1e3c312061a270e67c67cf215cc1640027270bdea66fd2793dd156414992f6d4 | Triage™

Login
Reports

Overview

overview

4

Static

static

1

autorun/do...ch.bat

ubuntu-22.04-amd64

autorun/do...ch.bat

debian-9-armhf

autorun/do...ch.bat

debian-9-mips

autorun/do...ch.bat

debian-9-mipsel

autorun/he...ert.js

ubuntu-22.04-amd64

3

autorun/he...ert.js

debian-9-armhf

4

autorun/he...ert.js

debian-9-mips

autorun/he...ert.js

debian-9-mipsel

autorun/mo...can.js

ubuntu-22.04-amd64

3

autorun/mo...can.js

debian-9-armhf

4

autorun/mo...can.js

debian-9-mips

autorun/mo...can.js

debian-9-mipsel

autorun/mo...pt.bat

ubuntu-22.04-amd64

autorun/mo...pt.bat

debian-9-armhf

autorun/mo...pt.bat

debian-9-mips

autorun/mo...pt.bat

debian-9-mipsel

autorun/ne...tes.js

ubuntu-22.04-amd64

3

autorun/ne...tes.js

debian-9-armhf

4

autorun/ne...tes.js

debian-9-mips

autorun/ne...tes.js

debian-9-mipsel

autorun/patchscan.bat

ubuntu-22.04-amd64

autorun/patchscan.bat

debian-9-armhf

autorun/patchscan.bat

debian-9-mips

autorun/patchscan.bat

debian-9-mipsel

autorun/pseudocode.js

ubuntu-22.04-amd64

3

autorun/pseudocode.js

debian-9-armhf

4

autorun/pseudocode.js

debian-9-mips

autorun/pseudocode.js

debian-9-mipsel

autorun/ps...am.bat

ubuntu-22.04-amd64

autorun/ps...am.bat

debian-9-armhf

autorun/ps...am.bat

debian-9-mips

autorun/ps...am.bat

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

Target
CheatEngineLinux77.zip
Size 19.9MB
Sample260720-dshadsdx2l
SHA256 1e3c312061a270e67c67cf215cc1640027270bdea66fd2793dd156414992f6d4
MD5 f6b4af12d0e73bf051df8b986e05417d
SHA1 faa74abc262e29bf9dedfd0bc67fc4a56e888e46
SHA512 6495e7c3e48ceef4ee79bf1dc8c680428ca387ec5fa1d7903398219fc40e10a0e982b2574a61ca521a6684b526a8629e6929a821034a5df62269b5f25b3732c3
SSDEEP 393216:5d0KpxgKnY2bF83To53/FgvsV0e6zJEJNbZbdrolaCNlPz8EUNOyjdp/1aomtrfy:kKp9Y2y3TLvsiXGNbZb4LPwEqjv19mp6
TLSH
T1E72733A5D9702CB6DE3B9432C371DDB8D0EB04B25606942F36F4D3B584E36E8352AE49
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

antivm discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

autorun/dotnetsearch.bat

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

autorun/dotnetsearch.bat

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

autorun/dotnetsearch.bat

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

autorun/dotnetsearch.bat

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

autorun/headerconvert.js

Resource

ubuntu2204-amd64-20260127-en

ubuntu-22.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral6

Sample

autorun/headerconvert.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral7

Sample

autorun/headerconvert.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

autorun/headerconvert.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

autorun/modulelistscan.js

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral10

Sample

autorun/modulelistscan.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral11

Sample

autorun/modulelistscan.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

autorun/modulelistscan.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

autorun/monoscript.bat

Resource

ubuntu2204-amd64-20260127-en

ubuntu-22.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

autorun/monoscript.bat

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

autorun/monoscript.bat

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

autorun/monoscript.bat

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

autorun/newdefaulttemplates.js

Resource

ubuntu2204-amd64-20260127-en

ubuntu-22.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral18

Sample

autorun/newdefaulttemplates.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral19

Sample

autorun/newdefaulttemplates.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

autorun/newdefaulttemplates.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

autorun/patchscan.bat

Resource

ubuntu2204-amd64-20260127-en

ubuntu-22.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

autorun/patchscan.bat

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

autorun/patchscan.bat

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

autorun/patchscan.bat

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

autorun/pseudocode.js

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral26

Sample

autorun/pseudocode.js

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral27

Sample

autorun/pseudocode.js

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

autorun/pseudocode.js

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

autorun/pseudocodediagram.bat

Resource

ubuntu2204-amd64-20260513-en

ubuntu-22.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

autorun/pseudocodediagram.bat

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

autorun/pseudocodediagram.bat

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

autorun/pseudocodediagram.bat

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  autorun/dotnetsearch.lua
- Size 16KB
- SHA256 bcb67853a1390fdc1258a5a3f96e196a025288106de29b0aebeb8eba2ba879db
- MD5 2281f2cd2d9ef62c3670f4fb4195b42c
- SHA1 015cad33368a3bfcfc09516db995959d29fabf77
- SHA512 2fe2f6e8fb2cec0dd47f1a72f630b660dd901ddddf8ee4bf9fa0df40da68a2947c6c50d9bb99e7672ac1e16ea367fde0fb52894ad368359c5664e84ffa562209
- SSDEEP 384:qhJdJlJwJQJnJ9JKYnJUJbzJC3wD7RH0TYQXNczyI7N4Il5nEPmx0WI3C3+jyTs/:qhJdJlJwJQJnJ9JKSJUJbzJC3wD7V0T7
- TLSH
  T16372324B650033BA42B740BE29C358DA2F12601399851E55FEED50D63FA436FA6F63AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  autorun/headerconvert.lua
- Size 1KB
- SHA256 e97fc7d645e7872c86f0afd04caf31b6dc85cb1f1716478e47c1df4b7dfbcead
- MD5 14a3b2979abe64aa2448bb421fb064eb
- SHA1 0c6a2b5a254edbc5fffd8c734d1283258e901520
- SHA512 eddb7fdb996b76581fa1a753db0d26e7d4d05219ee82f67772dc026fbd3af552fa4b42d24f77eb4a5af1458d01d0aa6224fc61b409f20f8de2e56c8a149f1836
- TLSH
  T1A021F55D6B20F92D96F81BA5C5F30DD8176420DA88CC0601346CC0EF4BF82F999BA7D8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  autorun/modulelistscan.lua
- Size 2KB
- SHA256 90e3f050965e009c84ec140eb7ef232ede224dd9c011cb0fd57cfab661153fdf
- MD5 3ac447acd8521eb9f6179863c6adbd64
- SHA1 e9595e3ccef635e4a1dd962f9ab6a1cb629c233d
- SHA512 72a122ac7cac8018051cfacfe35db7888d73b253f7a9cd2c46b8b41e9d4498726ad8b1be33b4e3e1ddbcba130c23cf77b9c74878d1b1ab771facd97a2cec87e6
- TLSH
  T17D51C05AA2572AA355FE46BDA8C31805CC51E0D7D0F650A3B99CC8F03F700AA64B477E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

antivm discovery execution
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  autorun/monoscript.lua
- Size 206KB
- SHA256 9fdd0de53e030b5fa28773f80dc18564cc3ebcf79dff6edcffd2eccd82206f85
- MD5 b7115e4c8cf9a223b868bb1571c20c1b
- SHA1 df7ed468082cade89ea1dd1fba0d6fd7d2cfe7bd
- SHA512 08521b0c742aff584660f5621e718136308698dfa1de31ac18ee4acfbe14f0ad8bfbb640dcb09005499b83c593ea5dc431d18027f7deeeb888c6142c228eec86
- SSDEEP 1536:l4TYvxMBNwY+BBNwhSnMC5uJN3iWvuDiSk1iJo0SAZeo6haIP3CavEb36ZhN:l/xYNd+TNXmixDrk1ZXkq
- TLSH
  T173248525640262B26AF7C7746C8B2406F3214053612A1D25BDFCF8A63FB535CA2F5FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  autorun/newdefaulttemplates.lua
- Size 1KB
- SHA256 640afb81d279e04f8c41a83ebb091701c7fecdcfde33082dcba0e022a3822021
- MD5 9737ac6754472807b16784a9cd070834
- SHA1 0473c9c1314ba17beaeb1d6eb2b6f026a683308d
- SHA512 053a77cb90e81100a4362b70df4ed0a843a02331acf42aae9af38a278dd058279c377b9530668158573fd40c1307260adeb8c725ee8da5320712f2a423cda936
- TLSH
  T1B6319B963912B31023B58176C4EB3495A9A620C7A48C2593B8FCC16A3FF521DEFA4379
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution antivm
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  autorun/patchscan.lua
- Size 17KB
- SHA256 720572b426b1ca8e477d122cfd99108bd904431bee13a4c89a43f1224f2b954e
- MD5 b757e0500a7b936af490fc59761a39f4
- SHA1 9568063ab56b92525a2557175ecaafc6371c3ed1
- SHA512 2d5ce369780fc51a61113ce16dc6254e68c6cef31bafcdbb069d5a2d24ea28687f036c75a4580aa3333d08f40027da16114ecbe498a835ef697e627cf1e21953
- SSDEEP 192:02/2WiurcwWJsFH1bukLWmHwt/5B9ndDiC4fVAslnlKQ8gLIeHkSD/nTVxVkB8CZ:HtWIBugO8ieHkSDfTVTnC8i+lLQC/6
- TLSH
  T12B82305A174E226160FB8BB6BEC30E0AE2264057052F2E49B6BC41D03F7136D5DE67BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  autorun/pseudocode.lua
- Size 7KB
- SHA256 8a43d4b4b1cbb94f9f4ac8a14ce09d5a5c79703ff928a0036c1d1d6ad580f8a8
- MD5 e40f5aff70e80b17a15757e2a1581894
- SHA1 7bda52a892378f3cd40d786b925d43fb38cc08b9
- SHA512 07c0536bf76ac26941c2de352cd157af88a6f664fdf48f6e693270ebc26bddfe5dc2ea80ba13abf3a61fae21a6572bf790d23707e55777af5be4acce986376ad
- SSDEEP 192:K9yd/VQilJ6HLwxI2KF9Znu8KX+qNdYSnatJoqVSQPFLqJ4:K0VPlJcLgNdYSnatmqVSQPFLc4
- TLSH
  T179F12319666260ED1EFBC1B2A8AF0B79E323414708160683F5BDC5913F7851D87AE73D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution antivm
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  autorun/pseudocodediagram.lua
- Size 58KB
- SHA256 5ae48c57d65b531a5a29a07940ef49761f1feb911e6afb6d7ab5ad679239b80c
- MD5 90b8d9ae8e092547818d1b5bb8d6d27f
- SHA1 f1c37b0380e5366e2086d31fdfd687d3aec3b5d2
- SHA512 93def7d451965d56facd0208e24ceb2fea152028dcdb3dbd2e575b526d06e8092d9522375face61e31d8f70e3142ea5ed3ba749107f772aee5cf08847f4e8c46
- SSDEEP 1536:SDN5O8ZQVIVPW3R89MvhbxjGkT8g4uEj26:SDN5OKPW3W9MvhbxjH+M6
- TLSH
  T107432D1519311DDC27FA42A2AC9AD9C4F211C0863E2E2AD4F5ECC087DF78DAD46B5F26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

discoveryexecution

behavioral6

antivmdiscoveryexecution

behavioral7

behavioral8

behavioral9

discoveryexecution

behavioral10

antivmdiscoveryexecution

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

discoveryexecution

behavioral18

antivmdiscoveryexecution

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

discoveryexecution

behavioral26

antivmdiscoveryexecution

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy