cb17284858f73b812981808d2936f3f15ecfcbe2739b3f6b3ca76c264f4e3915 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

RGE2Core.dll

windows10-2004-x64

3

RGE2Core.dll

windows11-ltsc_2024-x64

3

RGE2Player.exe

windows10-2004-x64

3

RGE2Player.exe

windows11-ltsc_2024-x64

3

Tools/1.bat

windows10-2004-x64

3

Tools/1.bat

windows11-ltsc_2024-x64

3

Tools/makefile.bat

windows10-2004-x64

3

Tools/makefile.bat

windows11-ltsc_2024-x64

3

Tools/msvc...91.dll

windows10-2004-x64

3

Tools/msvc...91.dll

windows11-ltsc_2024-x64

3

Tools/ruby.exe

windows10-2004-x64

3

Tools/ruby.exe

windows11-ltsc_2024-x64

3

msvcr80-ruby191.dll

windows10-2004-x64

3

msvcr80-ruby191.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
153053ki5kbisfbc8316i3.rar
Size 5.0MB
Sample260724-11ynnsthnc
SHA256 cb17284858f73b812981808d2936f3f15ecfcbe2739b3f6b3ca76c264f4e3915
MD5 f16ba4db08581e8e71fd5abdddd56976
SHA1 4f367e42a776c3925557860f636e240fc48915c2
SHA512 af66101016687e68687574b081a7d96791de186570a10ba20c7932000ff1c970432a85f80d909629235ebacfe9eb5e3bca95e66787e363a997f431488ab30228
SSDEEP 98304:GXHUROEqzapi1dRNOI0rgwxigbvUUkAhdeNKYmlqGm/I+krRaItg3Aw:ZOEDpiWI8FxT8ZAbeoPt+vb
TLSH
T15F363338245118DEBAAED5132966EE127EAAEFC30729D6CD0754539C3C8805DAB1C7F3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

RGE2Core.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

RGE2Core.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

RGE2Player.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

RGE2Player.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

Tools/1.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral6

Sample

Tools/1.bat

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral7

Sample

Tools/makefile.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Tools/makefile.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Tools/msvcr80-ruby191.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

Tools/msvcr80-ruby191.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Tools/ruby.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

Tools/ruby.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

msvcr80-ruby191.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

msvcr80-ruby191.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  RGE2Core.dll
- Size 1.4MB
- SHA256 7e9409482156f5b3cd62bfa3ea7d258082479caa6a19e76133fbf8046bbd10cd
- MD5 256a5412cf1becd2ed9cbfb515d4fee9
- SHA1 0814f004ff4ab22e36b63d14f605eb36366fb3c8
- SHA512 d1f227d9766ad70fd5f7fb8dd98265bfbabcf3a3e6e65c3ac7cc84b4dd1211e983aad21b70e5688cfce0a66adc3afdfce16fdee5275f36259b1cf30f13b05e04
- SSDEEP 24576:0fI5X10sRhTgXC+4nkhIA/AVqn6zTF4WG:0WFkhdETWZ
- TLSH
  T1A3656C10F7908019F9F702B656FDA6BC69293D608BDC04CB21D566FB1B397E52E32287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  RGE2Player.exe
- Size 512KB
- SHA256 f4137c06030f1d758f4d9ca489785bd4e988fdb6845f812f72ed76ab3c484125
- MD5 f7f4775fa80d1110b2283e90d14b50a5
- SHA1 b1f7872eb45483cf81947b437c25aac92af5dfc4
- SHA512 f6f928fd09cb7b5b5dd3102df3e88b3418be01126895e9e14e3e2dea24c230e4c969ebd9e5b8690f823f32e592d51dd46870ef4281b1973a4c6b70f507939e08
- SSDEEP 12288:lCLeQlLg50AbCKXhDTiSfx+dwH7i5h7BfSsPaf:wQ0SC8v5Squ7BfSoq
- TLSH
  T138B44D00BAA3C025F9F602F5C6BA869CA92579708B2C94CB72DD56DD13349EDAC37353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Tools/1.bat
- Size 10B
- SHA256 ea95b73f1eb314175c4f6573700016135ffe2ba259bda9ee67e266bd02a349fe
- MD5 252ce030dc78dca05ce81918148cd54e
- SHA1 08599a26c986c0bf496f3cb58393c455fbfeb456
- SHA512 272e5af7b429c98296249215648ebe448b67640e4db94ad1dd180631aa95465a9e1bf16e99bc5f0a9152a25ceef262fa8995ae45cc468513773c77e52c611000
- MD5 SHA1 SHA512
Score

3^/10

discovery execution
behavioral5 behavioral6
- Target
  Tools/makefile.bat
- Size 9B
- SHA256 edb3412a8a5d886f7fb8dc8736db6160f96d3af764fafdaea746536e07290e77
- MD5 9800783edb4098be3afef66f0a7a95fd
- SHA1 9626a27d70e9a1b3f3ac650d461721485de3b599
- SHA512 3d3b1bef68a2d30f5ca28f8aee82e8ccd9ea36ade9710949f1e2c9f1d4c82531136ac463fba71d81bb450f08bd97fb9e2cf30bf133ee0954e00ca013511a3dd6
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Tools/msvcr80-ruby191.dll
- Size 1.1MB
- SHA256 dd12d0312793f9b1c8903661ddd5bd38ced5b86cca04c475e2ab0254245b2e92
- MD5 49a4c9cecf62d29be7f862166db40d8f
- SHA1 27b5bd979c464e8c3735a742f51194ded395f29a
- SHA512 ca2da29a1b32e69a65a9ca4f768041c0257e54d08b1d675afdebace5437ee0a7195e0367eb7c4b6a2b568691d9eb96d956203cb6ff85f3ce37e66db5e86d05aa
- SSDEEP 24576:vLq0vHRl8GJ17oGeTbaEJR6CcmWXkp8Y9xf3geaW0DHDgJ3FWnhTYTqWwwT942:DqXGgq/mWUzbH0DHD64RYTqWwwT9
- TLSH
  T1EE458E21FE52C136E4D501BA82FD4EB949BDCE20571A61DB7AD834D9AF324E23676303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Tools/ruby.exe
- Size 45KB
- SHA256 e5e62db745b4e8a6d60d14894729ce248b7c947afbc96ee6562d27e3652cc73d
- MD5 4361bc6fe0dacd8373fee0e4e5b21813
- SHA1 f2acdfaf6cf9e0c2694e0febf21e4246409984ff
- SHA512 1e70cbddb7c2ecf8d822d86742ff88e270dbe3a4bcf23b8ef744446e7453924f06f02f783fb3e8d214b476bacaa2c909644b5c011a034e1b20357d5ad0ae4c92
- SSDEEP 768:NL0RBSk1qs8aCSSDaXdF+lF7P7J5reaCn+9JO2shY8PLUpb6VPvYqBN6cNFfAXNx:FGB5qHSY+A37feaCMJDmYsLIb4PvYqHC
- TLSH
  T1F923F1411EAACEA0F8DF66F00C45EE06CFF9EE63E94797512ED80E5E9070946E0B1097
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  msvcr80-ruby191.dll
- Size 1.1MB
- SHA256 dd12d0312793f9b1c8903661ddd5bd38ced5b86cca04c475e2ab0254245b2e92
- MD5 49a4c9cecf62d29be7f862166db40d8f
- SHA1 27b5bd979c464e8c3735a742f51194ded395f29a
- SHA512 ca2da29a1b32e69a65a9ca4f768041c0257e54d08b1d675afdebace5437ee0a7195e0367eb7c4b6a2b568691d9eb96d956203cb6ff85f3ce37e66db5e86d05aa
- SSDEEP 24576:vLq0vHRl8GJ17oGeTbaEJR6CcmWXkp8Y9xf3geaW0DHDgJ3FWnhTYTqWwwT942:DqXGgq/mWUzbH0DHD64RYTqWwwT9
- TLSH
  T1EE458E21FE52C136E4D501BA82FD4EB949BDCE20571A61DB7AD834D9AF324E23676303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

discoveryexecution

behavioral6

discoveryexecution

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

© 2018-2026

Terms | Privacy