1c0081d25486b9f90562809f917a840964219deb1300bf5356e9acc62c140bc3 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

чит.exe

windows10-2004-x64

3

чит.exe

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$TEMP/Dialog/7za.dll

windows10-2004-x64

3

$TEMP/Dialog/7za.dll

windows11-ltsc_2024-x64

3

js/Def.js

windows10-2004-x64

3

js/Def.js

windows11-ltsc_2024-x64

3

js/bramus/...ler.js

windows10-2004-x64

3

js/bramus/...ler.js

windows11-ltsc_2024-x64

3

js/prototy...ype.js

windows10-2004-x64

3

js/prototy...ype.js

windows11-ltsc_2024-x64

3

lic.html

windows10-2004-x64

3

lic.html

windows11-ltsc_2024-x64

3

page-reg.html

windows10-2004-x64

3

page-reg.html

windows11-ltsc_2024-x64

3

page.html

windows10-2004-x64

3

page.html

windows11-ltsc_2024-x64

3

page2.html

windows10-2004-x64

3

page2.html

windows11-ltsc_2024-x64

3

page3.html

windows10-2004-x64

3

page3.html

windows11-ltsc_2024-x64

3

page4.html

windows10-2004-x64

3

page4.html

windows11-ltsc_2024-x64

3

page5.html

windows10-2004-x64

3

page5.html

windows11-ltsc_2024-x64

3

$TEMP/Dialog/sfx7.dll

windows10-2004-x64

3

$TEMP/Dialog/sfx7.dll

windows11-ltsc_2024-x64

3

/...EK.dll

windows10-2004-x64

3

/...EK.dll

windows11-ltsc_2024-x64

3

/...EK.dll

windows10-2004-x64

3

/...EK.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
128_549_cheat.rar
Size 1.8MB
Sample260719-pgj6dsdv31
SHA256 1c0081d25486b9f90562809f917a840964219deb1300bf5356e9acc62c140bc3
MD5 f2bf5401d0a26d7c661e48165f550e29
SHA1 9b9551d7852ec81310af9259590f21cd0723540d
SHA512 88ed35db8be2180087e90aff43a508b8b86336b37440f34c73135af7a61ba93492c314aa0e3ef4ee9e79b929d58a5aab505fb87d1b6cd99bb5f100d97aed88c9
SSDEEP 49152:zKHqQ6FsXLimtDlGNYRY8D3ULHCP5s1vmNMWdvk:zOosXLimRl+S3ULHCPW1+NMavk
TLSH
T10F9533BF9196ABFBDAE30B765CF4C0BF4AE41856718397BBA3189E2351512C18FD0181
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution installer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

чит.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

чит.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$TEMP/Dialog/7za.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

$TEMP/Dialog/7za.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

js/Def.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

js/Def.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

js/bramus/jsProgressBarHandler.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

js/bramus/jsProgressBarHandler.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

js/prototype/prototype.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

js/prototype/prototype.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

lic.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral14

Sample

lic.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral15

Sample

page-reg.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral16

Sample

page-reg.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral17

Sample

page.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral18

Sample

page.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral19

Sample

page2.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral20

Sample

page2.html

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

page3.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

page3.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

page4.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

page4.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral25

Sample

page5.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

page5.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral27

Sample

$TEMP/Dialog/sfx7.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

$TEMP/Dialog/sfx7.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

/wallhack  crossfire/wh by hoEK.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

/wallhack  crossfire/wh by hoEK.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

/wallhack  point blank/wh by hoEK.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

/wallhack  point blank/wh by hoEK.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  чит.exe
- Size 1.8MB
- SHA256 f3d1547a35ea57b12315024215a6d17354bf892cb686139e7085c52a03e21a52
- MD5 528a292a0152cf228196b386d97db274
- SHA1 544b84a6029a8e207ec56dab3423eac35caa628e
- SHA512 4cb4a21c76a12e482b2d6538dd80ce60a9fba65ee4075e7517b2bb17fbec6a4ea5354f98f998f8e38fa77604f5929f8cd75b0aec348f1eaa9ad9ea49e4df14d1
- SSDEEP 49152:bKHqQ6FsXLimtDlGNYRY8D3ULHCP5s1vmNMWdvX:bOosXLimRl+S3ULHCPW1+NMavX
- TLSH
  T1179533BF9196ABFBDAE30B765CF4C0BF4AE41856718397BBA3189E2351512C18FD0181
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH
  T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $TEMP/Dialog/7za.dll
- Size 278KB
- SHA256 4406dc1789f1ebdbfebb7796719d21dcce2250f3a0a07f204cfd0b4f93725f6c
- MD5 17bddadca7044cc7b8406f1ca45210df
- SHA1 d74c5236542f4ddbb50cd113dedcd05aa9861ca9
- SHA512 1abf4e41912e18b77f7e0ea7ce98e0a5760a554cf79c78dd8ccaf04589fc02579b0fbb5a822acf2d098c2362b778821b1e5e870a55cba5834566a723c0716d50
- SSDEEP 6144:fjwzo8zXF7mDiXslRbsvDv8vD9JT2p3n:fPwXFUJsrv8vD9Qn
- TLSH
  T19754AF1237A680B5DA8B2531D61DB7B761F4E2988960D483BBD0DD9E1D33897C239F4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  js/Def.js
- Size 44KB
- SHA256 1937075fb5cee54919586ff4d3ca2ee75743a813f17b58a157bceb41d323ec6a
- MD5 d6fe860d795e88c3e18d2d8400ec03b5
- SHA1 6b3139f7ed2e6f2fff8332a942250e131c3fcb28
- SHA512 793ba13ef826756b9dce9dbb9978df706d3508db5bec0c9f3dae574c6d1a600accab7bfe3bbefb3a5afa3e5ed0a95e2a30b65ad87d31cd5604282a9727017816
- SSDEEP 384:VNyOT5QpBeOXfbe2ksayfYV0klLm0MBBXPBZ7ucmghfykyQyWyWybyMGU0xt05TJ:q90lMns7fRR+hxt05TpoXvsFrIpOUu
- TLSH
  T181139F6014C2401CDA80F3B9E577279D38C2D554F606EEB27EA8D3A7D8307E3A992797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  js/bramus/jsProgressBarHandler.js
- Size 16KB
- SHA256 4813097268069b0ae264e9df7cd55fa70a526cbc06a308faec961f726aac3cb9
- MD5 00b4375d22a8c9391371e8a773e0dbce
- SHA1 51e51f7a2f2b0ecbb57e87b345021f9fd54b6d4e
- SHA512 8c75f81099b6fc2f362c943b47bb2c9e03a136405319908452ad13917acbeb9c421ffa73713c2cb27c0edd4a5de90da15bc8988d85b80b71017ef057e18e8955
- SSDEEP 192:AIVIezvnshIUuL0AY987aXxwrqP7owBJX2vNi140SGKIC0kkhgcwBxNsew+2GWJa:AyxjMnuL0AY9D4IC3X9AXSTB5thR2jqN
- TLSH
  T1917252E6BF4F1A3E0466EA91703D40F4EB3CC578C11652DC7ABDA4ADE398A50017E9B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  js/prototype/prototype.js
- Size 123KB
- SHA256 e9cca17c4320baac34e9ea5a41357ae0baffdd1beed813c2ef1f82d1179e9868
- MD5 d3a5b20d5368c1bcabe655b57b52d097
- SHA1 015cf89260f3e8f0b86f5a17558125c933692989
- SHA512 1fd0889623b195a6faf905a2a662fc08173e76ac9490e2aaf9a96390f2184d71c1d5f29c61553bab34a3ea4626226fbd9eba4a2085afb5994290c31fb87a68c0
- SSDEEP 3072:SS/nOTQx4FbsxP8MlI9Q+lVxjC11/NrM3m:TnOsx4F+z
- TLSH
  T16BC31D8C7DE37029461BF13E6A9F414CF279440B5409ED51B8AC86E46FA0D2852FEEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  lic.html
- Size 20KB
- SHA256 489a88d884a053e71ed02eee9ec2e3f957fa4399386a33734101e06165ee0000
- MD5 2704a9728df8134789895e24303ea53e
- SHA1 456ae3a475647d8192a420c6bbb4b97bb117a0b6
- SHA512 4d0a03bccd75e534eb6afe6deaacad7f6ae18a48bd5511abefe30a3b0523dd3748680c37267382ffeb78c007c810c54f904eb6d5b2e8d97ad04428192911bf4b
- SSDEEP 384:Q8RrJxSHY6iwYORNA/M3OgQZ6H3pgQZ6bT:hRrJlORW/M3OhZ6H3phZ6/
- TLSH
  T1989216F101EA69969314A40BDA04FF0E78AA50FE3F7A436631642D7F34E3065862F75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  page-reg.html
- Size 2KB
- SHA256 cd30eb54158378cfabbf8523fa9f530b06c6d80829335c9f017da86fce3a5987
- MD5 64cb2c566ddb4ed327e02812d897b7b4
- SHA1 5a2fa0af459c19c99f1b71246865e2e0df42651f
- SHA512 733b305c0e3bd187a0fa2397b7d4de380651231cb2bc20e7434b2e5ce19e8cbcce520b85578afe505db85b4e80a56881f22c8eff0317e4415478851dc230195d
- TLSH
  T1834122307D56981AC36745B2F3B29B97BD65800903221BD1F5551ABFFAEAC2903A63CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  page.html
- Size 2KB
- SHA256 b228946d3c5257161be9087d90eb8dfce0645e02f78f5bb76a8612b75dfd6db2
- MD5 624056062a0b54feb28ce11febe2bba5
- SHA1 d0aaffc0ea4cd01800e196b8d5e93c20819318e1
- SHA512 cbfd684f6039a9fe4539422f6a3b1314053e407afc128b0cb4a81853661478c47f36f9e613bf2aa23b54f706d380ea1a190cf7963c4c285596ff24a7c2d29cbb
- TLSH
  T1ED4165307D56941B83130553BBB19B8ABDAD401A13321791B5522AFFF6EAC3C43A93CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  page2.html
- Size 2KB
- SHA256 63365f37a6fa573d7d3918ec3f621e7475b10e54829cdc93893cb72f61ed04e6
- MD5 a6a52acdf1ddfda14bb79658f1fc98c3
- SHA1 0a24c1ca922b226004bd22c1e3544fd84c2cad79
- SHA512 3cced58a19892f6be41def9d69efb8778aa11d5c4be349b0a9da0fec0e547cfcb33038b95aac8c0140a21ab1d5bfe547e8d6cd8fea4925b9766dd31863a3cbd4
- TLSH
  T1E74141317C46980BC3574971B3B29ACABD658009432216A4B55219BBF9DAC2D43AA7CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  page3.html
- Size 2KB
- SHA256 4404427ba3362d67a9512f3ab110c2ba9e734d6a9c909f9b5e9f277e5e064e03
- MD5 b8ad209216c7eb9b943d584a0aa302b7
- SHA1 7246993bae4c796bb5414ebff476dd308fcd1da2
- SHA512 81f5afac9f678ac8b781653015e6410d7b161f70f3937e1bdd6a8ca4172c3ccc8a47b3c50a7e60f4e6c8f1e42bb5059ba52f8105371f982ac9cab91cdc89f7df
- TLSH
  T16D4124307C55DC1BD357092173B29F8ABC29804A13621AD5B55219BFF9E6C38436B3DC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  page4.html
- Size 2KB
- SHA256 95956b88c900e5b8f5f3d7898fc7d6e2e847c8dbbdab7893464253ced03c8985
- MD5 6243b1b15acc8b8650e6fdcc36db8c03
- SHA1 a65b48935379289a5e0a35b72b933282b4df8f2c
- SHA512 f9fdcca13a16bff4e6801290e75d448d05e8f6c01bbf8ad6e675e3386be26da1d44ec82e1ee15ccbe83a6609c42a1f8b6753ef525df11d76a2c8d62291cbb0b4
- TLSH
  T1A4515430FD06D42BC36349A1B3B29A9EEE189005432386D1F5A115FBFBE5D2C07963C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  page5.html
- Size 2KB
- SHA256 43445bfea24d24f7594077ceaca0df1983245898dc447b55c664e29a77ff2456
- MD5 5d2275d70fa599f4cf46e255017fe221
- SHA1 c267da32bd8ddf2640cdd537b98459342cb439d1
- SHA512 98e7195c98ca74a0b653bf309ab9bfc6182bfdd6fb445a939e9b48cca9e078c10d9831a29f803d754fab438a63a86acb3e5436bd8ed6318c9cabc3fbbd4ca9c3
- TLSH
  T1C45185317C5A982B835B85A1B7B15FCBFC29800A432216D1F4552EBBF5D9C3843AA7CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  $TEMP/Dialog/sfx7.dll
- Size 2.6MB
- SHA256 560f441e4505e53833da3e35c58b1dd54838499b826dde2e464a91544b35d7d0
- MD5 60ad31846ac04692b5a711a3b6f54b2c
- SHA1 3de780e6ee694918e4e5779ac5667f43c707816a
- SHA512 acc76609086df81f1d4121c37fdaea7ab10aa963c58a82a5673d1eb0e2888706a56b8195f8e018228c8f0e7c93a1e3025e671301eca0014d5081b99d6039185b
- SSDEEP 49152:OIyxyBSx6ydDR5EkSmhCilIQ4TiSST0TygmuxDl:OrRdPXhNIQ4TiSjHN
- TLSH
  T103C56C13A241163BC4372E35082B9354BC3EBBA02A259C875FB42DBD1F79782793A757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  /wallhack  crossfire/wh by hoEK.dll
- Size 168KB
- SHA256 f806eaaf25b81742947737b02616d7a13cbf3807ee8039bdc35debfded4c324d
- MD5 f2cf599d43a6895dfd159d9dbe69491e
- SHA1 7363e35a113260d0c24cc67bc4e9fa03c54689b6
- SHA512 c6852ac1f79945577ab50fe28e754a42d9b0363f20801fbe32e3241f66fb81b3c3b5cb2230a78484107870bd0f0fe819d58c01560d4683055c426549322fe696
- SSDEEP 3072:xahxQOI1QpuKBcXRMa+tcKLnz3aYa8/Q4XzElCanO:iMQpGXRMa+eYz3rbj3CO
- TLSH
  T1EAF35C936041DE3FD70B427CA8DFE3034E1D511017BAE2CB6A656CD096B69C3AB39B85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  /wallhack  point blank/wh by hoEK.dll
- Size 168KB
- SHA256 f806eaaf25b81742947737b02616d7a13cbf3807ee8039bdc35debfded4c324d
- MD5 f2cf599d43a6895dfd159d9dbe69491e
- SHA1 7363e35a113260d0c24cc67bc4e9fa03c54689b6
- SHA512 c6852ac1f79945577ab50fe28e754a42d9b0363f20801fbe32e3241f66fb81b3c3b5cb2230a78484107870bd0f0fe819d58c01560d4683055c426549322fe696
- SSDEEP 3072:xahxQOI1QpuKBcXRMa+tcKLnz3aYa8/Q4XzElCanO:iMQpGXRMa+eYz3rbj3CO
- TLSH
  T1EAF35C936041DE3FD70B427CA8DFE3034E1D511017BAE2CB6A656CD096B69C3AB39B85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy