2817b7733239db0a11ea2e10e97f2ad0649af895826ba86ca525e3876565bf39 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

optimizer ...iv.zip

windows10-2004-x64

1

optimizer ...iv.zip

windows11-ltsc_2024-x64

1

Pack Full ...IA.txt

windows10-2004-x64

1

Pack Full ...IA.txt

windows11-ltsc_2024-x64

1

Pack Full ...ignore

windows10-2004-x64

3

Pack Full ...ignore

windows11-ltsc_2024-x64

3

Pack Full ...50.png

windows10-2004-x64

1

Pack Full ...50.png

windows11-ltsc_2024-x64

1

Pack Full ...fx.dat

windows10-2004-x64

3

Pack Full ...fx.dat

windows11-ltsc_2024-x64

3

Pack Full ...rm.rpf

windows10-2004-x64

3

Pack Full ...rm.rpf

windows11-ltsc_2024-x64

3

Pack Full ...re.pdb

windows10-2004-x64

3

Pack Full ...re.pdb

windows11-ltsc_2024-x64

3

Pack Full ...re.xml

windows10-2004-x64

3

Pack Full ...re.xml

windows11-ltsc_2024-x64

1

Pack Full ...ll.mdb

windows10-2004-x64

3

Pack Full ...ll.mdb

windows11-ltsc_2024-x64

3

Pack Full ...ll.mdb

windows10-2004-x64

3

Pack Full ...ll.mdb

windows11-ltsc_2024-x64

3

Pack Full ...ck.xml

windows10-2004-x64

3

Pack Full ...ck.xml

windows11-ltsc_2024-x64

1

Pack Full ...ll.mdb

windows10-2004-x64

3

Pack Full ...ll.mdb

windows11-ltsc_2024-x64

3

Pack Full ...ng.pdb

windows10-2004-x64

3

Pack Full ...ng.pdb

windows11-ltsc_2024-x64

3

Pack Full ...ll.mdb

windows10-2004-x64

3

Pack Full ...ll.mdb

windows11-ltsc_2024-x64

3

Pack Full ...ll.mdb

windows10-2004-x64

3

Pack Full ...ll.mdb

windows11-ltsc_2024-x64

3

Pack Full ...ll.mdb

windows10-2004-x64

3

Pack Full ...ll.mdb

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
optimizer alba premium priv.zip
Size 95.1MB
Sample260729-ervprsgl6y
SHA256 2817b7733239db0a11ea2e10e97f2ad0649af895826ba86ca525e3876565bf39
MD5 e600f12ad85f43614ca152d564fcb92f
SHA1 86f910b05dcf2c072a51d7a9b0b68424e6927b6a
SHA512 5e7d6955dde068f7f334e294fc774831ca91b36e1302903c6b50b8e0b15666b658be066d5362dffe01cc574f76917c77292c9fef6f64106c4fdb6a67be1b7d10
SSDEEP 1572864:QAxDhSq/COZoEBWMCEpS33Q5a4Yc3afvQZC/ufKis4pS3rFTmgmJs0MbpYwTS7:QAxVXKOZvBWicg5Oc3VZCGXc5aJAdYwE
TLSH
T12E28F19DA2B691B4CA43077FCA1E6545B53CB08D61348280710CE4E817D6BFFD6AA6FC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

adware discovery execution spyware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

optimizer alba premium priv.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

optimizer alba premium priv.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Pack Full fps/10AppsManager/LEIA.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Pack Full fps/10AppsManager/LEIA.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Pack Full fps/Citizen/citizen/.gitignore

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

Pack Full fps/Citizen/citizen/.gitignore

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Pack Full fps/Citizen/citizen/VisualElements/VisualElements_150.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

Pack Full fps/Citizen/citizen/VisualElements/VisualElements_150.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Pack Full fps/Citizen/citizen/bloodfx.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

Pack Full fps/Citizen/citizen/bloodfx.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

Pack Full fps/Citizen/citizen/citizen_platform.rpf

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Pack Full fps/Citizen/citizen/citizen_platform.rpf

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.pdb

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.pdb

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral16

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Microsoft.CSharp.dll.mdb

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Microsoft.CSharp.dll.mdb

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Mono.CSharp.dll.mdb

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Mono.CSharp.dll.mdb

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/MsgPack.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral22

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/MsgPack.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Core.dll.mdb

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Core.dll.mdb

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Drawing.pdb

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Drawing.pdb

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Runtime.Serialization.dll.mdb

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Runtime.Serialization.dll.mdb

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.Linq.dll.mdb

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.Linq.dll.mdb

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.dll.mdb

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.dll.mdb

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  optimizer alba premium priv.zip
- Size 95.1MB
- SHA256 2817b7733239db0a11ea2e10e97f2ad0649af895826ba86ca525e3876565bf39
- MD5 e600f12ad85f43614ca152d564fcb92f
- SHA1 86f910b05dcf2c072a51d7a9b0b68424e6927b6a
- SHA512 5e7d6955dde068f7f334e294fc774831ca91b36e1302903c6b50b8e0b15666b658be066d5362dffe01cc574f76917c77292c9fef6f64106c4fdb6a67be1b7d10
- SSDEEP 1572864:QAxDhSq/COZoEBWMCEpS33Q5a4Yc3afvQZC/ufKis4pS3rFTmgmJs0MbpYwTS7:QAxVXKOZvBWicg5Oc3VZCGXc5aJAdYwE
- TLSH
  T12E28F19DA2B691B4CA43077FCA1E6545B53CB08D61348280710CE4E817D6BFFD6AA6FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Pack Full fps/10AppsManager/LEIA.txt
- Size 28B
- SHA256 b032253828ed1ed1916a7bd3fa445090921c433d2092aaeb39897311bf11bc90
- MD5 dad02cca21298e3a8dd46b3caba62e02
- SHA1 ceb98f77eebe1fb7464901ba0b6b3a1bdaceeba6
- SHA512 7d707a89256c5935706a7fbef884800ce4dffa539cffd43b91b293497c27fc05f17f80fe0f37f4fb82f296b597e27f881c3b535abf60023edabde8e16f7ded68
- MD5 SHA1 SHA512
Score

1^/10
behavioral3 behavioral4
- Target
  Pack Full fps/Citizen/citizen/.gitignore
- Size 17B
- SHA256 c2dbde9dbd997352352c133e987bcab56c8541317a9d3ea8a9e8e084685a01ed
- MD5 80ede27ada159902866463bb1e39a8bc
- SHA1 c0a0179886962811283555c85a161acc2af77525
- SHA512 80641ff715351a00d33e588bbd496ca905c3fce265acf41e0058c282e326d431688df5f7de4ada4667aeb91be1b8f822bd8a397b284869af4d32db391859a51a
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Pack Full fps/Citizen/citizen/VisualElements/VisualElements_150.png
- Size 11KB
- SHA256 ca558df74d90096c7d27b0a26a9e8e5cde46b617d247c9712652df4b69f758d8
- MD5 ec260aed5f9bcfb1df9a61d04d99e76f
- SHA1 21766b14646760ad845c91352308d49b647855e7
- SHA512 48e0eaf9df0555e49aec19018e1f6ee02af1b43429165451599c358d04f994e5c76ec83dc2b912d982f5e062a00299613550ef38f6cdd6c44704eb8986302a14
- SSDEEP 192:ES2hqzFfSP4cE2Ov+/lmdQY8X4cUPJ1E6Ar6l3SuvIHgghLAStKV56NOgZNzeDo9:D2hqzF6hOelmdQY8X9UPJ1EXITk/ZASR
- TLSH
  T10A42B05B51D40E7B97A014AEFBB6704588F9F5ABEB12022EF27ACB92CD04774E6094C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Pack Full fps/Citizen/citizen/bloodfx.dat
- Size 45KB
- SHA256 7eb01692781f18218aef4287f69fd9df341fdd7284681eab27f259f711b91b1d
- MD5 e408e6938f98a96369a1fb11aef8a547
- SHA1 631f1102749c6a7dc4cabd60a16fc18884ff189b
- SHA512 3c132bcc00b12bf2c48e9f90d3414117a37e9f6fb506effb5d05f37febd25492c21ef09e5d9838320f5870b4bd31493bc90d04c9ea79e78f6b943c63078af303
- SSDEEP 768:NMm6ro6AloooooooNoooooooxooooooomooooooozooooooo4ooooooo3ooooooR:d
- TLSH
  T134230D11AFCC93A20F70EC070AB5956CCEFCE5335C172269BACF4196B7796C9846E149
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Pack Full fps/Citizen/citizen/citizen_platform.rpf
- Size 11KB
- SHA256 6d12097b3b2a417062464e98353f8459e69bcd9353c0f22c5a8e3939db6bab04
- MD5 d03106fb1c73a5776bf7678c408a25a7
- SHA1 16934ae8c8fe6e0f4bacab7c2bfb8e65934a9d0f
- SHA512 37d6a4a01c07892acd7b54d85b14d7657c133ec56d42c5f643ecf640b349cc762eb20349cc958a8cf20853879fcb580e94e8772db3ef2f43b3a619ba2b452b49
- SSDEEP 192:Fh+DogMJ76vR6KGjsMk6SUaI3v/Ol2CcKhd208DogM:FhCOKHMk/U/3nOlw0M
- TLSH
  T1D832AEFC53EEB193E7006AFF7BEF73401BD245E3EF341A265A6923C48614EA84261564
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.pdb
- Size 1.4MB
- SHA256 1a188fc14a96f9f5dbac25e4c3645071238f99ab3bb6b129f7c00828807757e4
- MD5 12b1e6ef0e9bc577e3fa10ad981dec97
- SHA1 3002ca96b0c56330bf60fa0037aee670377dd887
- SHA512 c54be9d05225925448c71341ac7aec53d5d04c211f2610a2d33c9493c5ba9533d9585530b90cef9bbd70bbf18f7c97d9f685105ff6123f85748fef7b4c18198c
- SSDEEP 6144:CxtDG95zHjDS5m/nYcr9XiRI51G/fQuJJ4AVh+qFTB7vT1Bx0UsX3a757Hs7s7cC:QI5L/S5JJ/fF4GtrxOI7X76g
- TLSH
  T12365FD22DE970FBDEF0325BC405A092156B3A4ECE55687A347D0D239F1633339E6B269
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/CitizenFX.Core.xml
- Size 4.3MB
- SHA256 f0c6b29059c3ee64bac12b5467bcf61fdc674f49f5a220bc35eb0424bea4feb2
- MD5 d33e25393f2d9d7e57854be076d3a587
- SHA1 3fdb97784eb269a4d6d02b231849d278de2863d8
- SHA512 d29e2e073be6246a592b0fe32130ce0729cc9d930b475d83b7af3b496c6de804640ec0221b66fa803cf2bcc6a250d3fdbabf7e618a0f0bb3346992aeeea8df99
- SSDEEP 49152:BaG9a/E7S73bcvwYSNMdCqy2F8kOpqtzIWN80Kn05y6vxf8yf7Jy/ks82+:Hh80/5y671yg
- TLSH
  T1A92612157BC18E200DB281266E28B9C8FF35492722166D16348E2F771F3ADD797EF861
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Microsoft.CSharp.dll.mdb
- Size 9KB
- SHA256 cf11a85486f1ffd49fa6ab947d566de3e5a57fc51cc412ae2e3fad25fa796f46
- MD5 a5fd4fcd387871cfdeac53be2df37a89
- SHA1 67f3a88df4c62bdba29c56ac5b5f0b7666623124
- SHA512 088e721e1ea297f28b5f6962eca777f1b6a14e8dce3bd74c56699edcf52dac6d7893a155a3edf71be585c808e89f563aca4ad46b5601586bf5a04120367c3f10
- SSDEEP 192:9Uwu78ASArf+FaFUounL8wCBBY/4TMP+WY2:9O8pArf+FaFKngwCBBSPd
- TLSH
  T19E125D96A514D4EBF0867DFB4EFB8B817D2A73D3052FEE4A3845243040D6689AC0E20F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/Mono.CSharp.dll.mdb
- Size 428KB
- SHA256 2d7d24f82879fe0fbae2cea8844c28497f1d1cdf83b8d44e2c89ff796e7d2bc8
- MD5 4fc1cb3fb16c5628e85959e0526357e2
- SHA1 b6584d1644263ee4c55e540bce6196ec076f47a6
- SHA512 822a8571d3125baeac66bca8465790d653456cabbcba42e0061d705dfd4e849eb79648944d8a86724234f96ca1a9c56d6392161c833ff79f668632e5101a5a45
- SSDEEP 6144:ryYnJYmj81AK0+wQ47TBVWqUBpXYqlHLiygIjqNSDjErIh5A7Xn3KD9Gh+QXXUS:rygJY3X3mrkoCLljVyIh5ArnaDIwBS
- TLSH
  T11694284BF04ADA5F50637EF304FF0AE535B8A14426B7FA8DBD0B6924D0BD6421D2A172
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/MsgPack.xml
- Size 600KB
- SHA256 3ad561cbcba9b7da8991a9132bc9a22a036d51570129e729f238393ba33b538d
- MD5 b01b2defff08859297cf2cfc8d4eee17
- SHA1 4f533a702164bce501590ee330be3a2ad30a3d52
- SHA512 91b76194533f6a870b1b1d55bb6544f3a218e67d326f7a2379b7968aad3314850b29e449890a9c00070af26f01357da6528a785133ad4fd7146dd64b6fd3ab82
- SSDEEP 1536:ROzOlcArQL7o7eRwu7ZFo7A5wAY8D69JL6KdLXhtgyzgwtr5YOlp1CoEsP+oRz/z:W/d26yLXwyzNtNYOz1bwY
- TLSH
  T183D4123876C98E130CB3421A5D25F485FE3E0523704AA896B08D5F677FBACD993B7909
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Core.dll.mdb
- Size 157KB
- SHA256 8a6cd23e30b6461e65f0f4989da122f56fb44a2df2910187c8d0736ecdc76cb6
- MD5 0727aab2664e38b02e18f9c69f8c367b
- SHA1 1f292a49c086ae7f7682885507216571cdad9d1c
- SHA512 81a30b2412c0b2527e32f5003ba0b5a9cfbd598a413f16e00a6769cfce3c6d062f25b909e1ad2aa028b76c62d9d429070ebc52a91e338b2d67200c3f645a23a8
- SSDEEP 3072:Y2ui2qG00OzzndoqgAQ7V28ZedOoq8v5/MkOrFj:Y2uxG0Ind5gAQ7V2uQOF8v5/MkOj
- TLSH
  T1A5F34C60FD4104A7EC268C37443F8B4CEE74D0996616FF4FF2AC6864A9AF3879416792
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Drawing.pdb
- Size 6KB
- SHA256 35e998266ec8f6aa40c99103002c2f91e70fcfb2288133b688a7d30b938295df
- MD5 96af71c52f308f04f4bf9ee098f62b08
- SHA1 d9cffebb9b0ae95082d43f51717a142bcc0d66f1
- SHA512 bf92eaa8486eca2a4647873e00bdc9f80ba7e60f4d566b29e17e867f333d7d3eec8df535b42045d32216f83711364b98ffab9d07f062b1730aa100d2d162c16b
- SSDEEP 192:tMweG8g/wcaCuZdHzpEZLSobL1EiRetHAt0TM3zj:txe9g/wcaCuZdTpKGoFgtHAt0TM3zj
- TLSH
  T1F8D1877367B8D79AE547257A8424C48AB6B083142634FC79F2C82B30DD6F638C7B3165
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Runtime.Serialization.dll.mdb
- Size 37KB
- SHA256 376b2dc6a423e21bc2addfb88a16cfeb67812816e3f0286d46c483d36219d7a1
- MD5 fdd6ec300029f2433e1397be27599294
- SHA1 95b86f72ba91a9dfacd76b5ce73ce7099fbd0a98
- SHA512 89b54f333cdc1b2099e3aec2abc090c188737a107ad5ceb96fcabee0fa373fc507045032a9627feb9be43274025c0b9f53979fb522a49b86bd01475ab696b1c4
- SSDEEP 768:+8L8RU1aA1dJ84yC9DzIQweNyY4q/MgvkV0jNnodn51XX2Chz:ZL8RU1aenyUDcQweNx4q/MgvkVGS51WQ
- TLSH
  T1160309B47745A4B3C419AE3AC4BFEF456F70E1666F26EF59708009409EE73829A0362D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.Linq.dll.mdb
- Size 21KB
- SHA256 1594bb131690202db282d990a737e309c965f73c9ed242ac0b2ccd20b634bcf4
- MD5 da716f1c7a74443fba355010aa26d296
- SHA1 b0f6d771b95f5733accf0c91a958bc124ba29575
- SHA512 b54b993ecb9a5d5e13a1d9b381e1aa44e3044d72ea8f4686a76397a3958140d6e874e99772eb6474d5c44def8b2a3d0ca8f60fcb333d9a80af672962250122ff
- SSDEEP 384:Wie0sbQif+IFQhiklWaZ8ylLGYKtsjx2cb/2gb/UAa8J5cV2UwLd:WiFsbQiwTL84LVjx2cr2gb/UH8Jdd
- TLSH
  T135A20BB50B158073E4215E37C0BFDF84BEF1D262771EEE5834A95A80C6EB3C1692B496
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Pack Full fps/Citizen/citizen/clr2/lib/mono/4.5/System.Xml.dll.mdb
- Size 396KB
- SHA256 79ac8f82d43cd8dafbd6505711ced96f5d1f5560b2dc09aa19b6941338987e12
- MD5 f57c39ea92d01c1bbaed0948775551e3
- SHA1 6f99aaa26f8040783d0e5e7bb13f86253a3f1993
- SHA512 90c69722adda0304024be608762a3fecdabf09eff19eab25f7841c8156f7fa1d10e0b8c91bf7b587d08eee0c3061d89a08052e39ddf08aa135aef56926ffcaa1
- SSDEEP 6144:HgNCdYguV0TnugviOvzGXHsIOKABNtvee0bkF4c17uhGHkx3UTlvNalP2NFGWXXg:g0TnDNFfee0Cb1vkCrMP47Xw
- TLSH
  T12E847C727A4D1960E4279D3A483F8D877EBDA0297312EF1E72C8A630F6B73865C12715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

adwarediscoveryspyware

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

adwarediscoveryspyware

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy