3f0c378d18395988acd50f15f4f0651ca7f1e82288553b71eb2fae2712995687 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

mod_d1kamo...]_.zip

windows10-2004-x64

1

mod_d1kamo...]_.zip

windows11-ltsc_2024-x64

1

mod_d1kamo...ar.ttf

windows10-2004-x64

7

mod_d1kamo...ar.ttf

windows11-ltsc_2024-x64

3

mod_d1kamo...ar.ttf

windows10-2004-x64

7

mod_d1kamo...ar.ttf

windows11-ltsc_2024-x64

3

mod_d1kamo...ar.ttf

windows10-2004-x64

7

mod_d1kamo...ar.ttf

windows11-ltsc_2024-x64

3

mod_d1kamo...ar.otf

windows10-2004-x64

7

mod_d1kamo...ar.otf

windows11-ltsc_2024-x64

3

mod_d1kamo...ar.ttf

windows10-2004-x64

7

mod_d1kamo...ar.ttf

windows11-ltsc_2024-x64

3

mod_d1kamo...ar.ttf

windows10-2004-x64

7

mod_d1kamo...ar.ttf

windows11-ltsc_2024-x64

3

mod_d1kamo...on.ini

windows10-2004-x64

1

mod_d1kamo...on.ini

windows11-ltsc_2024-x64

1

mod_d1kamo...on.dll

windows10-2004-x64

3

mod_d1kamo...on.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
mod_d1kamon.6.29_[unknowncheats.me]_.zip
Size 23.0MB
Sample260727-be46wsteme
SHA256 3f0c378d18395988acd50f15f4f0651ca7f1e82288553b71eb2fae2712995687
MD5 2c4a089d0e90ebcf2c6ef23cc757ca1b
SHA1 8621f40f01849e3d52d2034665135cc6325e1f3b
SHA512 dc628daea705d306771336b79794285b7dbdcb1962d42ec4ec2b90819834861d1e8b3e32ded0c714edffa8db518aaac061aff521f19b1c6c41c94750d70a7326
SSDEEP 393216:zSwBEa3CgKwPxr9xsQKe45/UaRQ+Xjw1Dhlc1vPdzAeF48VB+h68y5va5ccsc0K6:/ycxVKB58+Xk1DhlcDEeZVB+h68mS5va
TLSH
T179373362D955BEE55811997BAF32A1BE75BCE0524F2C037348E62B0008B6FA447ED70F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

mod_d1kamon.6.29_[unknowncheats.me]_.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

mod_d1kamon.6.29_[unknowncheats.me]_.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

mod_d1kamon.6.29/fonts/NotoEmoji-Regular.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

mod_d1kamon.6.29/fonts/NotoEmoji-Regular.ttf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

mod_d1kamon.6.29/fonts/NotoSans-Regular.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

mod_d1kamon.6.29/fonts/NotoSans-Regular.ttf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

mod_d1kamon.6.29/fonts/NotoSansArabic-Regular.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral8

Sample

mod_d1kamon.6.29/fonts/NotoSansArabic-Regular.ttf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

mod_d1kamon.6.29/fonts/NotoSansCJKsc-Regular.otf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

mod_d1kamon.6.29/fonts/NotoSansCJKsc-Regular.otf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

mod_d1kamon.6.29/fonts/NotoSansSC-Regular.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

mod_d1kamon.6.29/fonts/NotoSansSC-Regular.ttf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

mod_d1kamon.6.29/fonts/NotoSansSymbols2-Regular.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

mod_d1kamon.6.29/fonts/NotoSansSymbols2-Regular.ttf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

mod_d1kamon.6.29/mod_d1kamon.ini

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

mod_d1kamon.6.29/mod_d1kamon.ini

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

mod_d1kamon.6.29/version.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

mod_d1kamon.6.29/version.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  mod_d1kamon.6.29_[unknowncheats.me]_.zip
- Size 23.0MB
- SHA256 3f0c378d18395988acd50f15f4f0651ca7f1e82288553b71eb2fae2712995687
- MD5 2c4a089d0e90ebcf2c6ef23cc757ca1b
- SHA1 8621f40f01849e3d52d2034665135cc6325e1f3b
- SHA512 dc628daea705d306771336b79794285b7dbdcb1962d42ec4ec2b90819834861d1e8b3e32ded0c714edffa8db518aaac061aff521f19b1c6c41c94750d70a7326
- SSDEEP 393216:zSwBEa3CgKwPxr9xsQKe45/UaRQ+Xjw1Dhlc1vPdzAeF48VB+h68y5va5ccsc0K6:/ycxVKB58+Xk1DhlcDEeZVB+h68mS5va
- TLSH
  T179373362D955BEE55811997BAF32A1BE75BCE0524F2C037348E62B0008B6FA447ED70F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  mod_d1kamon.6.29/fonts/NotoEmoji-Regular.ttf
- Size 860KB
- SHA256 cd07743a4c93d8da929afdd28c1d368f11da478a1093146a13610081c2a58440
- MD5 2406adda04b83ddf8b6ed50dfb28548d
- SHA1 68067e4889b3b47b2c608d6267fccd7a97aded2b
- SHA512 4293b29a6506113b5c6d95ec1c1d66ed63950c4633f59c80426a5c5d2c7f423512e197bdf39ce78f8bb16da3d4ed31d63b07df89df487fbdbfe872b4c392f2e5
- SSDEEP 12288:MqqxT9D7zOwPjN8eMNZRl+YqRQ37VfW4XnjLHImUoadOWgJojF38SJO5D2l+N4NB:4h9bOAp+pERQRWKjLH6Oz42o+WvqjK
- TLSH
  T17C156C03E5EBDA5DFB4B35ED6D2222A680CE772A8779415CE28D3C37E1CD89059C6B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  mod_d1kamon.6.29/fonts/NotoSans-Regular.ttf
- Size 614KB
- SHA256 fe8c022f48d8dd29f17b744d16f9346f4357e16f7d4f7be58b000ae7c291b614
- MD5 f46b08cc90d994b34b647ae24c46d504
- SHA1 f04a504e2078d6c01b3bf453c0d18c4f77c2133b
- SHA512 f07f34ea964ed286686cdcb911a1648b8d6542228c1d31de73d119bd7433c9ef4b30a2ee370ba22a737f6c0a37445e88929edef74aca1ad07f23f32699a35fb7
- SSDEEP 6144:ZHTBip3A0PZd5Y6fo9ta8q00a4BZK1qFvlrc9dFlrelqAxndY18tLAmQphGtzDAd:ZH3R6fMylridLe/ngSLAmQ60/pTc6K3g
- TLSH
  T149D45C43EB6ADE8DD2061FBC56B3939263B8BC756FAF830BD5416927F8CB0C04945588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6
- Target
  mod_d1kamon.6.29/fonts/NotoSansArabic-Regular.ttf
- Size 172KB
- SHA256 90f50de40af560ad55f2fcf460af8205f842b534b057bd8b8bcf7d3e10d3223a
- MD5 75527903c6a793772b02807c5343f4c8
- SHA1 456e74b0805d1931a7786d3d04673a3b02dd4dd3
- SHA512 8a652d822ee34062cdbd9cfab1bea9d58f210ccdd2f57166d87dba91a1037a6080a36571326a0e7dbbfb33fa6f774e62ffaa698c2bda7a25c77ab363c643c315
- SSDEEP 3072:abbSZGNc3gpjMjc6OQqyg4urmVD9df06HJcYdt:anuGy3gpwIyggL06ph
- TLSH
  T18D044C03E5A3DFC4EF061DACD7B162AA3A5ADC3C973B538FC9A8151BE0CB1405C96658
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8
- Target
  mod_d1kamon.6.29/fonts/NotoSansCJKsc-Regular.otf
- Size 15.7MB
- SHA256 2c76254f6fc379fddfce0a7e84fb5385bb135d3e399294f6eeb6680d0365b74b
- MD5 6d30d01b9b25bd766898ecba71d5cd3d
- SHA1 d577bdc302c03212e1d05fd3f808657a71edea0c
- SHA512 547b4700975a76d0d96699d19723fce097ec6fde09bba0020bcfdd9b47db197b9e79ef782484e906a951577d772b77ea3e705c68105754b9c6521a6f2c907ff8
- SSDEEP 393216:4YvxIQAf3jPhZIuF5M9SRODMhLF1bVOVQmdzmZKkS/MJd63upqSumqjqS8UU:/ITfzJGgqI15OVQmdzyOMJ8+pfejbU
- TLSH
  T146F6122F61BDA824D964E1703953E45A7AEA045C064FE1F8E4936A3378F52343BED7C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  mod_d1kamon.6.29/fonts/NotoSansSC-Regular.ttf
- Size 10.1MB
- SHA256 d45f67f0a7c0ca3f256950777ce6a61cc7ce5f9696d02900cbbaac25f8aa7d16
- MD5 21e0367704b0b4fb503fed27c3372cbc
- SHA1 19e013bd11fb2ea6b895f113e4d9d5a7b5c15547
- SHA512 4206fd897a59f1d162d7fa2cc3915a991c7acda03e325bbfa346c3644e9b79527c28637b0c8a0a0d7b8041ba3f3a2adc75fc1ae73c4c5bbe01d2cb6e533c00fd
- SSDEEP 196608:wGyc7iEp2yRSAVjEiaqXFSHRGn0xpfpoPt9WIPIsHqaagSb+kPaY/R:OGn0TpoPLDanykNJ
- TLSH
  T1EEB669C716AD3D8B45A137BC544190ACF1CFD82DAB99D3F48DD7FC9A00964821D82BBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  mod_d1kamon.6.29/fonts/NotoSansSymbols2-Regular.ttf
- Size 1.2MB
- SHA256 f67f40c65f929f029827ab37cfdc4897dfd9ae3c28d9e98ba46e0d52e39eb97e
- MD5 d9100fb773ec2565167d866a1ef7706f
- SHA1 a19828fb102b1d60932b60f3f7450f4a73ea76d5
- SHA512 3e19cee235cd5b5bd369425eac4bc3702ff210cab09bfee86733f2724346ab3cfc6d54133527716356e7b997cdc964ddec20da3ebcf2fe86b074d52176c7f2d5
- SSDEEP 24576:HZKS3rqS0GBzfIlM7uWFHKgtuequ2KxR2se09i7f/yIEkKU+Vpf:H3ltuk2fse09yf/QR
- TLSH
  T1E645AF07E7C6FA65FF579AAC25602B13029F5067973B43AEE0823772DC9A4E01E5D183
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  mod_d1kamon.6.29/mod_d1kamon.ini
- Size 607B
- SHA256 81536b620c77e2a8eda0554b42483ce0bd8a7b33ee53c5b38a81f3550e08d867
- MD5 3b3e836361dea0020005bc0cd91ac38e
- SHA1 4b7b99587815da1efa0e828ff5e7d71aa98d401b
- SHA512 647d51c772c65a04ebbcf8bfa08f2ec7ed086dc9973ab0e4d48637ba9c4c6d91a5829ff82369b189d13f60878773e39d6125d0dd1176619dd3a39c1d7ac392cb
- TLSH
  T121F0ACC74B0619E23FF18B17B22E91C1FB20831B48B3101215EA478D7074302A2F99AB
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral15 behavioral16
- Target
  mod_d1kamon.6.29/version.dll
- Size 3.2MB
- SHA256 158caa165bc2e65a7997cd5662f116c37ae90a0ea9c6272ee5a30cc30326cb19
- MD5 6e03ecaf813a5602555203e802e7e56b
- SHA1 9710c21250229cb2b305e77b94ea02b6b3c3ba08
- SHA512 e6e5d987b4b28ef3ba3dc3509a6e958f0f3edad268a53b014cb4a83fe82f9ce868a9591cbeca4960c6d149712377b7ec2167e4d5b2323b4f492b49ae9dbb82fb
- SSDEEP 49152:9ICVyO65Qckuycb18W3TaZXmaEF/DQhbG949O/TIkSILjfKmarMzsMHMMtUGM9:cxkW1sXj2/DQE949n9u9zAMHMOM
- TLSH
  T1A3F50241F152D0B2C8AA0170B27E7B6F993D1A24071855EBF3D039E85B702D3A7F6B56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy