_bat[.]zip | Triage™

_bat.zip

SHA256 53f00ad8866e52cebb987eec55b5528086a97d2e4b184bd0df0bb990330b65ab
MD5 ec0ee05444dbd116c6803af3055c0c83
SHA1 4c6773f39b174aa1c1bbf5a12c31c703b6597afe
SHA512 347b1800f48a2d6f00ec97105ed70986a733495a19e0ecacdd05d7cdf4df52ccbe310beae71396f79e994276654d37799749eef4b6cb35671a3222202568d924
SSDEEP 768:CL9HmXkSvp0mQ+56PLDkFSiIgu0fzygePgi7tmXogR:CLaVp0mFnfJ57ODtmXogR
TLSH
T137D2D0AA69E4BD25DAAB8B3445337BE2247120C5C2D2C10C27ACE9C715D798C2D09FCB
MD5 SHA1 SHA512 SSDEEP TLSH

Alternate.ani

SHA256 aeaf02166a3d966fcb0be8d470b15932a29df65d729471b8954f5d0f19ea4bfd
MD5 8b6a5f86bb045d9db65146d3d27c909b
SHA1 1955e98194dbdc2e5b872cf0015e5b131e006b53
SHA512 8e9f8dbef727c746cdee3ebf96b5832f72c85995d69fc994b6fcd661c02aaa0d27a708fa2c33a32f24e517559744bfcfcd907da087dc1db0b1985f724d2daf00
SSDEEP 48:LH9KKKKKKKKKKKP01T+9KKKKKKKKKKKP01T+9KKKKKKKKKKKP01T+9KKKKKKKKKg:h1S1S1S1S1S1S1S1S1S1J
TLSH
T1B903AF96BB04C652D5160AB7CC58E2FCA3146C35FE05276B3622BBAFBC723977D21150
MD5 SHA1 SHA512 SSDEEP TLSH

Busy.ani

SHA256 dfd52a43b433016784890799798437d0877a59fec779caec3fea3045fe5c4c08
MD5 9826ec5a5fb947d064c7f449cc5f1d14
SHA1 aa0660839a991c5fc57a57bb289a37e55ce9d8bb
SHA512 0585561c1ddd8b07dc9eb2d2fe8949e4a524b5844b34fc02fd9e7e55c70d783c38910d7aa717b41fab756094c4c7a65e302b392bcc9f71fd931aa9db9653bf76
SSDEEP 96:EveumXjXOWeyp1bnejxnwajeipheKdUeipeesRy9i2jpj/9Z9iuQNE2jXRzvib8p:tp1bMwanpZdspERy5jtuE+Em
TLSH
T13F03B11FAA0DEE1BD9040779CC92C1F96624ED0C9D21C1A33D177F1FBA7B0B11A62968
MD5 SHA1 SHA512 SSDEEP TLSH

Diagonal1.ani

SHA256 9b390f619c86d0ee87ee0a7815cdf7ba6d5f9f689654b0dce0799eaff4bafa99
MD5 aeef9d6fbcbdaa24fd7cab95843e17fc
SHA1 33eb9c8dc22ae3f0ae118037b656853d721086d0
SHA512 74f48cca5da08c583180a33f3dad443176d8f89e21816b3232257ba9d8578146e6b290f2ac857d610c870f610e8a25c0ebd5f9e9c0166a2c8859b5daa324e403
SSDEEP 24:LKk9NmmCmi6PfbLS8ntpw9NmmCmi6PfbLS8ntpw9NmmCmi6PfbLS8ntpw9NmmCmV:LvntKntKntKntKntKntKntKntKntKntf
TLSH
T1CD030B02B701E412EB240975CC6CC6FDA7166DA8CD13875379207B2FFDBB287AE80008
MD5 SHA1 SHA512 SSDEEP TLSH

Diagonal2.ani

SHA256 266d3d94f7ce4e3b836896a42cb5d771474266d21a97dc36daefde129ec49df7
MD5 d71effa0cddfc79ff8c1321c9efbf6c3
SHA1 68370ccb0b0968173cb802d1b87e31d388f918f4
SHA512 6892d9c83af00010b05cea67c3526dd636404f40b43e73a31342229378fcdda8551fc732b20d01295d9d960dce1fbf6794c7d0a979d102e08a454ed5f7f56bf6
SSDEEP 24:LKkHbtmCmmN9B7tnxsHbtmCmmN9B7tnxsHbtmCmmN9B7tnxsHbtmCmmN9B7tnxsK:Lztnatnatnatnatnatnatnatnatnatnv
TLSH
T102030B02B701E412EB240975CC6CC6FDA7166DA8CD13875379207B2FFDBB287AE80008
MD5 SHA1 SHA512 SSDEEP TLSH

Handwriting.ani

SHA256 1e10402eefeb3502daf6667d4c8e8d5de8cfd8bd35142c381db2a2203f015247
MD5 72ce4c1805cdaf3978cdabd2ac943be2
SHA1 2f77ba122efd4be120a9cd0df987ea3762cddd23
SHA512 4517a7514f87c2200865fc89bb191a6e0c6dd5ddeecef9cbb6a32f389026c57e67f696a98340aa5b8425736a9be8f35a28dda20ed0c67d70d6c90b89e342a4b8
SSDEEP 48:LjwbCyW7HwbCyW7HwbCyW7HwbCyW7HwbCyW7HwbCyW7HwbCyW7HwbCyW7HwbCyW4:+JWyJWyJWyJWyJWyJWyJWyJWyJWyJWK
TLSH
T122035B92BB04D05AD9120AFACC69C6FC47587D21DD22631B3653BBAF7E731922E70145
MD5 SHA1 SHA512 SSDEEP TLSH

Help.ani

SHA256 6191c5f051d5877d70ef9eaf7b38f8ed5049b371529e9bb1a3557acc28d3d9bc
MD5 8faee6e7f35516264a95146b3d30e948
SHA1 21a77b674f9215ba78631f6a53c3d5195b11f547
SHA512 8164cb614e200992530a4580c979e3ca0d1163f0a32e575a3c673b39708b041e629eb78371b321560ce9c8283cef708c67c36f5762ad2ce58f1da90b60f35c8a
SSDEEP 192:qPcyPcywcy3cy3/63/qeOAnLeOzsvdZOme/m:xpydOmPOgKOzgCzm
TLSH
T1E403FF41BF42ED1EDA809FB5CD96CAA46714394B9C3317833D81B797BB860B08E7568C
MD5 SHA1 SHA512 SSDEEP TLSH

Horizontal.ani

SHA256 a168564a4fdedaf0dbcafcfdef88341e6151a702b79718201cdf86bdb0a87337
MD5 9438d84ca76674d44d4871ec5a2ed164
SHA1 00118f477720c2eece1314af6f8e78b224d52b78
SHA512 fcd2509ba892e63aa8db6924e0a8047fe9529a7883157d88198f19b9b486cc93626427f1e727051bfe24be0e0ee87b39f7847417d2eb0c3bc90ba4c97c334b63
SSDEEP 24:LKSrTtNvosfRgs1vLt5r3AlAxrTtNvosfRgs1vLt5r3AlAxrTtNvosfRgs1vLt5A:LW9l9l9l9l9l9l9l9l9l9h
TLSH
T1F703AE02B71BE096D2490530CC68C6FDBB18AFA5DD4B07277265BB3FFDB16862E01259
MD5 SHA1 SHA512 SSDEEP TLSH

Link.ani

SHA256 1dc0eb8635cbfa5d135bb2157dc2016318f42b6b82505975038fa7b6cad30841
MD5 5557eda37190bafcd4461dc6c68b218b
SHA1 d36d89706a4555c2fd7a35aeaab44e47854479f4
SHA512 c2b075e71b9f71502a406580506da23a62b25bbe156b911a4c7bbe4f838ae49dea839933353507d1240c53c6f1f8780f98d3944394d105ce8eebd3c343b84cd4
SSDEEP 384:9zwiK5wi6Ri6+i6+B6+B7qtrRAtecu1AKjwBd:SiviIivivBvBmt9AtaANBd
TLSH
T16003AC8775C7DA27D4540B718C8AE4FC71E43F0E89078A5FBD863BEEB6B240068526B0
MD5 SHA1 SHA512 SSDEEP TLSH

Move.ani

SHA256 81b42d00ace62a2b19c5308cf2313f90958ebdc5d3af4e65e6101e8547371394
MD5 5096facbdbab9b0e4aef7ece7481eec7
SHA1 523f602e90598f802911f42e9ace396f5adad1d3
SHA512 7e8d372699c8564dfa791aa69f588e6c37cc6770b7078b15a6175d1f96d0ef30e87ca616ecb3b3b2d0eb7c2c35250c840647c9cc8c545f7b6082f03e98ed9732
SSDEEP 384:hFQgLFQgLFQgLFQgLFQgLFQgLFQgLFQgLFQgLFQgk:IgGgGgGgGgGgGgGgGgGgk
TLSH
T145033242B71AE042D995457ACC9AC2FEB7146E64DE269323B6607B3FFD332933D01189
MD5 SHA1 SHA512 SSDEEP TLSH

Normal.ani

SHA256 6f4baab589b729a88f10931409d6317d8d320d9387f7d340d936516610c88cfa
MD5 18c8e821d2b15bd493dc1e03bb232935
SHA1 15507f33e92cdf3d01bdcc237a9cffcf90fd2096
SHA512 ac7d1cf6568328e6364ef45614fac7103eb1103e25092a1f91145db646f9d075ac45f095ad22a44de8c930eb9235dda10075a177b4745649b6a06ca775941152
SSDEEP 192:GsWwksdwUsC3QUs8DQUs8OQUs8OQRDkRVXKWEoTj8DkPmfAdd3Rff/LQsEtYksFZ:5IRvWWSVXKWEoTj8DkPmfAd1Bzg0
TLSH
T17C0331057B8BED6ED0C007724C93C8BA233A39F9791726C33D463B2ABE650752D169D9
MD5 SHA1 SHA512 SSDEEP TLSH

Person.ani

SHA256 886f583d313363954b424b7fccca1631f7419684025e25674380631d255f66d7
MD5 f5f717daabfbaf700b59a92edcd88392
SHA1 00294e2742572d6807ef0f68e986913c1e47ab87
SHA512 2695f9892b3cf051fb48ee38f8310f67c444aa3949be0c3148db709cb751f56d31b5d8384776f37b2e9994c0cf15c0cc0ba224cc6d54694700ab9b9c390ebf59
SSDEEP 384:JtIXaUKXKLNXKNnXKNnKKNnKvX0t2rd+tufmlhCahlKd:vIXNKX6NXcnXcnKcnK8t2rd+tqPclKd
TLSH
T17F03FD95B453ED23E9C02378D852D8FFB1203FCCDEA389173E8A375AB7BA16154A5244
MD5 SHA1 SHA512 SSDEEP TLSH

Pin.ani

SHA256 e247a6ff36e3299c91a44b4ba787064cddfb6afd2890a2d6e896acc6ee80a534
MD5 bf67199b1069d681a62860908a7d511c
SHA1 8a1a81d775a2e240b2134003b2c47a6f699be104
SHA512 bc01c0ff41cb2725c6e45f70215c5d805a352f1e7a846c42e4b59e6f8fc3bf6161214b415579b9da081cfb4d95f3d997ac88d3f95b8f3a49f1fce069f78b3cce
SSDEEP 384:pqpKONp6cp6MPp6MPy76MPy7cGhOxztx69teAEeiK/y7d:QpHpvpbpby7by7cGAxztx69tVSgy7d
TLSH
T1F203CA997883CC27C9C027B8C992D0FEB1203F4DDD93851B3EC6376AB37726159A6694
MD5 SHA1 SHA512 SSDEEP TLSH

Precision.ani

SHA256 a5d8bbc1fea379c72417cac3c96c427becc1d780d97e853515cae2e2d8b52a61
MD5 5938b14142c86d125abd675b5cfc565c
SHA1 ce04293b7884ac16f81564516c569db8ed06ad74
SHA512 4a1ccb1c872928abeb39bdfb93677923a2c48f2b9a662e311074079ef4b726a95d6ad170db11b78ba2efb55c07ec668f6375eb5e6a433c381d16382d5e36a6ad
SSDEEP 24:LKYESSSSSS0Q6SSSSSS6ESSSSSS0Q6SSSSSS6ESSSSSS0Q6SSSSSS6ESSSSSS0QC:LxnQdnQdnQdnQKrQaHgQVQSHgQtQkQW
TLSH
T19B03C5823E09D096DE7C0A72CC96E2FD3325AD58DF0A1707B954776FB8776E42E21140
MD5 SHA1 SHA512 SSDEEP TLSH

Text.ani

SHA256 dd3bae4be64722adb215cc4d46649534d887dfeaf7a386015c4d2433fa28f835
MD5 8fd0b1fcf07a756ddc328f793c2ee7c5
SHA1 ca6dd789c38b5828ed3d92b7e9f5a62773568b42
SHA512 049c4eb5f3dff5e881bbab0393a6d4e026538e99e103ef461add072b00fa04c9d6780316399527798394523f65a678a824bfbd5c00655d09cd3ae36c818f4c98
SSDEEP 48:LhqqqqqqqqqqqXqqqqqqqqqqqXqqqqqqqqqqqXqqqqqqqqqqqXqqqqqqqqqqqXqk:6
TLSH
T1E90398A3FB84C05AD9980AB2CC69E3FE63145D14DF02270BB608771FFC31AC52E2010A
MD5 SHA1 SHA512 SSDEEP TLSH

Unavailable.ani

SHA256 92435b91c2a70b112042c14306d8075ca61930a4b5ba28971f30ae42a74bb368
MD5 762b4973c91f8dfde5bd62650e041863
SHA1 130badf4640a633ea33ef76d6fb91e03db780f01
SHA512 60927dbef7cd311731792a190c9ea5357017b60ce0e9bb5edce772ac5878d8c8b898b5becec1816f983e7789579b6e647881eea7ef6302dae0c7a190bb88be33
SSDEEP 192:UqcMPJbwsn2ppkDSmX/Y8SDYjjcMfprY5WpUTkdrBanFXvyqTTJEKW4YtXn0Jq:/cM6OoMn/HcMeIrBqY4AXnd
TLSH
T13F03321AF687FE66F58016708D63CCBA22383EDD6F2395B339473B2DB17A5202C52945
MD5 SHA1 SHA512 SSDEEP TLSH

Vertical.ani

SHA256 d86759244027ea56cd151fc33d829d49ce742c55c05b2163b3e89f93db3ae130
MD5 aa2d74d7a74383ea43fb2c9441b0b210
SHA1 cec012e37510aafc9cbd7afaa2ef06d84faedfc8
SHA512 fb918ec9e3464134821673fec3ebe313f6bad35ebbced9d85223d8cc1d6808c66aff0fbf16126258ce1db2ec2baa544745f25270bfe0ea4ace920013f8402e40
SSDEEP 96:4hs1xhs1xhs1xhs1xhs1xhs1xhs1xhs1xhs1xhs1d:i
TLSH
T18103B691B717E242CA5609BACC0CE2FCA3146F24FE13A727626077AFBD723507C91148
MD5 SHA1 SHA512 SSDEEP TLSH

Working.ani

SHA256 36ff2ade73e0c8518eea472f7f7c90b168f3549d852566106da7c9ccd8d69f95
MD5 a3a3d94693c1d0c52969dd8aed3f57fc
SHA1 6d4f9e743a2b7be42149e1684f03777f778c6cbc
SHA512 be33af75445fa830cad35c9dee200840d5c8f10267e19eeec3f510e91bc7fe08badd1024f36386a71cc4b0d7db5d9b3510751a5b7f1f0c29d67c046e772c3ce7
SSDEEP 192:GI/t+9HvvAdtPczvvACJtHmBPvA8JtTmBPvA8JtTmJP/K8JtTmxPMDkRri375ot4:Pt+otPwtHm1tTm1tTmztTmpeet/v+tH9
TLSH
T115037C063B8BDC5BF0C01BB18851CCFA33B53DD9A953659339823F3EFAA91A52C26545
MD5 SHA1 SHA512 SSDEEP TLSH

install.bat

SHA256 fad88569851f86b21a624343f8d729e4288405bf75a0582e0f30c0800482ea2f
MD5 37ca5722a80a0e71051f3a6d2d93e0b8
SHA1 ef75bade0911c2654834a83c3094f4fdee2f9147
SHA512 b900e4b8370da84624a6699c9c5a94ce63e7f74365d755edaa7104c5dc3ce9e559b9374ee1c05d419858fac1ff275c23d97407c230d2b7305234f1274289ce7d
SSDEEP 384:Qog17X7b7GIKgrJMxQvinDU4tUvh+XItep+sXiD9iFGinQDjHi1fEXUN58xmvcTV:1g7X7b7Gd13iyL6oS
TLSH
T1BFC29D393F2A815804363FCC9AB660158274A1552F946C4F42BC72FEE9FFE2E9478587
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

_bat.zip

Alternate.ani

Busy.ani

Diagonal1.ani

Diagonal2.ani

Handwriting.ani

Help.ani

Horizontal.ani

Link.ani

Move.ani

Normal.ani

Person.ani

Pin.ani

Precision.ani

Text.ani

Unavailable.ani

Vertical.ani

Working.ani

install.bat