366962dc2e090af9079b3c78d17584ae0bcd3216f9ed124d3087dfcd6b58b9d0 | Triage™

Login
Reports

Overview

overview

5

Static

static

3

submacros/...32.exe

windows10-2004-x64

3

submacros/...32.exe

windows11-ltsc_2024-x64

3

submacros/...64.exe

windows10-2004-x64

1

submacros/...64.exe

windows11-ltsc_2024-x64

1

submacros/...ers.js

windows10-2004-x64

3

submacros/...ers.js

windows11-ltsc_2024-x64

3

submacros/...or.vbs

windows10-2004-x64

5

submacros/...or.vbs

windows11-ltsc_2024-x64

5

submacros/Status.ps1

windows10-2004-x64

3

submacros/Status.ps1

windows11-ltsc_2024-x64

3

submacros/...und.js

windows10-2004-x64

3

submacros/...und.js

windows11-ltsc_2024-x64

3

submacros/...ro.vbs

windows10-2004-x64

5

submacros/...ro.vbs

windows11-ltsc_2024-x64

5

submacros/update.wsf

windows10-2004-x64

5

submacros/update.wsf

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
366962dc2e090af9079b3c78d17584ae0bcd3216f9ed124d3087dfcd6b58b9d0
Size 1.3MB
Sample260730-py86vaap6t
SHA256 366962dc2e090af9079b3c78d17584ae0bcd3216f9ed124d3087dfcd6b58b9d0
MD5 bd0914569a89fed796575e161a5bf9e7
SHA1 d694f39d307ac4bc23db0597dc096535c76077cf
SHA512 50ce4dbb119aa7241e2722844da05bafb6e1ca313efc04be44c8fbcd99b9d5b573177a008ae3c9f4ce677ac159dca51736be24f04557af218c68bbc644780969
SSDEEP 24576:/QYsOj4li62jyFYSoYINnXjDSKJ5+iE2fsHoolsOutRpAq6IJNJTFXNWUj6biFe:YYd4IyF7EjDjJwiE2YlQ7pAq/3JNWUjC
TLSH
T1B95533499ECF6E94BFCB4BE620B0ABFB5DE80099835B43DFD344292E4241065469DD3E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

submacros/AutoHotkey32.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

submacros/AutoHotkey32.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

submacros/AutoHotkey64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

submacros/AutoHotkey64.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

submacros/PlanterTimers.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

submacros/PlanterTimers.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

submacros/StatMonitor.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

submacros/StatMonitor.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

submacros/Status.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

submacros/Status.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

submacros/background.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

submacros/background.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

submacros/natro_macro.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

submacros/natro_macro.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

submacros/update.wsf

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

submacros/update.wsf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  submacros/AutoHotkey32.exe
- Size 957KB
- SHA256 05fcaf6f09b9fe4b85887f75183310d34166a0b854ca0907b497808be7b8f87d
- MD5 8bc086a1ce0b394de31cd415a3cd0e87
- SHA1 620fbfc0fce8067a9af12c0e3267f8c17c658d6a
- SHA512 0f989b2584fdbfde2ea01dd0ac7ff7c51da0063ab01c57053ddf15547ba7187f2795d5013beff558431fe0db0a1a0af991dbc4af455cd86ba7d4676366104237
- SSDEEP 24576:UnbyRuLHeIj86TTuQbyB3+vETrGNW8NxqxYk:2yKgqEvGNW83qxY
- TLSH
  T127256B53B3D3C1B1DFA215F3D5B66B369939F8380B2889CBB2D4582ED9A05C05B36706
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  submacros/AutoHotkey64.exe
- Size 1.2MB
- SHA256 37ff15a23a98f0a658298e21f1873ca896a05208810bf796f90ca212ee07c7b1
- MD5 825448610a8213a8408578df2361d5eb
- SHA1 f43875855e4f02010ad6c755067b813d0fcbe68a
- SHA512 7556143128878b2e765309db8b35cc8206d325c0c17c37b191600bd8f719a923b0f917f4c53f0946ed2d12136a9e42774246595eed78f1038779fdcbd3736eee
- SSDEEP 24576:Ve1psX+O47m4ffJhxZ4rBcRyMlc/SsVNGgMxCRjU:Vek+bi4ffJhxZ4axcbHGPWj
- TLSH
  T1DC459E4773E7C1F8DA7B81F6C5614226E67178600B389BDB25A0862EDF63ED04E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  submacros/PlanterTimers.ahk
- Size 36KB
- SHA256 50ecab75c4da83c6a2a91409bb33ae54661591ece65348facf1c80a8e2de5b5d
- MD5 4c507e7f6e8b370ffb1e76fcda41fdc7
- SHA1 f739a6fbc55b374bbd3f5445516316aa1f80a2b7
- SHA512 c74555ef9a4f0f1993f9dd1be486340c9cda0fdd8e71819e2b09fde40a9c719e6b7bc2fef55a822c8d84546b29ba582d3caadcd49ff0a503ca569c8b9ed2577c
- SSDEEP 384:vKq3vSx7IhKd78l6MLMga4RC1QXdXLDlt30Uw+Zmuse7svWD8V0NjCqso2CzXzPk:Cq2L8l6MLMga4RBVTz/TD8VojLd5o
- TLSH
  T10AF2511DB827182B62C326E9BDB10D80FF4A8352C07594592AB605F3E9EF47864F9FD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  submacros/StatMonitor.ahk
- Size 72KB
- SHA256 466ac3d23cc2f002df56c1e41ac685646b8308013d429b91c4bb68d4edcc5f0a
- MD5 c414285b6ceb9021737ed4bce078bfb8
- SHA1 8a8dbda9e4558450f94a93e8cfead9dd143ba5b9
- SHA512 6c87cdcdd8d07c9670fb8a4a8062036de46dcbe4e6778b1926accf480260517893cbbac12ce6952248cc2025e8c81eb607d4b427cbb74c62bd7a9fd91802d9e1
- SSDEEP 1536:nQtuTLLP96GZ3SZanYW2Oc9R9URVH85xo:QtuTLLDnYLOcdUjoxo
- TLSH
  T19173C81FB70F0E99C6D1D98EB7346ED8CA6AF443A4A305C9E722F6E841DF510819C399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  submacros/Status.ahk
- Size 172KB
- SHA256 bb0c2a4b31ca1b0e550e8ccdd6e95fa31d15244b42656d0709cd0bc2933c85b7
- MD5 0f90a55216c70b4ce48d0d1bcaefd356
- SHA1 ffdcefda9ff982b872426652be5d47a64f3705ea
- SHA512 a01afe3f193cacff71eb53dec1915f79cebe1de695bdbef2278d836a55db33b53bdb7fb3e964df75dfabf92d87709b1efc71ff265c5406ef4482276de7a27c90
- SSDEEP 3072:YxPo6iUUcV431Oi1txYKNIK02qDHObEKTzgkp+x0EkGUJcYKkqPs5b:+YdHbiDeR+x0EZPs5b
- TLSH
  T1F9040912B10EB03E02E710EDE5F53E506E1CD6B4A3FE043A73B6C394D6AE45590B6B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  submacros/background.ahk
- Size 16KB
- SHA256 d2fd7e1393691c4f3f6d899f24efc4e3bfa6b8615f9a2519f627cf2aed901d0d
- MD5 f1fa8abffb5d03c86577c16cd44e7bc0
- SHA1 196c5b84b15ebb80d966fc04a6e4d66f5c7f603b
- SHA512 c1a6238ddc6ac1907695bf05998396b8bfcf315e2f397523637fb75a450ec768cba962a947c7b73294c0c9ee09d241a5e0031fa5c86bd4480ff5bdf112521fbd
- SSDEEP 384:vKqH/J1K/PhqWXJOgmAo/1quIx+bHkS6/8FFw:CqHTKwomAo/AuIx+rN6/J
- TLSH
  T1CE727659B90E3E0F9293615EAE31A6894D6EF47801B501D13FFE70CAFAE522140647BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  submacros/natro_macro.ahk
- Size 871KB
- SHA256 0aba10072f3b1c9b0d7ce78b1ab89ef599bc0055c7ac2942c6d540d9e2e33e3a
- MD5 d9158d81fdb2d47899f660681750633f
- SHA1 edee86fc203e58e99c74d8935202b9ec13c39a01
- SHA512 a730233e5dde5e79513b91ed32db49d83442988b32f9a8c9c71295e748e78017c4aa640d71178030f6dea2e7e5f1c2fad9395b0363c45a2559298adfb700e4a9
- SSDEEP 12288:5PVpFa6P2EKFM5XaQ0+pXsUb3eQsDBhPizLivS:TpFtP2EKFM5Y+pXsUb3ejib
- TLSH
  T15B152930F10F083B42A3655EAA702AD1DF0DE071C1B901E9F6AD52FDAA8F8154799BD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral13 behavioral14
- Target
  submacros/update.bat
- Size 3KB
- SHA256 6ab41f52393591f9b847241d5b0f66e38a17045c218b5d55071e2ac7cb36eb36
- MD5 ff05dde1ba3a679b58b3631ff7cb2631
- SHA1 dc410f1600cdeacf0dc3da05e5d897f2f1bf9096
- SHA512 61dee1798e0d943c162810490ff7ba294d3e92aa94bb9573ee5b8044e890af2b9e985aaf4f07692bb49948fb3e0631e7df7197b7360419c7e0cb1de7c06011fb
- TLSH
  T1B381EC073908C0D10FF647F549240797EB4AC19B5B20DD9FB8AEC0904F7619A6AF92C9
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy