5a84271e1df1debb93e66067f6fdd582514cfb7333a30ba3d8c1c327be01886d | Triage™

Login
Reports

Overview

overview

7

Static

static

5

guideBGM/korede.exe

windows10-2004-x64

7

guideBGM/korede.exe

windows11-ltsc_2024-x64

7

manual/audioio.html

windows10-2004-x64

3

manual/audioio.html

windows11-ltsc_2024-x64

3

manual/menu.html

windows10-2004-x64

3

manual/menu.html

windows11-ltsc_2024-x64

3

manual/onsa.html

windows10-2004-x64

3

manual/onsa.html

windows11-ltsc_2024-x64

3

manual/settings.html

windows10-2004-x64

3

manual/settings.html

windows11-ltsc_2024-x64

3

manual/tutorial.html

windows10-2004-x64

3

manual/tutorial.html

windows11-ltsc_2024-x64

3

message/in...ng.exe

windows10-2004-x64

5

message/in...ng.exe

windows11-ltsc_2024-x64

5

oremo.exe

windows10-2004-x64

7

oremo.exe

windows11-ltsc_2024-x64

7

source/gui...de.tcl

ubuntu-18.04-amd64

1

source/gui...de.tcl

debian-9-armhf

1

source/gui...de.tcl

debian-9-mips

source/gui...de.tcl

debian-9-mipsel

tools/frame.exe

windows10-2004-x64

3

tools/frame.exe

windows11-ltsc_2024-x64

3

tools/libs...-1.dll

windows10-2004-x64

3

tools/libs...-1.dll

windows11-ltsc_2024-x64

3

tools/mfcc.exe

windows10-2004-x64

3

tools/mfcc.exe

windows11-ltsc_2024-x64

3

tools/modifyPre.exe

windows10-2004-x64

3

tools/modifyPre.exe

windows11-ltsc_2024-x64

3

tools/orem...er.exe

windows10-2004-x64

3

tools/orem...er.exe

windows11-ltsc_2024-x64

3

tools/orem...er.exe

windows10-2004-x64

3

tools/orem...er.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
oremo-3.0-b190106.zip
Size 10.6MB
Sample260729-fy7tcaec34
SHA256 5a84271e1df1debb93e66067f6fdd582514cfb7333a30ba3d8c1c327be01886d
MD5 2fbd844f2698a15db36fe307691e3395
SHA1 cee1d4c8c25e2ce899fd9c140c9bf5f31145156e
SHA512 93f7f4608671a3a2ea5d345eea30477b43aa1566bee013e32616164f135cc5541371ae6bac2a9b02e5bde207868a9897eb7f550e7beb1478783d813c0b34b546
SSDEEP 196608:ZDGTDb5TdnUjqTa6icyy9lnvU7qTa6icy8lnvu+w4AGWWcdxrhz7mUXA:kTDb55USa6iGxa6i284AGLEh2sA
TLSH
T1E2B6339B70314F04F1792E7F943685E8FF62130BFDA89351475B1418709BA8E4E9ABAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery linux upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

guideBGM/korede.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

guideBGM/korede.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

manual/audioio.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral4

Sample

manual/audioio.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

manual/menu.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral6

Sample

manual/menu.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral7

Sample

manual/onsa.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

manual/onsa.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

manual/settings.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral10

Sample

manual/settings.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral11

Sample

manual/tutorial.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

manual/tutorial.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral13

Sample

message/install-newLang.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

message/install-newLang.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

oremo.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

oremo.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

source/guideBGM/korede.tcl

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

source/guideBGM/korede.tcl

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

source/guideBGM/korede.tcl

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

source/guideBGM/korede.tcl

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

tools/frame.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

tools/frame.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

tools/libsndfile-1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

tools/libsndfile-1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

tools/mfcc.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

tools/mfcc.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

tools/modifyPre.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

tools/modifyPre.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

tools/oremo-player.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

tools/oremo-player.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

tools/oremo-recorder.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

tools/oremo-recorder.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  guideBGM/korede.exe
- Size 2.0MB
- SHA256 1d07b88474aa1e6aa261ce838353832d44aebca8f33c1132124abefc0ba29c4a
- MD5 547508665931c838772b9a1afe476981
- SHA1 4d89dfdee9c22435f90d249e2850f61a318a28e1
- SHA512 d7f1f002ac00f2b73de25ae9df5697de71e74302a9713a545f8b17b832d18eaaa360ee975ed61f9f602e978e19a472ce2afbc36c9413f48694a6805ede84c1bd
- SSDEEP 49152:l6afQinE/+qFcF6jJR8hcwLNMsI8wiHTwa:lJnEBD6hcwLNFI/iHTb
- TLSH
  T173A533C3B20076F4FA7F2F7B0A278BD81E06E145A96C1B84E365D60DD43139BDE91992
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  manual/audioio.html
- Size 1KB
- SHA256 16e08dd04a5c30790332eb74d9449bac2847b0b4849046b02feec94e3ead64ff
- MD5 b9e8c898ec0360fe3bdb611ed48fc26a
- SHA1 6292fae01d7997cfafe8e0e6e62b9f8477bfbeac
- SHA512 f4f01b5e6c6910d9fcac44a795e8c117827c2964d04bea0580e107517cf4cad92013d960fa6e9be3eb0cbde4650776122bf1c36d5a39df5daa5da45a9db5e5b9
- TLSH
  T11441C9B398C1AC1E852B032462B2AFCFA6B146C30544A465B90E57CF1FEFA863763481
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  manual/menu.html
- Size 2KB
- SHA256 5b9824efd71dce5a690fa159b60aa7345ad640b6a24515bd4a9a3f943bf4708d
- MD5 6edfc92ccee47105572f32a26323232a
- SHA1 59573c549dac6343f6685980c861bdb9135d3792
- SHA512 5a02d04c1234d7265ef7b271765b14c77ee965ba181ac18ed7ee603acc34fe4dd9d9147ceaffd8f7851dd37887673a6ad8b0808b92af9ff81e5bcf82cb60366f
- TLSH
  T15B51DEA1DCC1BDDF9697223C50527C8FC7D282B3AA30297A6107694FCD6F6A067234C6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  manual/onsa.html
- Size 1006B
- SHA256 343166d4f22d95e457fe5aa33e69cb58571c7762ef6356f639222ab1d4348d51
- MD5 8c88bc709587a6e45074b6d4f24cce92
- SHA1 30110a7661d116030c8c67dc3d1af7072f432142
- SHA512 7f1273c7f7f9e00694bc31974a5098edaf0aa1c9a85c6d876dfe21971b5d491535803895faf9343e503c1255bd84b33d68917d86b08d9bfc71874f15cfa3aba9
- TLSH
  T1E911E2B5D9C07C4FD69B733460A394CFD95186E14A090457D912928F5BCEA453F662C1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  manual/settings.html
- Size 3KB
- SHA256 e479781dea974c3f5b05b6c9c736e1ef3c4c549c539c0f9f5ef008a5ef59598f
- MD5 6568d5cc818e5a44541fd8e96e9bbffa
- SHA1 8af2eca9e0509270cbb599c288b15d25e9131392
- SHA512 042820af0f8736096e27b7c48fb870add462f244f2ccde34e8c0d53d66aa9c96020fcff0595bc3a4bea2c80a30f1c848231b07fe6f0974fc56f0e9f2a3fcbb93
- TLSH
  T1A8819D9368C1BE3AED9B213A5461BE9EC3D08572557514793D074787CEEF4B293230C2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  manual/tutorial.html
- Size 5KB
- SHA256 e3cca822f26b4a21c8e08a52fe840a89557a6f9622a3cd479df5300fdbf13688
- MD5 4aa33a37f876a939944447677218bc3b
- SHA1 2d3566cc07fa79c89fb2d4a4a7e475a6180b62a6
- SHA512 ac2e2f397a69dbc8e61dac83c6907f4d3ea1c0da7fbe73dbc94d57b6c0d5532b3e4dfca33e3ac957deda1c258843e43ddce527780f16f505a418624e2e9c9bdb
- SSDEEP 96:Xg0gMw49ZkWSQFc9UiGVtBbpwFYz0Q41DxwklvkQeIqiiqWBo3Vr4UX:7g0nFc9UiK79aYwF1DxLl8QeHiCmNX
- TLSH
  T171C14FB2CEC1FC2940AFD33C8171BF8DDBE102A11B6A65A1381FA68F1F995504B6F446
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  message/install-newLang.exe
- Size 2.0MB
- SHA256 c0c783a5969171f531cb6070235f6e1fa67fb43f97155c13e415459a4dac6d55
- MD5 696aea5f782b88e827d186b240368167
- SHA1 4c700bb5ffdc4ae89707f2118b47ebe4b2a4bd4d
- SHA512 8079e499c8e4c3dfeb35528a2f4de5daa2f41dec3f3f8a0c6a3fff5cf86d0e907d260f01521db32a845624c58a6c6ea14153a774d42d6d78a4c2079090491a28
- SSDEEP 49152:l6afQinE/+qFcF62ORrucwLNMsI8widww2:lJnEB1BucwLNFI/idwd
- TLSH
  T11BA533C3B2007AF4F97F2F7F0A678BD81D06E145AA6C1B84E365960DD43039BDE91992
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  oremo.exe
- Size 3.0MB
- SHA256 8fd862c31657311ae9506d792d406a13a9264d19efbab35d8b8a0ee4f9dbb55a
- MD5 978600edfc50124759f877a5ebffa3b1
- SHA1 86122b4346df2cbf2fa22958fc40a68e07d3c25e
- SHA512 b0d27d3b9a86d52f309f302bb3fd2cd054f65ff890b4d00dc791f78c0eb319b51ef93164618a60f2941eebb5ff2c5e167d6b87c001ffc65b06fa71c59ba49588
- SSDEEP 49152:kBN3s0T2J4CDi1zRRWHx4a78uUeUVb5vr3E5cbc6I8dTB8:cm0T2JIzH3uvUV5bWcbc6I2B8
- TLSH
  T177E523C3E120C4A7D16A9E35CC23CAFD41557D47EE2E56EB118CBE57313C259B8A8B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral15 behavioral16
- Target
  source/guideBGM/korede.tcl
- Size 11KB
- SHA256 d33e195351d7566ca44c4b65d6118030a4d0be9ff718b9d997ac2f825e74993c
- MD5 513e7725de6828f515ef7c8c5239204f
- SHA1 e315cc310b1e22549c5b56d4b470789cb97faf03
- SHA512 ddd5b9f3f5c2b258f5420301ebbb2f0b176cf8056f3777580c679581ef9dad133cc9ac13d28b98138a2695fb6e7d7628b3ad171e7c71ae373acf71d3bafcf65f
- SSDEEP 192:Uxos28FWQ0ZfF87kwLN2LOiRLuOTLOs19lpdQH:IL2Mo9/L5tp+
- TLSH
  T1023253CA1C907C19E085C03ADDE7E60DF76BE54AA3CAF609F0DEC2BA2B4455528EC5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  tools/frame.exe
- Size 11KB
- SHA256 4ba5cd736be284eb55281d785e07bb9d1e785d3e29fd49fd9f0d30900d0add51
- MD5 21aa772bf981867dc40b62c9c955da94
- SHA1 b8331c6fd974557f9c1e146fb7290f3c25fbdd1b
- SHA512 8236d78acc369f0aad24fed712774b8e1746c05cbfa56bc28ff1eacf123ed81739c4447f24df107d8df98e8977de6eba343e32a7fee5737ea59c9c2347e33945
- SSDEEP 192:SezUXdAAjMLbMjym9jTLUaKwUUT7LRWCSLqqaYl:cBMLby/QajPcCSLqsl
- TLSH
  T1CB32E69EF506A8B3EC3765B548DAE5BFC379E421CD238E25FB0C16046A27845B22135F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  tools/libsndfile-1.dll
- Size 2.2MB
- SHA256 600f11a53fec83217cbd4bb7e44e7b930273da1b1306213c7a977f9b80a72718
- MD5 e443a67e0e4747e62c14ec030162673e
- SHA1 6d6774f97e28b5b68e02e76c54005926123ec591
- SHA512 c38aa930875a68b69bc829dbf3a2b8f8e517bb4303bc87354198065f9e912baad501e08d43ad9901c1324355a86e1a372042b6b6576e59dd174cb0ff0b297a1c
- SSDEEP 24576:Dj6DH/quHbBB/N6gh+1IHqY06eIXYTD96kPE:HA/quHlB/EC+1IHjITRv
- TLSH
  T1EBB5500799838774C47D60B284DB957A13312D0D9D805F9EABCCE97072E3534BEA2BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  tools/mfcc.exe
- Size 20KB
- SHA256 07d869d915cd3c55bd5d3efecceb7119c038cb93847956c4e0e01ec62a08d5c5
- MD5 fec650ad9c4c6135a3649e170cc7cb4a
- SHA1 8a92b77a6653514cc257cba9cc19cea3cb7780a0
- SHA512 c01c0e8d51746327e7add0aaa612a62104e8f28b325c1044f7bb77b17547f61cd3601b9ce5dfbb08f1a837bc27128f2240d55955d149252ee48e8899ca72d959
- SSDEEP 384:V/bHo3zfE0GBjb8chn1LMzi7zAy53DDvVYXqQ9:NBs+1LMzi7zzzjV8
- TLSH
  T18692D55DEB8790F2E8330971A4ABD2FFC3A5C2928C119915FF0E1659EF23F11A528791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  tools/modifyPre.exe
- Size 14KB
- SHA256 80cc4cda5da11f1d37ebd72c989b175e7c98a47346ddf0c6d648f7b3ee8b8150
- MD5 89b82c41f10a469c29bc5ac7ef24c4cd
- SHA1 5a8341323b6866e4ff4bde0131844eb8a96f373f
- SHA512 bdb63f911bf7537b64158e2cbdf2b3a5a0df96136f7eefa0922bc4ac77ec60ae6393ea82d522b9bc589e71db91761701843e33f27d7bace7f90060634e575263
- SSDEEP 192:8vXuqGqxuwuw0yZ9crJE1zqsaPUbQmdYmQXcKsTRUT+AjnbVOsDu7:w7xTDznGk6P4QmTfTenVRu7
- TLSH
  T163622C8AF64774F3EA22917484DAD1AFD3BDF001DC139A89EF0E6511B62B826A125743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  tools/oremo-player.exe
- Size 75KB
- SHA256 89e4ecf4d2b44d9ec9a2c6349b6fd7b9b76671932c5fde833ff6b69e18318190
- MD5 80d7506f2b6e0a28d707ac2ab737ef49
- SHA1 d89bd1197387118faae7df530ad8825bf6fd0d23
- SHA512 7316192ab007811115ceae9a5dc9ffd0dbde4edfc174333de0c996a4b350d2dd3ac41b6655df61d3a77b69ac2cfb965b9765308361197d9359b0a3f6f71f5f81
- SSDEEP 1536:eUHt9KBWX7/a6hIpgpv0LiPR4q4Zch+P8qMn2B/CCx7:eUHt0BWza6hIkUY1h4P/CM
- TLSH
  T1DE738E25B781D071E057253066AACBB75E7A783256B88487F7A81B3F1FB03C0177939A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  tools/oremo-recorder.exe
- Size 72KB
- SHA256 72d5d0d2c8d1377115ceb29e1a2ddc89e941c39c7ff0936606c1cacb9765832f
- MD5 b85928b935cd62715c3f9f1c5221e5da
- SHA1 ded1af5107103ec97426cbe1a7a24a9fb22a0fae
- SHA512 b2cfc2c823f2ceb0472c2202f64629964dd321006bac7bed4bd40df7eb2d940daa27cdf89f0cdc2fa85f574f80e79e0802b8a45fd8b8130376a526381e5a305b
- SSDEEP 1536:2gKSCS9L1+Hl6a6RQlDCmmp/jrwu5VORCPeTOnyBht2:tKpq+Ea6i1ERVcdht2
- TLSH
  T168738E21B680D031E45725306ABACBB24DBE7C3256789487B7A81B3E5F703C05B793DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy