f8e3158987dd508257d111e9e2d1b51a5e627d1efb02a5853c95ec5fc0fb1741 | Triage™

Login
Reports

Overview

overview

7

Static

static

5

_Vrfc97650...rv.vbs

windows10-2004-x64

7

_Vrfc97650...rv.vbs

windows11-ltsc_2024-x64

~/aeczfp2.dll

windows10-2004-x64

3

~/aeczfp2.dll

windows11-ltsc_2024-x64

3

~/ldrsf/mg...x8.pdf

windows10-2004-x64

3

~/ldrsf/mg...x8.pdf

windows11-ltsc_2024-x64

3

~/ldrsf/mg...k4.pdf

windows10-2004-x64

3

~/ldrsf/mg...k4.pdf

windows11-ltsc_2024-x64

3

~/ldrsf/mg...10.pdf

windows10-2004-x64

3

~/ldrsf/mg...10.pdf

windows11-ltsc_2024-x64

3

~/ldrsf/mg...l6.pdf

windows10-2004-x64

3

~/ldrsf/mg...l6.pdf

windows11-ltsc_2024-x64

3

~/ldrsf/mg...n2.pdf

windows10-2004-x64

3

~/ldrsf/mg...n2.pdf

windows11-ltsc_2024-x64

3

~/ldrsf/mg...b5.pdf

windows10-2004-x64

3

~/ldrsf/mg...b5.pdf

windows11-ltsc_2024-x64

3

~/ldrsf/mg...h9.pdf

windows10-2004-x64

3

~/ldrsf/mg...h9.pdf

windows11-ltsc_2024-x64

3

~/ldrsf/mg...c1.pdf

windows10-2004-x64

3

~/ldrsf/mg...c1.pdf

windows11-ltsc_2024-x64

3

~/ldrsf/mg...v3.pdf

windows10-2004-x64

3

~/ldrsf/mg...v3.pdf

windows11-ltsc_2024-x64

3

~/ldrsf/mg...e7.pdf

windows10-2004-x64

3

~/ldrsf/mg...e7.pdf

windows11-ltsc_2024-x64

3

~/nyiggd1.dll

windows10-2004-x64

1

~/nyiggd1.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
31072026_1637__Vrfc976507EHDJ_79236-pveezy.Serv.vbs.iso
Size 6.6MB
Sample260731-t47bnade36
SHA256 f8e3158987dd508257d111e9e2d1b51a5e627d1efb02a5853c95ec5fc0fb1741
MD5 028d4ee6e341b5188251e7caae8e7d91
SHA1 86d2968dced041334e326d03f73a6d5bb846a2b3
SHA512 fe257cbd49be274b0fae262da93c6cf6de7a51b92d5395a51e8a6c1c8ae67e50ed77fe21f7b15ce9df3ca49475884d16acb0c0a9632798368657c085f89803f8
SSDEEP 49152:guYjzdiaHbeRxtk62y6c5aR939DaxO8Ur85TB7VHnKxhia8fMF0gLjd5VzWNLB+Z:5Uh
TLSH
T117662330AA414C26C355B7B5B21F7E352F3F6207808876DA74DC90B66772BC1963F8A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery execution link pdf qr spyware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

_Vrfc976507EHDJ_79236-pveezy.Serv.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

discovery execution

Behavioral task

behavioral2

Sample

_Vrfc976507EHDJ_79236-pveezy.Serv.vbs

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

~/aeczfp2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral4

Sample

~/aeczfp2.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

300 seconds

Behavioral task

behavioral5

Sample

~/ldrsf/mgyfy/lymtz/cvoz/bhfux8.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral6

Sample

~/ldrsf/mgyfy/lymtz/cvoz/bhfux8.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral7

Sample

~/ldrsf/mgyfy/lymtz/cvoz/ckihsk4.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

~/ldrsf/mgyfy/lymtz/cvoz/ckihsk4.pdf

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral9

Sample

~/ldrsf/mgyfy/lymtz/cvoz/ejlii10.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral10

Sample

~/ldrsf/mgyfy/lymtz/cvoz/ejlii10.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral11

Sample

~/ldrsf/mgyfy/lymtz/cvoz/ejul6.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral12

Sample

~/ldrsf/mgyfy/lymtz/cvoz/ejul6.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral13

Sample

~/ldrsf/mgyfy/lymtz/cvoz/ghtian2.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral14

Sample

~/ldrsf/mgyfy/lymtz/cvoz/ghtian2.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral15

Sample

~/ldrsf/mgyfy/lymtz/cvoz/jgrb5.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral16

Sample

~/ldrsf/mgyfy/lymtz/cvoz/jgrb5.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral17

Sample

~/ldrsf/mgyfy/lymtz/cvoz/lszlgh9.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

~/ldrsf/mgyfy/lymtz/cvoz/lszlgh9.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral19

Sample

~/ldrsf/mgyfy/lymtz/cvoz/ltbc1.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

~/ldrsf/mgyfy/lymtz/cvoz/ltbc1.pdf

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

6 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

~/ldrsf/mgyfy/lymtz/cvoz/osdv3.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral22

Sample

~/ldrsf/mgyfy/lymtz/cvoz/osdv3.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral23

Sample

~/ldrsf/mgyfy/lymtz/cvoz/vnse7.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral24

Sample

~/ldrsf/mgyfy/lymtz/cvoz/vnse7.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral25

Sample

~/nyiggd1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

~/nyiggd1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Malware Config

Targets

- Target
  _Vrfc976507EHDJ_79236-pveezy.Serv.vbs
- Size 5.9MB
- SHA256 22bbde3ff00a3914289896bdedb6908a6c4f71c1d951d64d5f93f794b815aec4
- MD5 719afdfa74d54aa4c2999df7fa940553
- SHA1 95b63567847776426f92a147d224c6b89cdefbe4
- SHA512 0e5f7d8dd36982c6e67b3c872ce8f2cf3b6637cee2b264916678840347e70e1a88f12473d93cd57289a912679ac8ce167e9b21d9bdd52ee5fad108cee2dffd18
- SSDEEP 49152:uuYjzdiaHbeRxtk62y6c5aR939DaxO8Ur85TB7VHnKxhia8fMF0gLjd5VzWNLB+q:5
- TLSH
  T199563330AE911D6707A98B65F04F6F312F3D4A17C10895CFB5D8B0C6379BA81927B9B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  ~/aeczfp2.xml
- Size 42KB
- SHA256 529268fa450b656665e5b874f4740fe4a60df771a8d2e24c3d55b80971f9b56b
- MD5 ad2774f3583f8fad3cf576990a468f93
- SHA1 1f122ea3330a252e22de1abe9b3e91ff6f1f9a4f
- SHA512 fb7882c0c706272d3d1a641e5dbc63d545b8387750d110bf1e26d6ee4ba753f828bf85831e1d658a2fa6443cc636a4c5db4f65089053a0bfda8275282f241a42
- SSDEEP 384:vfIoo+OmAcoWu9CeeZyYG5NyEIYi2mL4/y8RLVHHfTtCLJ:3Ioo+OmAcoWACeesYXYiDLk5/bwJ
- TLSH
  T18C130D754464CC7CEB733A38C046D83F262361D454C2BB316ADD643D9AB13A29AAFD1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  ~/ldrsf/mgyfy/lymtz/cvoz/bhfux8.pdf
- Size 16KB
- SHA256 38cfeb9428f722cb728f361b07f893e7be4759bc6186dc999dc222fe02e5222c
- MD5 18c71bf18b7e4ee6d6f4c3d958988439
- SHA1 a02df90c592a9bcec37d1b1892ad33fa82e50870
- SHA512 ed8ad3af68117e87d8b5da336c3b2a9e7ee8ed9aecc51744a5db9e65528fb5dd0f4efec13f0994c4b8b6de16cae35065806d05f07e991119a4e575b7f4f22418
- SSDEEP 384:D7j0aLDyJcC0IJIqBYb3UxU5Rcqz5LcU1RiSC:D3v6cg6nb3UxU5RVz5IUPiSC
- TLSH
  T17B72CF90DCA7081DFCCE58C99B5A3E5C424C728AC4DC2529213946A5F215CA377A7BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  ~/ldrsf/mgyfy/lymtz/cvoz/ckihsk4.pdf
- Size 30KB
- SHA256 6390ac36da3dcf002e5bca4c46658752c0ddfe5ee1e53b0ca625ccd4fa9b6e3a
- MD5 73bbcb776f8bc6121e82920deb0c04cc
- SHA1 30369ae0c8912d914d046f4c57a64747b5d424ce
- SHA512 c3f7a63f729efd3bf2780ed59034f84d2158ffbf8684ac8d472046d17a8f63730351766975ca0bbd892ffe994a1ca387cbf3d077211c81367e3091a12b18d023
- SSDEEP 384:4Hko0a/gIjeYbdM1cMzc0bWtAsLfW24D8JwFLygTNNGmuGkvJ9dmUWMNv5itbFoZ:QxjeJ1cMggLFL/hNkGwJf
- TLSH
  T1E8E2710DF245BA90E45147D65F387639657F7318688A5B904DA3C32BEA018FB7BBCC82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  ~/ldrsf/mgyfy/lymtz/cvoz/ejlii10.pdf
- Size 31KB
- SHA256 e1680c8496a702d81fd59733137d234cccb90582f1683ae6faec50637f905d62
- MD5 7fbb2cbef0ace6cf5b3543b59f1a0240
- SHA1 e9f851af9a15ead29ec7690e43ae7ed26600dee0
- SHA512 75bdb0e0c9d857b0a1478c64d1f032ce84682d2a9100b94b47ea5fd317a35049e010b5cc33646ad16b82047df2fd60b721abecb79f4719ee2728e70e4f9e02de
- SSDEEP 768:+C4gGOdpZa7jSfFRQZiXn8Q7OZeHHGzQqKIAqJd:+C5GKZYjKwA7OZenyUq3
- TLSH
  T145E2AE2E3107C8619B0753D3BB1D1AD2EA69F30F24A899B65E2C8D169947FF0F4091E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  ~/ldrsf/mgyfy/lymtz/cvoz/ejul6.pdf
- Size 25KB
- SHA256 3176dfdf46fe6b350ecfee47ca0e24fda18cfd972752903ec4e40d056f1e3f1e
- MD5 12590d714ab1ea408ad7311334828f27
- SHA1 1f18d0e38ba02e58c3f782df0dd8330e1eeb3d7e
- SHA512 b90b3df644ab3895b50ce762ad1cd10059363fe23947f5e064b5072f4ecddd0c350fa9d0c84e5648bd3d9a14ed74aff6e750bed0c2f9563381a03018de02b3fe
- SSDEEP 768:HNKhMN8MHi0CpVxevSBn924anU6FFqKIU9R:HNg6G0CPISt9unBFpH
- TLSH
  T1E8C29E192007D895DF5387CAFF1D1662664D730F52A0A8A27D2C8C168A97FF8F61D1C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  ~/ldrsf/mgyfy/lymtz/cvoz/ghtian2.pdf
- Size 79KB
- SHA256 4ba1561579a55e0c125f2ad16a1b74961f9372c187f9d6b31023bd10b571f4c2
- MD5 d804a3f81c488ffd958940cee740fec4
- SHA1 33286f08ed8f8faaaa638d92f9e32478d23690ef
- SHA512 e1721363ad12099ee447663f0f98f32600cf4734eef5ebb8422b9e4406e8c6891c3f2d52aa707bf89ed6fb9e5ede290a1643cba3dbc96b130d3cdd524c4ee480
- SSDEEP 1536:eOSV+cfeY/y8SIWI2MoE98zu7KKHm3N03Povj2cbb:eTVReY/yv8loE6cK2m903Mj2s
- TLSH
  T157838D53CD099B839448C3F87F572D6C2B1D670DA9C57AFE10220F8ABF989616C5A06F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  ~/ldrsf/mgyfy/lymtz/cvoz/jgrb5.pdf
- Size 39KB
- SHA256 73726d7f5301598917ab705633057591a5d2b8c9c90f39e1f6780a0181799d75
- MD5 7b2f356183858911dbe9f2b3984b8555
- SHA1 c17b5b3517035897765349bc76e89e378dd89416
- SHA512 3a5370dcc2b4deb4f0c08c4b3617b746562871033f58b9ceb68243981e284529105dbb0a562592589fa57a88c0d901a46874441a82fb385e1831bcf14ff0f7af
- SSDEEP 768:L6IlCJijP4KMByHhpOkoEMQXZRB9zt9HSTg7PXGuUFCI3HwXv8:L6IygwK9BpOk17RBNHSTIGroI3HC0
- TLSH
  T18203E170E879F906F092AEC14F39381D86FEBFD2C9C870E2D9900D45B4315E65897DA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  ~/ldrsf/mgyfy/lymtz/cvoz/lszlgh9.pdf
- Size 19KB
- SHA256 19012ffd6dc8cc3819441f571044c65861cd67e0161e8e8777792ff79fc913fd
- MD5 76f58c30a8e1695160e656e9599a99ff
- SHA1 ecff423c4f588801818924cfaf5a3c8c16c4ce77
- SHA512 f74bd500d970e522fa958845042e95cb6ede6df9113db30d4466d82ed121a70b6f9d1237db0d59864bd5709f314c67ccd1dac6c8e9e540e9f3abbd932ecce2e7
- SSDEEP 384:CeTO5OweoVOlYk03wj/hSlBaDEX4XGkWl127Zwc35Z:CN8gVpwVuUtfD7ZN35Z
- TLSH
  T120928DB3F5A85C8DE8828E868D553C90049DF013D6CC3C8054B99BC97586F6DBA126EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  ~/ldrsf/mgyfy/lymtz/cvoz/ltbc1.pdf
- Size 20KB
- SHA256 4500ed367dc7d75e7eb733095f557208d0a1b97f71276ad81f3772815d71f872
- MD5 e1ad384280e0566577255ddc29b427e2
- SHA1 895e5a0be202e72568914051143f156867147b10
- SHA512 2afa4b5ba34b8c5bae1442d7a134c567caee6347c4865eb2bef93bf80f3d7c7b204696b6ccaed03fb55856e70d194a711952669448a84b769d84954f6b3f319b
- SSDEEP 384:6QloPxOjdCx03wj/hSlBaDEXbGiWl127Rwc35wdh:6Ql5wswVuUwD7RN35W
- TLSH
  T1C4929FF2E5A91C8DDC828E878D593DD4086DF123D6CC3C8114B897C57A45F6CBA126EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  ~/ldrsf/mgyfy/lymtz/cvoz/osdv3.pdf
- Size 30KB
- SHA256 17c3619e5f7357ce3dde625156f3a1018b8076a0a7ec2223f063e833a9a06bed
- MD5 1376e75b3d960aea30d72df71a5bbf3d
- SHA1 c3b70e06215bfb413def286c2463601b008a667f
- SHA512 3d42c78ca2d23d2dabca98624acbf0473b96b94dc0a666deae35e1ec63853e14cad29ead764a6ae49fea2c39b98104adf434294043d27a54a59a2562d5619dc4
- SSDEEP 384:DukPnfI16U+DX0aK3pTNqXFujccZKV+KEfNGmuGkvJ9m2Eto/emalUSAOMbWrKXI:9GpAuQWO6NkGwJW
- TLSH
  T1CCE2820CF245BA90D46147E56F387639657F732868CA5B905DA3C32BEA018EB3B7DC42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  ~/ldrsf/mgyfy/lymtz/cvoz/vnse7.pdf
- Size 20KB
- SHA256 9903da9df924fb4a3a658fd7257b1a396a14e45123227d85313aec29d90f7218
- MD5 4704ad1d2493d63aa0c85f59d8d0786e
- SHA1 a9c54fc6a29c83fa113b1e8909a90cb1d7ab787a
- SHA512 681ddde89ada359bac0c3451734eb6f36c6498ea3179e92cfcd13cc9ce76368f4c3fe1478721d4c6e0954a30342d171ed7f2abe8a2de42c0e44cb76462adffc3
- SSDEEP 384:pdeOv90gXmfl+zTPJyLRbeXlqQFLcDPsNVmXs5dhN0WuU7pH1poS3paS/skTR7A9:RhA+zVcWLexCTKWhHHokpXsv0g
- TLSH
  T115927D2C88C6A5CCC5B19F9B3B28B493992FB37327C85491767E4F871754D8CA823616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  ~/nyiggd1.xml
- Size 21KB
- SHA256 4ffe6536a9e8ef8231c0b46c80e633af298b275f406439c6234a52c37b35a502
- MD5 9b3fe1d9f53a30a98c79b155d4260834
- SHA1 0a2214d41edc3e5214d966364a82611acf16c354
- SHA512 b05b7fd512030dc4f83a237af29c0e88d383aa6d4f888f872e95d1da2fa341df1ec3a8c63b4fa488fec01269db52e2da930cc11fd41a001064e5dd4919cb3875
- SSDEEP 384:pbDKpeWtj8mvv2vwPLmyLn77zOicYr/IYisgToEy8RbmL4nNyXi:gnj88DmS77zI4AYiJf5AL
- TLSH
  T1E7A24B1287DC1D19E9BF0E30F8E152229EB2F6456960C2DF29DDC05E4F92B047B963E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

behavioral3

behavioral4

behavioral5

adwarediscoveryspyware

behavioral6

adwarediscoveryspyware

behavioral7

adwarediscoveryspyware

behavioral8

adwarediscoveryspyware

behavioral9

adwarediscoveryspyware

behavioral10

adwarediscoveryspyware

behavioral11

adwarediscoveryspyware

behavioral12

adwarediscoveryspyware

behavioral13

adwarediscoveryspyware

behavioral14

adwarediscoveryspyware

behavioral15

adwarediscoveryspyware

behavioral16

adwarediscoveryspyware

behavioral17

adwarediscoveryspyware

behavioral18

adwarediscoveryspyware

behavioral19

adwarediscoveryspyware

behavioral20

adwarediscoveryspyware

behavioral21

adwarediscoveryspyware

behavioral22

adwarediscoveryspyware

behavioral23

adwarediscoveryspyware

behavioral24

adwarediscoveryspyware

behavioral25

behavioral26

© 2018-2026

Terms | Privacy