da7869529ac786c98204b39a754fad74ad5dce6b7b28a4305377c1f2c67341f2 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Remorph 0_...me.exe

windows10-2004-x64

7

Remorph 0_...me.exe

windows11-ltsc_2024-x64

1

Remorph 0_...s.html

windows10-2004-x64

3

Remorph 0_...s.html

windows11-ltsc_2024-x64

3

Remorph 0_...47.dll

windows10-2004-x64

1

Remorph 0_...eg.dll

windows10-2004-x64

1

Remorph 0_...eg.dll

windows11-ltsc_2024-x64

1

Remorph 0_...le.ps1

windows10-2004-x64

3

Remorph 0_...le.ps1

windows11-ltsc_2024-x64

3

Remorph 0_...x.html

windows10-2004-x64

3

Remorph 0_...x.html

windows11-ltsc_2024-x64

3

Remorph 0_...min.js

windows10-2004-x64

3

Remorph 0_...min.js

windows11-ltsc_2024-x64

3

Remorph 0_...min.js

windows10-2004-x64

3

Remorph 0_...min.js

windows11-ltsc_2024-x64

3

Remorph 0_...min.js

windows10-2004-x64

3

Remorph 0_...min.js

windows11-ltsc_2024-x64

3

Remorph 0_...ixi.js

windows10-2004-x64

3

Remorph 0_...ixi.js

windows11-ltsc_2024-x64

3

Remorph 0_...der.js

windows10-2004-x64

3

Remorph 0_...der.js

windows11-ltsc_2024-x64

3

Remorph 0_...ain.js

windows10-2004-x64

3

Remorph 0_...ain.js

windows11-ltsc_2024-x64

3

Remorph 0_...ins.js

windows10-2004-x64

3

Remorph 0_...ins.js

windows11-ltsc_2024-x64

3

Remorph 0_...een.js

windows10-2004-x64

3

Remorph 0_...een.js

windows11-ltsc_2024-x64

3

Remorph 0_...een.js

windows10-2004-x64

3

Remorph 0_...een.js

windows11-ltsc_2024-x64

3

Remorph 0_...ure.js

windows10-2004-x64

3

Remorph 0_...ure.js

windows11-ltsc_2024-x64

3

Remorph 0_...ure.js

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Remorph 0_15A.zip
Size 361.6MB
Sample260731-b991ma1ere
SHA256 da7869529ac786c98204b39a754fad74ad5dce6b7b28a4305377c1f2c67341f2
MD5 3f2f7f4473153948f598e1ba7d3203e5
SHA1 a8a00ac95a938f66a1beb254e60fdb245d49018b
SHA512 ca88660c7f18856feca63efb77a9b6b7845830d6b122b31a099788f66e8cccc536edaaf89c7112ed46860e5212ee9ee4d24ac72d0016692d2adcd98b38711bbc
SSDEEP 6291456:DenQx80tDPTtqWCfT0vQu9tiouRvLzfb0P:40tDPhqWkktEvgP
TLSH
T1D309BF27A26911DAE45CC578C25A5A23DAF27C016736A6DFB2D827312FB3BE0073D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Remorph 0_15A/Windows/Game.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

Remorph 0_15A/Windows/Game.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

Remorph 0_15A/Windows/credits.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral4

Sample

Remorph 0_15A/Windows/credits.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

Remorph 0_15A/Windows/d3dcompiler_47.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Remorph 0_15A/Windows/ffmpeg.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Remorph 0_15A/Windows/ffmpeg.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Remorph 0_15A/Windows/img/enemies/kittywholebattle.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Remorph 0_15A/Windows/img/enemies/kittywholebattle.ps1

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

Remorph 0_15A/Windows/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral11

Sample

Remorph 0_15A/Windows/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral12

Sample

Remorph 0_15A/Windows/js/libs/effekseer.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Remorph 0_15A/Windows/js/libs/effekseer.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

Remorph 0_15A/Windows/js/libs/localforage.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

Remorph 0_15A/Windows/js/libs/localforage.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Remorph 0_15A/Windows/js/libs/pako.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Remorph 0_15A/Windows/js/libs/pako.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Remorph 0_15A/Windows/js/libs/pixi.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Remorph 0_15A/Windows/js/libs/pixi.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

Remorph 0_15A/Windows/js/libs/vorbisdecoder.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Remorph 0_15A/Windows/js/libs/vorbisdecoder.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

Remorph 0_15A/Windows/js/main.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Remorph 0_15A/Windows/js/main.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

Remorph 0_15A/Windows/js/plugins.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

Remorph 0_15A/Windows/js/plugins.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

Remorph 0_15A/Windows/js/plugins/AltMenuScreen.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

Remorph 0_15A/Windows/js/plugins/AltMenuScreen.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Remorph 0_15A/Windows/js/plugins/AltSaveScreen.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Remorph 0_15A/Windows/js/plugins/AltSaveScreen.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Remorph 0_15A/Windows/js/plugins/ButtonPicture.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Remorph 0_15A/Windows/js/plugins/ButtonPicture.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

Remorph 0_15A/Windows/js/plugins/TextPicture.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Remorph 0_15A/Windows/Game.exe
- Size 2.0MB
- SHA256 b2fe0f8cd0adb1d221d662e5f33b36b8245413178d8986b0d6dd3c42fc6d78de
- MD5 f760c2f862cf7d98b570bae41364e05d
- SHA1 e318735c83ca25fd4e7509eddb6fc0f2df90fc2c
- SHA512 6e759cd0b0f038e1c1158d5b58dcb5cc5c90e3ef85124010b55ec5744bc66b0cc74441ccb552402882af5d5f3ba4684c5e33d70889e0d2a930b3e0438c95a65d
- SSDEEP 49152:uMKeLJ95d90stngnOIoYcGfXZRcu+CsT1mTvj:G+sSuJj
- TLSH
  T14DA56A07A65504EAD199C078CF06D135EB71BC494BF5A5EF3190ABDA2E37AE03B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  Remorph 0_15A/Windows/credits.html
- Size 4.5MB
- SHA256 d9729b75ddaac7b9b21c62ccfbfbd12edb0619ab04da3d0cfaf1ff31e77dfc41
- MD5 9831b9e75e0208ce0dacb6db23d4acbf
- SHA1 065886a77a6eafac21c5c297bfbd4d2cb50751b5
- SHA512 27d57e91c41fd4cc000622daa7a404f9ff40c95589f5ced7d7beaf5336b4480ef1ffe972928794c76fabdc923b787bd6673191e1c5a1815d74b9438695637e99
- SSDEEP 24576:8wEBqmnLiLIi2hrErjKvMPkUoVAwurQBzun:VcqmLAstCuUcBq
- TLSH
  T17126D56BBB49037306F282626B4AA4CAF31E903F375A1514346CD15C2B7B92583FF69D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Remorph 0_15A/Windows/d3dcompiler_47.dll
- Size 4.3MB
- SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- MD5 7641e39b7da4077084d2afe7c31032e0
- SHA1 2256644f69435ff2fee76deb04d918083960d1eb
- SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
- TLSH
  T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  Remorph 0_15A/Windows/ffmpeg.dll
- Size 1.7MB
- SHA256 44917512b58d193b4361f2d07b723346feb7bc69f2b0ff51002b3c76f88d0f71
- MD5 f2db31ad12fd16c5359ac583181fbfdf
- SHA1 4721511f6b0294713032d3c3be82e638f1084e06
- SHA512 17ea72069aa2a601e4e5e2ae433d529796f153dbf1cd2d2443cd2b514ee7bdc73af36ba1fce2f54b74f2e4a4148a2e51dc2bae7b8b9fa4013fd3a9392497437a
- SSDEEP 49152:4pvlwTaS4rzi865zldVJQSJt9eJACdcVEhM:rTaSczQ/VJ9enf
- TLSH
  T1D585AE07F2A505EDC06AC134879B962AFB3178494B246AFF17D0B2293E77BD05B3A714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  Remorph 0_15A/Windows/img/enemies/kittywholebattle.png_
- Size 96KB
- SHA256 2bc220a44371859b090929dc86d3c13be81260f75441c71e2135ef340c4aa87c
- MD5 440a84655f68809d27d53bdb67bde54d
- SHA1 02eb30bf34b624abb2927b39e8ccf65c74e5c032
- SHA512 a48531dd805a67e934ef7e2ab1940b5f1170178487c6cc606fecbd9eb806317371d2e2303b531990881d33669731667dcf3cf622872e7a627c1e2e41a8a34d32
- SSDEEP 3072:sF1ctVqVmdiU1OIXjI1JHM6zzYltanA3x2Ri53O:rIv1e6etanA53O
- TLSH
  T1B1A302B2B93C19D1E6105337BAF03D907A766D4C36372E2AEE19D9F19E4B08D7180752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8 behavioral9
- Target
  Remorph 0_15A/Windows/index.html
- Size 640B
- SHA256 8da98436efd1d57193400f97524d0899b3117690cdea618f64a0f1221ab0f492
- MD5 8ef61b3b7020ba0bd2b6f2e7a733a11d
- SHA1 fd981f6a6c63b82a42b3a44154b439c3ed38c11a
- SHA512 2985fcc56edf6692b8118b01013e3e2f88a7a62f83c6e16145f394429b0e910e7893332a64b479e35958196b902ca5670f2d9d91af1dfc488901f4b913d8564d
- TLSH
  T137F0264548F29C0936104548DDD1F8148C9D815FD6909DC4F0DD107A8FE8FE504C39BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral11
- Target
  Remorph 0_15A/Windows/js/libs/effekseer.min.js
- Size 189KB
- SHA256 49d8f79328495bfd9f47fce8378aa7d898adfb4238c36abc5801c78586d11dc9
- MD5 02f74608f9d6dbc0cb9ef88570da2eed
- SHA1 ce845dbb6fea3f369b06eaf64726b4f291ab1bdb
- SHA512 7d8ecb790f2ef58ad1362602bfcbb0e327a8932e89f605fcba5af5502bf3524c6bdfc255d89b08f7cf1f5a485e3107439f4b0e4eea53f57d4fb7aad9feb170d2
- SSDEEP 3072:xKz+yOG2j0AGx5mc2+kSPGJBOWLW9rjKJcUiJqzy:oOzj0AGx5mjS+zC9qiR
- TLSH
  T150143B88BB49E066C593B7BB943F060B39B49452A80CD05C90ADD4C48BF4F9AD5DBF8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12 behavioral13
- Target
  Remorph 0_15A/Windows/js/libs/localforage.min.js
- Size 28KB
- SHA256 1ff66c1e32922549d0c824076703e69fb5535857934c8faa8023f51a4881f732
- MD5 6de1bf1f7f98328eba5295e0e8a00110
- SHA1 c071378e565cc4e2c6c34fca6f3a74f32c3d96cb
- SHA512 1bbd953f0e16d7838901f1a9f26b04ad1eab64918f63bc326ef3bb594aa83335e28bc5f126dd7df7bda879d57b21a7383284eef264aa391db7f2c36001e88522
- SSDEEP 384:lj5dGPModTXTO+ALOz46ELy9kPuMZb/C5eTppmcfAqoSXKjPxy2FADXtxw4ZuQB:BOPMoM+ALOV9kPuMZb/C5eT92i04Z
- TLSH
  T1E5D2748D7799B162927734B0D07F540FA137A966B94C84E0E181E8E07D783AC872BF9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14 behavioral15
- Target
  Remorph 0_15A/Windows/js/libs/pako.min.js
- Size 44KB
- SHA256 29cfa0542b9864b6640cfdcc8f15b184db6431b532db2702a3ce97e5f2a7fc1c
- MD5 64413eda72405dd1d28bbb64d900c778
- SHA1 6086b751c4f4c90bbd0521b6bfe5279fd4eb55da
- SHA512 7ae59cfd0bfc2a9d026d35f533e43706f532a0e6aaf40bb9d134fbbf3dcc15fe6f7abdfdc9babacd5f919e00d8f1e37c0084058a0c63c18bfa8e1a0fe78eaf7d
- SSDEEP 768:7feBUDB3FA8/nVPg0kKWslV7hF/PGjMhuAEIzg49n3cG:zeG/9hF/+jZAEI0O3cG
- TLSH
  T11A23F6A630F651A82BE118D8909B2B96217051326C0519F9E378DDE43CB4DCFE17FA7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16 behavioral17
- Target
  Remorph 0_15A/Windows/js/libs/pixi.js
- Size 1.5MB
- SHA256 9cf328099f50e4ceca874d875abd3065e8189133e01e5f054bf7627eb6a960e6
- MD5 25883e75a333c4d6ba534533af414bd2
- SHA1 4765c8c6f38fbb9c8186b8230d0dd1ef9f37e381
- SHA512 eebe4d2f31f102ac3a7462a044615c2b839b0d7548ac256f967227f82a1ff19b09adc283bd6bf3dc78cd524fd5115be2db5f4d2211a061673b3bcc889c3f7c7c
- SSDEEP 24576:+j8IwfSMnNlQ5xl7xOmBomtCZ8oPESkcDnoPy0ylzlZamCAgoeI05sVy0XMQmlpq:+j8IwfSMnNlQ5xl7xOctCZ8oPESkcDn/
- TLSH
  T16465E786BBD9A521FD13215D8F9FA644F236901F9685CC88780CA1B43BD9B3406FDBE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  Remorph 0_15A/Windows/js/libs/vorbisdecoder.js
- Size 79KB
- SHA256 5024fbb4606a89caeeedcd57c94e7f633fba40277d4c1d1b2277ee7d60905498
- MD5 079d9fbef8ba74a03d2783b584b8fbfa
- SHA1 a4e9f3f5bfa2750672803782994a1ad29ed51e7a
- SHA512 0c03460bc7ba66da7bc76f5e485ba26e26e48cfbbd1b7718481e355284b30812e80bb91df418e461567369a2cf52503e0ead4f28e7566365e0dc6c0e3ad2b208
- SSDEEP 1536:hHjDH9V29QO6qkTEoUyXJZ+1eUhHX+UIYuIynKviw:hNV29Q6kgynuHOUIYFynK5
- TLSH
  T10A832B7783D33E7FD7315E66920A1F07ACD8B1538368175CED8CC9E064A487A942DAE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20 behavioral21
- Target
  Remorph 0_15A/Windows/js/main.js
- Size 4KB
- SHA256 4c290e83eceb0d52f6f620a637d4ea8b7cced0124e77dfd8862b088be3c5f49a
- MD5 9d6d4a0e1d53282c2d73448b71b66f7e
- SHA1 ddc4a821fc0294c012e8b345f7fd749c76be4aad
- SHA512 6b28105801374c092adb8a46f056df0cc4af7ef5749fa027d142b26dbbad29c0658c0b2b901681c6bc1b8567bc7b119bdeaa5ad3ff529ae79b023f8f0fd1c8e0
- SSDEEP 96:/hNHGeinp4eOVftoTm8arHAhwPKJq8uM7FqqC:rHlMpWlPxghwPKgNe8F
- TLSH
  T140A1CE090EE74C278017B09A2F1BA100FA2591132455DA4D3F8CC6D59F2577ADDBEFAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22 behavioral23
- Target
  Remorph 0_15A/Windows/js/plugins.js
- Size 82B
- SHA256 2116dfda46bec80e7fab4b7e97b94931c47c9fb3642e6fa4c1625d0016b448a0
- MD5 9f5649be608fdb7fb49a61bb5d8c233e
- SHA1 184e2a6945b4c86b3c824488af6ce29f55026ddb
- SHA512 628b4cef696b5ed12ef661eed937d7cbd306a7c412811e1edd07488423ecc2b1fd9dd9cd4e46e121e661832ededbe09a503cf6f3331cf6e751478f438070e572
- TLSH
  T1A3A0127520EEC2100C035980460CCC5204CA522991389514141C024B106741140B4941
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24 behavioral25
- Target
  Remorph 0_15A/Windows/js/plugins/AltMenuScreen.js
- Size 3KB
- SHA256 6c062238c55ea09303c20419fa8a69c31e533a544c5414495fddd551c562ebe1
- MD5 e80fe2298197d18d92155cd5bad9a57e
- SHA1 941e66f52a6337fe0f79c2118b5c2fbb5e79903a
- SHA512 f74701c4266f7b935d407d22ebb5e22c3c36b5c8ea281810ada8f9f64e1db22d9169bebc5ac02697c96c36573744bfc3bdc18cd144ccd13d98e9715019d3b0d7
- TLSH
  T1B361DD59ABB67030C132606A074B9748E166152F7007C48F7B6CC2989FB2784B6CAFFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26 behavioral27
- Target
  Remorph 0_15A/Windows/js/plugins/AltSaveScreen.js
- Size 4KB
- SHA256 ba98b8c4a554e08a00cd895f0b8de909781ecb9209092c2272913d055d354eaa
- MD5 ccd2bb6b1e4ba3afc79b89f3ec0f52c3
- SHA1 5805f75c47b7c713b165eed298b38ebc408f3ddb
- SHA512 c2d268e254f4e317b04d613a437a8b535c5b9b0bc2fb6865e4182ad7e2a347f5d91810440380eac9dd2aed952990e2e913143de28d6a821d131112c516891224
- SSDEEP 96:Y+qVQ7pDwyhq9okpaj9CTz41vKtwFg9FIOtUO79X16i3Dkip9y3:Yri7pwyhsbht8iN16dYy3
- TLSH
  T1CD91DD899BF61021C432309A0A5B9B492611C53FBD07C5493F5CE3A4AFA179686C6BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28 behavioral29
- Target
  Remorph 0_15A/Windows/js/plugins/ButtonPicture.js
- Size 3KB
- SHA256 e0465802bb656960ebe914d52c800c86f27612e02285156adea681c2bc463479
- MD5 efe46c3606d8cff9050126a309dbd6b9
- SHA1 d8c3276882db02bc81de92c84136ff1e6eefb852
- SHA512 be026c801af252b6b35ad295cd0a70b7bc8bbae76fa1f326df84d18dc6369fd8d3ffd73acffbb497e2b9f0f894c012bc3b0767d38ff99d9e0d4d0cbd31985621
- TLSH
  T18351BA0C67FCE102423061B822C77D94F2054B5FE903A95D39EEDAA53F69B9CC646E71
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30 behavioral31
- Target
  Remorph 0_15A/Windows/js/plugins/TextPicture.js
- Size 3KB
- SHA256 4ec28b5df38b26c358b0b0b618f13800f2ed232c5a44daf7afaeeecd2ae33908
- MD5 126682ee75b34b3e37b6ecf1fea81fb6
- SHA1 45a626fae2fcf1cf8ecb4c59133e4cf894aae3ce
- SHA512 f0d808c24f029d11ff73b5c18bad49421c121bfeb5fe06010fc7cb317759036c00e27cab5739246fe94c2afd22285eb5ede3355e31aae52f1b3cb40c6d9991e0
- TLSH
  T12181CE0D5AEFD110D16290B8369B7E81F260498FE912C58E399CC5506F7676DC2F2EBC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy