Overview
overview
3Static
static
1soc-framew...int.py
windows10-2004-x64
3soc-framew...int.py
windows11-ltsc_2024-x64
3soc-framew...int.py
windows10-2004-x64
3soc-framew...int.py
windows11-ltsc_2024-x64
3soc-framew...sis.py
windows10-2004-x64
3soc-framew...sis.py
windows11-ltsc_2024-x64
3soc-framew...ent.py
windows10-2004-x64
3soc-framew...ent.py
windows11-ltsc_2024-x64
3soc-framew...tus.py
windows10-2004-x64
3soc-framew...tus.py
windows11-ltsc_2024-x64
3soc-framew...ion.py
windows10-2004-x64
3soc-framew...ion.py
windows11-ltsc_2024-x64
3soc-framew...ery.py
windows10-2004-x64
3soc-framew...ery.py
windows11-ltsc_2024-x64
3soc-framew...ext.py
windows10-2004-x64
3soc-framew...ext.py
windows11-ltsc_2024-x64
3soc-framew...est.py
windows10-2004-x64
3soc-framew...est.py
windows11-ltsc_2024-x64
3soc-framew...ase.py
windows10-2004-x64
3soc-framew...ase.py
windows11-ltsc_2024-x64
3General
- Target soc-framework-nist-ir-v1.6.6.zip
- Size 212KB
- Sample260730-xtd4xaec32
- SHA256 fbefe8a7cc6eb490fadec7b1de96b683e9f1658e310ac6631533e6fe25149d66
- MD5 43fb42e5669f086f8350993eb98016e5
- SHA1 dbcfe13f30536b8a04d5dc8eed3860860f2fe622
- SHA512 d944f77de2b927d561c9cb50a1c7855a5fa15a74613bccec54ea8573a6c7cfdfc66ce2e9465718f630d51c2923d8cb0e2c2ad8313799ab67184d80f8832c76a3
- SSDEEP 6144:FAVHo7g+qiB++QLXd37AOOgS/4Gc3tpudA0Otzp7Qo:FooDdQJE9gS/FSgrORp7Qo
- TLSH T18224C0FAA7983526C35E84B5F81C918584DE6D0BB861BAC71D808980DBE7DF4FB21346
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
soc-framework-nist-ir/Scripts/SOCFramework_ManualDeisolateEndpoint/SOCFramework_ManualDeisolateEndpoint.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
soc-framework-nist-ir/Scripts/SOCFramework_ManualDeisolateEndpoint/SOCFramework_ManualDeisolateEndpoint.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
soc-framework-nist-ir/Scripts/SOCFramework_ManualIsolateEndpoint/SOCFramework_ManualIsolateEndpoint.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
soc-framework-nist-ir/Scripts/SOCFramework_ManualIsolateEndpoint/SOCFramework_ManualIsolateEndpoint.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
soc-framework-nist-ir/Scripts/SOCFramework_displayAnalysis/SOCFramework_displayAnalysis.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
soc-framework-nist-ir/Scripts/SOCFramework_displayAnalysis/SOCFramework_displayAnalysis.py
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
soc-framework-nist-ir/Scripts/SOCFramework_displayContainment/SOCFramework_displayContainment.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
soc-framework-nist-ir/Scripts/SOCFramework_displayContainment/SOCFramework_displayContainment.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
soc-framework-nist-ir/Scripts/SOCFramework_displayEndpointStatus/SOCFramework_displayEndpointStatus.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
soc-framework-nist-ir/Scripts/SOCFramework_displayEndpointStatus/SOCFramework_displayEndpointStatus.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
soc-framework-nist-ir/Scripts/SOCFramework_displayEradication/SOCFramework_displayEradication.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
soc-framework-nist-ir/Scripts/SOCFramework_displayEradication/SOCFramework_displayEradication.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
soc-framework-nist-ir/Scripts/SOCFramework_displayRecovery/SOCFramework_displayRecovery.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
soc-framework-nist-ir/Scripts/SOCFramework_displayRecovery/SOCFramework_displayRecovery.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
soc-framework-nist-ir/Scripts/SOCInitializePhaseContext/SOCInitializePhaseContext.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
soc-framework-nist-ir/Scripts/SOCInitializePhaseContext/SOCInitializePhaseContext.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
soc-framework-nist-ir/Scripts/SOCInitializePhaseContext/SOCInitializePhaseContext_test.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
soc-framework-nist-ir/Scripts/SOCInitializePhaseContext/SOCInitializePhaseContext_test.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
soc-framework-nist-ir/Scripts/SOCSummarizePhase/SOCSummarizePhase.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
soc-framework-nist-ir/Scripts/SOCSummarizePhase/SOCSummarizePhase.py
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target soc-framework-nist-ir/Scripts/SOCFramework_ManualDeisolateEndpoint/SOCFramework_ManualDeisolateEndpoint.py
- Size 1KB
- SHA256 73db801cdfc3768f704de320c6e36330365409b0b594b19e0319fb3f9233ca46
- MD5 810d7d2e766adbbda961930521e22eff
- SHA1 d9275a3a50993b9def58293ce9ba5b7b153319c7
- SHA512 beb67d270e5a12232dec4571d9acbad7c93c892b80aca5a143310ee8e070e8cb3f45d10c47d7f2ac988bdde7040c7252e57e4357674892851ddbaebfbb81a78f
- TLSH T10921E25A9BBA103392CF51EDB86D61436518481768B43BA87DCC11AC2FB8C766CB139D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target soc-framework-nist-ir/Scripts/SOCFramework_ManualIsolateEndpoint/SOCFramework_ManualIsolateEndpoint.py
- Size 1KB
- SHA256 cbd4e662ce4c2f47810989b7984a67e48e39cc1cd255ee5f621d3a26b25916c6
- MD5 51abbe8f5c6f478ba5631f1c617da0ab
- SHA1 2b2f930e70b009633dc69db288cd1d588f447d61
- SHA512 eee8df4eb4c0cf2fb4ba86ac3a7d98b9a44306d1d199c35f5524a2f8388b6f4a470523a9fa02e721eb991f36bef77b296c6f2e4f8ca096847c16d4531f4d6015
- TLSH T19F21E25A9BBA103392DF50EDB86D6143651948176CB42BA83DCC11AD2FB8C762CB139D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target soc-framework-nist-ir/Scripts/SOCFramework_displayAnalysis/SOCFramework_displayAnalysis.py
- Size 5KB
- SHA256 6e3375ed069994f45455b426a338803803a9abcf43075dd9a02a8ea04c74eec8
- MD5 074fa3d5a5b44c4824015863c5b4ee56
- SHA1 a73c48781fdea50b608b595ef96146f65b6458c6
- SHA512 12e9721ac74d10bebb54d561f717e3706dbb60eb135e3ead8da3b9d36924d77529a997d6d66b4f5bb055c847edd19abb07ebbb3756e1d72602a79a3a1f697bdc
- SSDEEP 96:6y1I+uG/nR5xtBzbBt8DnHSXmXZ7jtDJgSkDWO5Z7jml:D1ZuGvR5xtp+yXmXZPtdgS0WO5ZPml
- TLSH T14BB18416855A203243DB80EDB8CBD447B3202A1393482D547DEE2E58AFC9EBBA1F135D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target soc-framework-nist-ir/Scripts/SOCFramework_displayContainment/SOCFramework_displayContainment.py
- Size 3KB
- SHA256 c9797ba44009dc04c17bf456e2e4908aea7825be64b3d04e1aa272e479ae3062
- MD5 77c8bfebd49c980420f6526244cdff06
- SHA1 a83ec5b6bc4e1f2471cdbde8df70d762cc00493a
- SHA512 5914a2472bc4c4f17e9cd6ff3de0d23e5dd9b359a16509db3cfc519157d2a848207cc306065570a2bc522a207633af86c372f45488236069c858ab33040fa467
- TLSH T141711161E6A134321BDF805D7897909B67246633C3442E247CAE759C6FF4EB942F268C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target soc-framework-nist-ir/Scripts/SOCFramework_displayEndpointStatus/SOCFramework_displayEndpointStatus.py
- Size 3KB
- SHA256 2413e75a01ca1bd4668e55ab2de431474dfd63f41d0a5baa61d87bd5a3b9e87a
- MD5 f07172db8e1aab58619a2e19c7902f70
- SHA1 a51d3c0f36aa90a881e14208d288299df3b1c2e6
- SHA512 76b55b1a2159f9e62794c97a0c885226e296ccb31f40754015a5d7c6f448a4cedfe6f19840449ef890d3373081b7dd91924dad508ff9f1bad0f30aa312c236af
- TLSH T1A471E271D924086153CB929C686A71739F10A533DA482D6C7D9C93EC4FECD3A61B62CD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target soc-framework-nist-ir/Scripts/SOCFramework_displayEradication/SOCFramework_displayEradication.py
- Size 2KB
- SHA256 6b58b57decbbc696831d9ae81fe373ea1e0629a0fdad93c37a259c346625e32c
- MD5 16b8b375ef7b6d0809a788f24da947e3
- SHA1 f3a4c93e368906b50f9f3b2ab914bf7a831138f3
- SHA512 708b4f532c9d42c071962a2da52008b14ef52c1da04b3d89fc5543c69666f82fa903302a4bb588bb72d7cdde23f523c0acf9a27863c8b6735b7798dab0c1d6cf
- TLSH T15C5143A2E6E1203157E780AEB8C79087AB3465339204192438DE75986F94E7643F27AD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target soc-framework-nist-ir/Scripts/SOCFramework_displayRecovery/SOCFramework_displayRecovery.py
- Size 3KB
- SHA256 d782cf8c8232b3d3ddf3dd3f827ce466883141501ae534474dbe02576c9b168e
- MD5 7cb6cc1ea10921d8d431de243f5b7e39
- SHA1 b66e381293554b5d5bd253aa81c6b4c6193d3eab
- SHA512 dbb0404fc56775f96fb246a2c6156a6a0ddbfadc8c4c6b5b27ab353782b5d5d53b1a0f6b8dbee31fcf8a3568427569cf9b4269e7319a7d8d4ada456ffdef1dd7
- TLSH T1BE611196D25130734FCBD0AEBCC6D00B6B347563E304291C7C9F26986FA4A6243F26AC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target soc-framework-nist-ir/Scripts/SOCInitializePhaseContext/SOCInitializePhaseContext.py
- Size 8KB
- SHA256 5f23526849e19c64a19071857eeffeb60d49f6b348580067b42219e874ab5726
- MD5 78377ec6fed078a0ba1c44cc7435ac98
- SHA1 80e55f3882e33c2dee886befde014c0fe5cf0c3c
- SHA512 2f101114893b7d9cac88f9cb15dd3a8bbc1dc42e1767abb83564a4e0434fe4ea8b484fb08abf10a717854f2a16cff5a848e8ecd12d7b7053f37d23d415c580f2
- SSDEEP 192:Q8s4/C9tOTcXYX+az+Bdoy7x32OaiCbkRU7UhK+uB0NytiBGiVl:QN4HXn+BdF7x37akRUCK+uB00ty
- TLSH T19B12873AEE9A69635382C1AC5043C213DB01D4A3870919B0BC5DC1F82FD5A9547BF7EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target soc-framework-nist-ir/Scripts/SOCInitializePhaseContext/SOCInitializePhaseContext_test.py
- Size 10KB
- SHA256 175d9bc57e5ff6243c79ff4feb7172d6c3d20873a1d6b61dfac7c1c5498d996e
- MD5 4b305fcc857a4cffd89e1c9b60442925
- SHA1 3be6630084535b054566dc1ada3a4ad785033c63
- SHA512 e7766b993d289026a992db1a053472cd58404b09ce30db858fa98145e3cc2b3e3772b863afe3d2465d09bd113b22e8acc6fb09729d79be1031cc0fb85da4ce0f
- SSDEEP 192:ivGtyQL2+IL020DQURIYoIWIYSmcH6hhh7Q/MxkH7vRrcKy875bOzB0e3N35uKs6:iutyj+IgpDhRIYKIYSmfzhM/VbvRgKyX
- TLSH T18F22651995A7B53782C151D4B2484353DB258EB28BC40E90BDEECAAC079DCD4419FBAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target soc-framework-nist-ir/Scripts/SOCSummarizePhase/SOCSummarizePhase.py
- Size 8KB
- SHA256 7da94aaeb835c12fcc05297b0369456d1c8ef463c4cb953dffd0636a32544628
- MD5 df3617dcb70f5a9b48cbbf878a059765
- SHA1 fc8ca03b148544ad45f3c6c7810e751ac4521169
- SHA512 e0f71ae368dc347ed666a19310035c8b1697f61393607ddf70384bffa3d2fc68bc75e0579bc404282f420ac826756b09a4ae2d51ecd0e1e53e1f4646f7689227
- SSDEEP 192:Cx8Qahta48cDc37ACVu6vA7Qbgv8EkEOdmC5BsyEsnjnpNOoELemUV894yz18QS9:c9sBTrQnjnF7V8zm1
- TLSH T158024115FC29143167C3C3ADB4179291F7668567DA0C6820FC9CD2E81F88DE143BEAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10