc_2024-x64

3

THUKUNA No...ad.dll

windows10-2004-x64

1

THUKUNA No...ad.dll

windows11-ltsc_2024-x64

1

THUKUNA No...e.json

windows10-2004-x64

3

THUKUNA No...e.json

windows11-ltsc_2024-x64

3

THUKUNA No...e.json

windows10-2004-x64

3

THUKUNA No...e.json

windows11-ltsc_2024-x64

3

THUKUNA No...bundle

windows10-2004-x64

3

THUKUNA No...bundle

windows11-ltsc_2024-x64

3

THUKUNA No...d.hash

windows10-2004-x64

3

THUKUNA No...d.hash

windows11-ltsc_2024-x64

3

THUKUNA No...d.json

windows10-2004-x64

3

THUKUNA No...d.json

windows11-ltsc_2024-x64

3

THUKUNA No...t.json

windows10-2004-x64

3

THUKUNA No...t.json

windows11-ltsc_2024-x64

3

THUKUNA No...bundle

windows10-2004-x64

3

THUKUNA No...bundle

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
THUKUNA Nomad.zip
Size 160KB
Sample260719-drfeeadv51
SHA256 2ac703f0356ba859567b53faac5451f5815315726f25ee339458d0d89013b2d7
MD5 726001c074a198f389f7407ac98a8ded
SHA1 d479382bcffdf97b390e8b83bb258fd1e52d3bc9
SHA512 d773a6765775958f76564f60ccf2e84469794755d141195414fef3cc528a84fd3701a9386ffe7e0cd532648eed49044372195f27681b8ad316b9eaac295e2e4b
SSDEEP 3072:YdxIsJpynjxAmasDi+Y/uFMEXbgECbdVeNvDQ6qMx9RhWINWm1Q0cDSl0WtLp:Yg9xAUY/unXbgECRqk6qMx9RhlNWmDAK
TLSH
T19EF31226E91BB0B4CD1645B0CB3CF62EA32163D527B33D5B8EC900132D4CEEA9AD5974
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

THUKUNA Nomad.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

THUKUNA Nomad.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

THUKUNA Nomad/Effects/Effect_ShrineNomadSpellOrb.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

THUKUNA Nomad/Effects/Effect_ShrineNomadSpellOrb.json

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

THUKUNA Nomad/Items/Item_ShrineNomadDismantleSingle.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

THUKUNA Nomad/Items/Item_ShrineNomadDismantleSingle.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

THUKUNA Nomad/Items/Item_ShrineNomadDismantleSlash.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

THUKUNA Nomad/Items/Item_ShrineNomadDismantleSlash.json

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

THUKUNA Nomad/ShrineNomad.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

THUKUNA Nomad/ShrineNomad.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

THUKUNA Nomad/Skills/Skill_ShrineNomadRuntime.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

THUKUNA Nomad/Skills/Skill_ShrineNomadRuntime.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

THUKUNA Nomad/Spells/Spell_Shrine.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

THUKUNA Nomad/Spells/Spell_Shrine.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

THUKUNA Nomad/THUKUNA Nomad_unitybuiltinshaders.bundle

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

THUKUNA Nomad/THUKUNA Nomad_unitybuiltinshaders.bundle

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

THUKUNA Nomad/catalog_THUKUNA Nomad.hash

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

THUKUNA Nomad/catalog_THUKUNA Nomad.hash

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

THUKUNA Nomad/catalog_THUKUNA Nomad.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

THUKUNA Nomad/catalog_THUKUNA Nomad.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

THUKUNA Nomad/manifest.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

THUKUNA Nomad/manifest.json

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

THUKUNA Nomad/shrinenomad_assets_all.bundle

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

THUKUNA Nomad/shrinenomad_assets_all.bundle

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  THUKUNA Nomad.zip
- Size 160KB
- SHA256 2ac703f0356ba859567b53faac5451f5815315726f25ee339458d0d89013b2d7
- MD5 726001c074a198f389f7407ac98a8ded
- SHA1 d479382bcffdf97b390e8b83bb258fd1e52d3bc9
- SHA512 d773a6765775958f76564f60ccf2e84469794755d141195414fef3cc528a84fd3701a9386ffe7e0cd532648eed49044372195f27681b8ad316b9eaac295e2e4b
- SSDEEP 3072:YdxIsJpynjxAmasDi+Y/uFMEXbgECbdVeNvDQ6qMx9RhWINWm1Q0cDSl0WtLp:Yg9xAUY/unXbgECRqk6qMx9RhlNWmDAK
- TLSH
  T19EF31226E91BB0B4CD1645B0CB3CF62EA32163D527B33D5B8EC900132D4CEEA9AD5974
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  THUKUNA Nomad/Effects/Effect_ShrineNomadSpellOrb.json
- Size 3KB
- SHA256 6b04b37bdc64b42a4713feb725a8ed2e90a35738b8f33064f82d198132267c57
- MD5 1e897755389a612a075d3f371dbe39a0
- SHA1 873d6a93b6c74f3c231864461f6654c08b724d8c
- SHA512 4f6266f454ee5251d8f84cdcbcc2fcfe89a385167e85509d34a876d12ee9b635f1163aa4875199a6d3a22b4f4c3cc2b52ef1de4bb055176b946fa3d5cd249e3b
- TLSH
  T1B761B96BC9710C43B9825D3A24B806422A74818B4DD77C00BF8C998C4F9F99FE57879F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  THUKUNA Nomad/Items/Item_ShrineNomadDismantleSingle.json
- Size 4KB
- SHA256 90409b4a1ba430e0ec875cd261536649558992827c345932951508974b549fbd
- MD5 4cc0ce0ff364abbc8c32515160c2dec7
- SHA1 4deb6488c65ed873bb61dac1363196601868beca
- SHA512 5c25b62e5b57c4f4a7e4329507fc72a4b82132488252a59eb4672874175f79a6cc7a438fa14dbefec58b16cad19d5eb9d74396e271ad7dfbc60fa30b78584667
- SSDEEP 96:FD9lOCjk3pFIQqVLSAcAcCvUA1AcC9ZEtTASAcCbXYr:FaCjGFFqVLSAX8Zsjce
- TLSH
  T111A1DE7BDA654C2366C01B7664AC418216608E5B4E627C043F8FC62C1F6EC5FE87178F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  THUKUNA Nomad/Items/Item_ShrineNomadDismantleSlash.json
- Size 4KB
- SHA256 6ac958f6b6bcd7ab0bb251c4429c15d8d53b92ee859fc165d178fd03b45cb20e
- MD5 264edddf55d994cd2a87946595a9cbd5
- SHA1 283759c3fc42e175b5d1d4bfae5bdf3ac56b655b
- SHA512 abf4a65c79fa9eeec114dce9defbbda1999e4af8e3b5351771a68d46a8da8f16e19d1ea43945b17be8d460c0333ad494e8e46d48882c55b2a53e67e919c26ea5
- SSDEEP 96:gc9l8Cjk3UFIQqVLSAcAcCvUA1AcC9ZEtTASAcCxcfr:g3CjFFFqVLSAX8Zsj0U
- TLSH
  T1B8A1DE7BDA654C1325C01A6664AC51821A608E9B4E627C043F8FC62C1F6E99FE874B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  THUKUNA Nomad/ShrineNomad.dll
- Size 51KB
- SHA256 ee3e695ac428cefbc48d1bf3eee148be17f8eac846f1814646f0131f80462630
- MD5 7099a019fa58d8c5855b59dd04a4b8e3
- SHA1 d3bd8b2167facf568d7fd651c070f6d623014944
- SHA512 2d4d47674f20c4c5b8373bad6d66008d9e2c59e3d6f6c79a64d4efa829f47f31263f87dfc0a7a7b69d2bc3596f9890189e7875a25bde87515ade9a2d949a3c96
- SSDEEP 1536:oGA+51eQzkOPj6k9o5b7yeXlIr6aYV1004U1ew8L08:oGA+bPjp9od7DXYYV58
- TLSH
  T1A633085867DC9A2AE9FF1F7A49B1241093B5A523E512F3480ED1E4EB1E323C19908FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  THUKUNA Nomad/Skills/Skill_ShrineNomadRuntime.json
- Size 1KB
- SHA256 a8213a9d9811e9cea91f17c0cb1abb3a46979e982c164305ca041c992d952313
- MD5 13a8e548f1ef2966d3b3e50ff5a239e0
- SHA1 0553c9aaa6182c08db8fdaf60dae4679c0ded651
- SHA512 7715258c2db72cdf4d7cc4924f2eb6c22d5c1b2fef7c789d444e21c1caff3ae85249c226a198ecf79f14ec54bc80a76f4148dd5b5a8a3f4dbf40b4c8f10f7a1c
- TLSH
  T105310F66010D444326C07EA64CF81A8362949D17D7AA7C1402EF906A53AFB2F50F7F6F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  THUKUNA Nomad/Spells/Spell_Shrine.json
- Size 2KB
- SHA256 4c59a746c5f01fd1059524b822ccc5c7fe422f15be812f56fe1ae46ceb46b051
- MD5 190553efee322b9e27b508bd95eeaab1
- SHA1 c76f833c64573684efd0531b8da84fea7336bc5c
- SHA512 76dd4b00c74080460dd59108b67f282e88554272aeb33fa8c59fe9e2d54b83b2f519757d3dab7e5f76fabea6e37225b03fdd69e2b400dac61f97d6b455d14d4d
- TLSH
  T15851CA13C6044C6632C52E5858FF0B023668DE4B5B467D1868DBDA292B4E76B50FBB8B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  THUKUNA Nomad/THUKUNA Nomad_unitybuiltinshaders.bundle
- Size 20KB
- SHA256 151bb6de4e2e4dc661ff0561f90fe6a8828d3f934e08714d70da42685cd9bb19
- MD5 3924b8ddad84063cbae6bb4a3d259a13
- SHA1 9f0b76d1a12df397c5c85ecea3d61ea7d77e58e8
- SHA512 be856c038e1f1cfd9808152f32e636a38a5be7dd15520c8ce9cb8abb2a653986229f4cf3b6e23eef974465f92cc23bc92193ab41c05723dda7dcd149972370db
- SSDEEP 384:o1CEKkbSTUubEXmR1AbWgMmDCsYzGsuG5aK89UrUpC5AAa8D6y0MRdc8uW:ooqbybEXmR146mDCsg+JX9UrUiRa8m/u
- TLSH
  T17D9206BB517B94EC9040A762908D639A711EC2DEB87DE2FC123FC0575C4182A3B8DC79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  THUKUNA Nomad/catalog_THUKUNA Nomad.hash
- Size 32B
- SHA256 5010e68523b3c296ca61d445f630b05cd9694448e98aaa1cf8329704aba39bb4
- MD5 0802a92e9902c95ed3054e7727130015
- SHA1 feeaa361f421f73f0c1d4b5a205a45c6c1e5f314
- SHA512 c902282b77937b7499702b49e134dba09d9b2c4ba766625f9e0d2d8991e5cccb312d92a4dc8df04690e1d661f1c1b2796784e3dae1509fbde3e39dbd2dbe87d0
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral17 behavioral18
- Target
  THUKUNA Nomad/catalog_THUKUNA Nomad.json
- Size 124KB
- SHA256 abb87239a08e6bcef1b0e54eef9383e1257b555bbc970add24f7acf3598a5145
- MD5 a6fb3522290bb7d9cee6daf7eb52fdf6
- SHA1 c7f8b07ab4a9734ec3576f212b7f7fe0dc95825c
- SHA512 2814f8fd4fb4a4b15159fece738d8f785ee3eab6de05430c61e1649cd9a7f0c5256b7a6b8f845c51da4bf527693f3347763addc4894ba73e688976a20e7920e8
- SSDEEP 1536:JqkIF/PJ2fypSa+QILKnsifWx2hiIc1xRLsFUzM5XdrIzEs2+:aF/PwypSaoYsifva1xRgvdUzi+
- TLSH
  T1A0C34431475BFC6A0E3C1E94902C6AE14EC85E5B6353D059DA602EB970DAC33EF95CB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  THUKUNA Nomad/manifest.json
- Size 164B
- SHA256 c7c27a84a92a4a549487f520f1e03ec1384c1b76921941c12db7a30259bb94b1
- MD5 db28bbd803990a6f11efcaadcf6d80b4
- SHA1 af3a60f68724d20a857827df5d4a28664513d7f9
- SHA512 f1b904954bc01d5080f43a5f6a1a3dcb7d4dd5ee1d38566b5473c42f9ed20b502688fe63e5f50c9260d91228773bd9f1340138f44d4ee425dc222391b6da7628
- TLSH
  T19AC08C36144091A39DB00390A8301106B2A05F5FA1301D0EB87B21011883EF89444320
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  THUKUNA Nomad/shrinenomad_assets_all.bundle
- Size 92KB
- SHA256 46082e08b8bdb879d1cf99a1e8e7ddc83cf9587df9a248c7e0dd83d78430a43e
- MD5 92a4528ec289f44f916624fc5a9dd62a
- SHA1 1dc756662f43e9ff3aef6961b338585abcd31e74
- SHA512 65705b148c8d733d275669f3546b5133e8eeb49a5f97a272b7ca68025b55a3bece45d239994c7c46175ee87a16d60f985ba88c1ed1aa75e8f97d478148aac4c2
- SSDEEP 1536:uEJVqw1HWdjgl3q30H1FqTyiDfxG2wiooB10hnzFJmWXfsp/tmTs:poOHWdyqEH6TrDURi/ShnzH6Os
- TLSH
  T14A93027FA84759A1B80C210170CF53636677CB5BD0AAB23AB5E3C2AF421235DEC31278
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy