99f5045fffbffb745d67fe3a065a953c4a3d9c253b868892d9b685b0ee7d07b8 | Triage™

Login
Reports

Overview

overview

5

Static

static

3

nssm-2.24-...og.vbs

windows10-2004-x64

5

nssm-2.24-...og.vbs

windows11-ltsc_2024-x64

5

nssm-2.24-...nv.vbs

windows10-2004-x64

5

nssm-2.24-...nv.vbs

windows11-ltsc_2024-x64

5

nssm-2.24-...ry.vbs

windows10-2004-x64

5

nssm-2.24-...ry.vbs

windows11-ltsc_2024-x64

5

nssm-2.24-...gs.vbs

windows10-2004-x64

5

nssm-2.24-...gs.vbs

windows11-ltsc_2024-x64

5

nssm-2.24-...on.cmd

windows10-2004-x64

3

nssm-2.24-...on.cmd

windows11-ltsc_2024-x64

3

nssm-2.24-...sm.exe

windows10-2004-x64

3

nssm-2.24-...sm.exe

windows11-ltsc_2024-x64

3

nssm-2.24-...sm.exe

windows10-2004-x64

1

nssm-2.24-...sm.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
nssm-2.24-101-g897c7ad.zip
Size 405KB
Sample260727-g4pqdsxamf
SHA256 99f5045fffbffb745d67fe3a065a953c4a3d9c253b868892d9b685b0ee7d07b8
MD5 63175d3830b8a5cfd254353c4f561e5c
SHA1 ca2f6782a05af85facf9b620e047b01271edd11d
SHA512 f25fcc7b37d64aa3bb44336182a343250bf7fe7df1d22795bc742ae1cce574d9bbbb22afe2ba4352df40676e54f8442ae2dc1516c58a7b42c6e5c464804cd342
SSDEEP 6144:TLzumLBsF+ymeoizDG1uLx8DMuxCoZ74JnySmcBzrVvqoR:jPXeFyKWg+F74sChEY
TLSH
T1D6942302D35A0865C03F6D7AB10E8E07FC5F97134986DA933A14D64E19DE1E7868BE8F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

nssm-2.24-101-g897c7ad/ChangeLog.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

nssm-2.24-101-g897c7ad/ChangeLog.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

nssm-2.24-101-g897c7ad/src/env.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

nssm-2.24-101-g897c7ad/src/env.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

nssm-2.24-101-g897c7ad/src/registry.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

nssm-2.24-101-g897c7ad/src/registry.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

nssm-2.24-101-g897c7ad/src/settings.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

nssm-2.24-101-g897c7ad/src/settings.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

nssm-2.24-101-g897c7ad/src/version.cmd

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

nssm-2.24-101-g897c7ad/src/version.cmd

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

nssm-2.24-101-g897c7ad/win32/nssm.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

nssm-2.24-101-g897c7ad/win32/nssm.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

nssm-2.24-101-g897c7ad/win64/nssm.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

nssm-2.24-101-g897c7ad/win64/nssm.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  nssm-2.24-101-g897c7ad/ChangeLog.txt
- Size 8KB
- SHA256 0a1c351ea5f1daaac6e909686d1244bc72274a9f0190aa6e769cde95e689331b
- MD5 18a2b15fbe354823cebec12d241e0c28
- SHA1 9ea3acdcf0c538c6628090827e662c31b489e223
- SHA512 a5664d7dc3a6f33c9695671c28563f265d5a7a2d6613616ee3ff10ba0c644b1e9ad7ba442b7157fdf1827c1bca88375257003c7d04f529173636793e758dead1
- SSDEEP 192:7GOasBIBUT0rTh/WACTx7pyMOr8v2Xqd15Yg/h7bOg:3NORWFTLyMOr6HdrJhD
- TLSH
  T1A90285872D0B53B656F3C1546E59A2A6D31B01FF9209205035F9828C2F714DEA3BF6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  nssm-2.24-101-g897c7ad/src/env.cpp
- Size 7KB
- SHA256 e24804a0b6944793590e3fc0daea99f92b33fb525bfa3acc2bf6948df7c28849
- MD5 6265e20a24c71868c040449eead352c3
- SHA1 aababf0e344c53fa0f3cd74b795161cc2b11faa1
- SHA512 943b15c58894d20ebb0bfd0bc2cc7fb680da8bcdeaa3ec6dbc826c1ae40d6428f4ec988495d3a994ac277bb82867b6c9932c7b37fc33681d681d87fa47e54f43
- SSDEEP 96:jbN8zgZslcjuM8dAWtmQT/twOK12Wj6KcoP5d2fSdWajWoYdmU3huFLtpxB:/ikHuVV/KX1cE2qdW4WoY4U3hKLtpr
- TLSH
  T1D3E11445152AA1A32F74B2389A0CAC7ED77193331FB921E0B4DD48006FC9A7D16F8E5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  nssm-2.24-101-g897c7ad/src/registry.cpp
- Size 41KB
- SHA256 bb616a1887dfc9275fe347c8fe0d75b38c3c28e05dbcc5f15e5980809dc9ff1d
- MD5 f30ee559bf68027cc1890b8b4545b255
- SHA1 bc33b6c59766fb59561998b59fa57ecccac55db4
- SHA512 4ea710ce41f7e7dedd5ce18475441ba1f972611d3e508a5a2e3d53f527854a4892493ecda2a49665e2febb584aa3cb0266844e467c937b9cc733c251958c60b9
- SSDEEP 768:O2G6MoLODHgQAgsXs5HF+HWmu+c1KKS2r16aDBs0CtZpss:OKMoLODHgQAgsXs5HgHWJ++KKS2r16aC
- TLSH
  T1851375CF9995BC7329B852766E52880BE72E0492272F3531F2ED06502FE187C91F9ED4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5 behavioral6
- Target
  nssm-2.24-101-g897c7ad/src/settings.h
- Size 1KB
- SHA256 bc0f9f3582d6cbb1a57e47de59e550d499bca04ee3dc1270c0bdb24eb2549aa5
- MD5 15c77514d36c991c1902c3b24fb39a48
- SHA1 f0bd84326ad48ece5908ae11c0e8bb667a711aec
- SHA512 721a906e6ddd717ee19d8ab134cbf92e9595582d3b4de99267d5559d2127508e689f88e71184586c8039997e25e1578e9f85ab63993f43583e8c097e2b4585df
- TLSH
  T13131691A6E91A4A06871E4B4443E4D434525C9A73F3ED8BC716E0E142C56D8C80F7BFF
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  nssm-2.24-101-g897c7ad/src/version.cmd
- Size 1KB
- SHA256 15b426e1c03c0976c9b133f82553da5c7e9cf3320dbb3b5cf269854afc80b548
- MD5 3e67b67b2ecb2d3042dfaa7d216883b1
- SHA1 1e857c1fac7a99a8d280e219e9a8f1bd4d315a5d
- SHA512 6482ee84a35462f38468cf3d4e31841524d4ad4b1bae9ac24df6f24c74676a8fe8c3999461698ec4e29bcfc57c9e1348795454edc9d95380c020dfdd5ba71407
- TLSH
  T19031D98B1A87993358AB2237BC2842467770C1722317C89CB4272A8867874E9A3F17C9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  nssm-2.24-101-g897c7ad/win32/nssm.exe
- Size 317KB
- SHA256 682f1025b4c410ae78b1c5bdc4de7ad315f2eff292c66947c13969930028c98d
- MD5 bd3b9dac9198c57238d236435bf391ca
- SHA1 e0b966cfbe9e804319cfd3b756b12ad8a2294b24
- SHA512 81216cb8dae5a66d07b60c7d4efa598a47120ffec18a92c5355ea09ce8514d54efb57b8320aa61b2b20f654c913b7188755b445d6f3d95fcebfb1c2b9a3b20d0
- SSDEEP 6144:H1NJihCejVOjAG7awRtleN6A7kWxzGAnw+iPSWSHCGXkJqKLWr4ZrDosNX0:V8OywRszGAQGXkJqKSbsNX0
- TLSH
  T11764816163E89A21F5F77F70687942211F3B7C929E3DC18E1290956E2CB2E94CD707A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  nssm-2.24-101-g897c7ad/win64/nssm.exe
- Size 360KB
- SHA256 eee9c44c29c2be011f1f1e43bb8c3fca888cb81053022ec5a0060035de16d848
- MD5 1136efb1a46d1f2d508162387f30dc4d
- SHA1 f280858dcfefabc1a9a006a57f6b266a5d1fde8e
- SHA512 43b31f600196eaf05e1a40d7a6e14d4c48fc6e55aca32c641086f31d6272d4afb294a1d214e071d5a8cce683a4a88b66a6914d969b40cec55ad88fde4077d3f5
- SSDEEP 6144:0I6VyDGb+HiFr4kchE18dkuCj7jLwcYBQarDosNXJ:0IJDGb+Hiu9hE18dkxfdsNXJ
- TLSH
  T1C374715263E80664F1F77B70997A42229F377C919F3DC24E0290956E2DB2E94EC34B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

© 2018-2026

Terms | Privacy