f0bb93ac01b3f88e43023c568aac94230565f2c93665130ed6e86c5936bd3e0d | Triage™

Login
Reports

Overview

overview

7

Static

static

4

_Notif_TTX...IZ.vbs

windows10-2004-x64

7

_Notif_TTX...IZ.vbs

windows11-ltsc_2024-x64

7

~/cfdb2.dll

windows10-2004-x64

3

~/cfdb2.dll

windows11-ltsc_2024-x64

3

~/odcem1.dll

windows10-2004-x64

3

~/odcem1.dll

windows11-ltsc_2024-x64

3

~/ubfo/jey...e1.pdf

windows10-2004-x64

3

~/ubfo/jey...e1.pdf

windows11-ltsc_2024-x64

3

~/ubfo/jey...m2.pdf

windows10-2004-x64

3

~/ubfo/jey...m2.pdf

windows11-ltsc_2024-x64

3

~/ubfo/jey...10.pdf

windows10-2004-x64

3

~/ubfo/jey...10.pdf

windows11-ltsc_2024-x64

3

~/ubfo/jey...a7.pdf

windows10-2004-x64

3

~/ubfo/jey...a7.pdf

windows11-ltsc_2024-x64

3

~/ubfo/jey...p9.pdf

windows10-2004-x64

3

~/ubfo/jey...p9.pdf

windows11-ltsc_2024-x64

3

~/ubfo/jey...b6.pdf

windows10-2004-x64

3

~/ubfo/jey...b6.pdf

windows11-ltsc_2024-x64

3

~/ubfo/jey...r8.pdf

windows10-2004-x64

3

~/ubfo/jey...r8.pdf

windows11-ltsc_2024-x64

3

~/ubfo/jey...k3.pdf

windows10-2004-x64

3

~/ubfo/jey...k3.pdf

windows11-ltsc_2024-x64

3

~/ubfo/jey...y5.pdf

windows10-2004-x64

3

~/ubfo/jey...y5.pdf

windows11-ltsc_2024-x64

3

~/ubfo/jey...s4.pdf

windows10-2004-x64

3

~/ubfo/jey...s4.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
01082026_0223__Notif_TTXRU-rprntkZAQTT.HYKTCConfgQNIZ.vbs.iso
Size 3.6MB
Sample260801-ct89tsvhrh
SHA256 f0bb93ac01b3f88e43023c568aac94230565f2c93665130ed6e86c5936bd3e0d
MD5 6ac0f76b2833dcce269da647021f1975
SHA1 f3309687c74770b525be036b02f208eee99a7054
SHA512 1cfa12345763c4de816ab4eccd3c292e2458df5c8742c413818d09578c8ae48b52ab9267f4bfb66eff25237723774b1def3763023550e12e646f28935e674008
SSDEEP 49152:2S7rvxt4pYX3KUCh1L25KxXznc7UtXmnTBq7Y+:2Y
TLSH
T16006233259459999CA7077B6F10A25296E2FF21342C8F1D37C9C41B22BB3F84D63E5D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery execution link pdf persistence qr ransomware spyware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

_Notif_TTXRU-rprntkZAQTT.HYKTCConfgQNIZ.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

discovery execution

Behavioral task

behavioral2

Sample

_Notif_TTXRU-rprntkZAQTT.HYKTCConfgQNIZ.vbs

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

9 signatures

300 seconds

discovery execution persistence ransomware

Behavioral task

behavioral3

Sample

~/cfdb2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral4

Sample

~/cfdb2.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

~/odcem1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral6

Sample

~/odcem1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

300 seconds

Behavioral task

behavioral7

Sample

~/ubfo/jeymah/rolm/uiup/bvke1.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

~/ubfo/jeymah/rolm/uiup/bvke1.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral9

Sample

~/ubfo/jeymah/rolm/uiup/ensm2.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral10

Sample

~/ubfo/jeymah/rolm/uiup/ensm2.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral11

Sample

~/ubfo/jeymah/rolm/uiup/fpavzy10.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral12

Sample

~/ubfo/jeymah/rolm/uiup/fpavzy10.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral13

Sample

~/ubfo/jeymah/rolm/uiup/nxzoa7.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral14

Sample

~/ubfo/jeymah/rolm/uiup/nxzoa7.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral15

Sample

~/ubfo/jeymah/rolm/uiup/olsp9.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral16

Sample

~/ubfo/jeymah/rolm/uiup/olsp9.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral17

Sample

~/ubfo/jeymah/rolm/uiup/rdyb6.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

~/ubfo/jeymah/rolm/uiup/rdyb6.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral19

Sample

~/ubfo/jeymah/rolm/uiup/sndr8.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

~/ubfo/jeymah/rolm/uiup/sndr8.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

~/ubfo/jeymah/rolm/uiup/tutuhk3.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral22

Sample

~/ubfo/jeymah/rolm/uiup/tutuhk3.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral23

Sample

~/ubfo/jeymah/rolm/uiup/xmyviy5.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral24

Sample

~/ubfo/jeymah/rolm/uiup/xmyviy5.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral25

Sample

~/ubfo/jeymah/rolm/uiup/xzxis4.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral26

Sample

~/ubfo/jeymah/rolm/uiup/xzxis4.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Malware Config

Targets

- Target
  _Notif_TTXRU-rprntkZAQTT.HYKTCConfgQNIZ.vbs
- Size 2.9MB
- SHA256 bc1a20cd0eae647d88a4aeb5fe3a204ce8de5a5114144f77044493c4971fa074
- MD5 00f2e7146baeddc926a76ebe48b2a509
- SHA1 5ff052f6923103aa8f741ac2768817b7f0a1c63c
- SHA512 c3afd1398cc4a42f031092ec6dd4f1a7002bb9f10fb54cb0f7847bdbff563aa6f7ba9fc9b667122168e05e9a20e1b120896db17589890bb76bc0832845502a8e
- SSDEEP 24576:3Nfb+FehaLi7PGzY5ppjsEz/FR9LmtEFtVqPoiDUXn5iSNaXYtIfLZcA5UWzzHLJ:cS7rvxt4pYX3KUCh1L25KxXznc7UtXR
- TLSH
  T115E523736EDA2D5B0DB0476AF0072638BE7ED823468EC1E9CC9C52D639C7645C53E4A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  ~/cfdb2.xml
- Size 63KB
- SHA256 3992dbccf18e03c0183f61cc8bddd4bcef7c3617fbb3e399b355d20bbf4589ce
- MD5 9fc0a78ea1bed4abb0fe25093d906acf
- SHA1 b21737389318f70a5174eb2fec352b37483e34a9
- SHA512 28b54caf7eaf847518a2b5ae7aac20d5b1578a24facc5bebdc05eb0c77909667e779d69b3e44a2083487d2642a7dece9636861a5e8d6c5165a9bbfe456bfa899
- SSDEEP 1536:KmKy1UIKgEqRPwHHnToIfiIOjIOy3VEKV:NKYwHHTBfAFy3qs
- TLSH
  T1C8538C06EA809273C5F40A79D5EACA6D8E3A32500BAD91E32DDD6BD02D047F573752CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  ~/odcem1.xml
- Size 40KB
- SHA256 329d2ae45f5f617899f366e6fe3a5ed649242415ca5ad47d9b641ec9831a7d2b
- MD5 8fe7411ec894be1cfd91b165155ff72a
- SHA1 55453dbe13d91f55e1a40fa25663d1f16ecc6d48
- SHA512 7fd0abcae5f0cddecd8a17625b9e80787c26e60c2414b3448603a953e32e2d7537d910b0e66f7e45b45525457e5d113a5f44136532e6543f3df266a17b4fd6bd
- SSDEEP 384:yixv7hdVexaDywGfJssxNyEIYi2mL4/y8RLVHLXbZmt/:R9NM1uYiDLk5/fm/
- TLSH
  T15F134F714A50CDDCEB22FE32A24E0D3E5663E6C055E473532098A470AAB9352DB5EF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  ~/ubfo/jeymah/rolm/uiup/bvke1.pdf
- Size 25KB
- SHA256 2deeb730896782260bea89f5c45bda4b53758a7ca465b2e3fa5fc2264e47b96c
- MD5 29b6dc8d997226e0c225f1fce163b519
- SHA1 44353ecab4b5f8349af5d300e252b2b09d9a1831
- SHA512 7081138fa6f23baa69cf8301dbaa0402696a6de6c8f701fc8e578ae751bd45b514ccf0d7efb62c5700959c475579b673ece1ac36031c3c7aa23d5f112cdc900f
- SSDEEP 768:Wh/+uQut/OrkvrqzuASU4Ra3UrnB99T1TSNpJ:WhF4ATLU4RAmB99hTSbJ
- TLSH
  T1B3C28D60F5E41C8DD4438551A5A039D10969B39339C86C8278EC8F8AAF50F8DFBA797E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  ~/ubfo/jeymah/rolm/uiup/ensm2.pdf
- Size 21KB
- SHA256 efd368c136d272549b221e24cd185ac051b3e1d03961d29776bfa5c3dce60000
- MD5 3d5d3de82344cb7d31f727d1f99b5a7c
- SHA1 7831377c33284cddc3b56e2dd6fd9ea1c65ad903
- SHA512 057d239a2d9654006e5b3b9b518311df3ad57df6b1aaf1f496e4e1f448a88d253fe36e25c9364b575d8d3505fdf22c64d2895b8f45ba75b13fa4d1c6804aa293
- SSDEEP 384:EC0IHy53ivgqKhjNKAbH5dP9EqOZjgRIUy55mdVlyz2Rtwr6THhK6pLomxgPz7g2:EPmn4XKmREqOAIU0Clyz2RtVTHpox7Zr
- TLSH
  T197A2AE2C4280CDF5CF2656B64A5835C766CEB296C0CC86D038ABC2473A91F3A985F7E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  ~/ubfo/jeymah/rolm/uiup/fpavzy10.pdf
- Size 32KB
- SHA256 b3f1a28877924d7758483769c5093cd3d8387cc7350d32cefbbd0ba576e158ff
- MD5 13c5f347fab9419bf9983a6d86ebd1d0
- SHA1 e41f6fb75ea3a14c5e29d8b4d9239d5eb13185bd
- SHA512 f4a5db8acb70e06a2c1b9193f528ffb618d91668b816975210454378802675842612fd0d8448538be57e58f6f7a4130f956119fbf4d9c44c88d790f56ea950fe
- SSDEEP 768:p1tS60qAyVEfC+BAVdRp7Fx+fJ7WZhayyT6FxaYByZ4qKIA4pv:p1tSbDOEaVdRp7qGJyTg0YYZM4l
- TLSH
  T194E2BF092447D5A8CB0765C6BF0EB9A19D4DB30F40A498962F7D5D630A83FF6F82D2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  ~/ubfo/jeymah/rolm/uiup/nxzoa7.pdf
- Size 25KB
- SHA256 b9257f768980bb03ae7e91c7cc395ede47e9ce84008ce15f7a79a333ec926be1
- MD5 e6cf1febe0e14d6f1e15237933fe8205
- SHA1 233fca793a773e7555329493ecb63f3f3cb11691
- SHA512 f712cc163bb184996e41033a72376ddc9a819b26b744b65e3ce5c9eab71bea9111b6c60c91a862b7260125e5f1f62b3b5ec9cea607f2c85b51aff40048036d5f
- SSDEEP 768:YaWqmeeAOxaPDiFJHohSMMhaLxwVEtbjVab/WiqKIA+hQ:YaWqHkx4DiFThh2xVjV6We+e
- TLSH
  T1E4C29F18B12FD894DB5393CA7F0EB8D354586B1F41A888D11EAD8D82D89FEE5F50C5C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  ~/ubfo/jeymah/rolm/uiup/olsp9.pdf
- Size 26KB
- SHA256 8ac50f41fba3f8d930950f8e54bbd1ca094b460831e8a6ff7be555834a77afc4
- MD5 3c086d7a43532065c323662742b6e3dd
- SHA1 69422eb00e71e8fb294985fce7e98f0547d5a6b5
- SHA512 39e4fd4b245128035231cf2cd9bec1f895ff428d95157c0ce1121a1553da5c9e3bc188bce9808c5df20c446b19bf1c76844b3341cfbe97827f031308792eefd3
- SSDEEP 768:r+QZtA2+5hZAX71z0u+4qwPrCAz84OFXl4qKIA4pz:h85hy+EtPrCyCM4Z
- TLSH
  T101C2BF28604BC934DF031AEEFF1D2C82705DA31B1198A8B61D5C8F86959BFF2F5098C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  ~/ubfo/jeymah/rolm/uiup/rdyb6.pdf
- Size 37KB
- SHA256 67303a6eb9bbf4c37c0e1f59214d8af6cf7e529a2fde37695b840db46ad4fabb
- MD5 32678012c1bc614a8facb8674a05222a
- SHA1 3457e43047a5ede8dd33d10e76d65ae396bb284f
- SHA512 0c18cdb4ca04060fd933463d2e09e14da249e65b92ee3edf8c144c3cd9cb7a2b54be36deb8c7c759a827d0f02b0b2fd4739c3b1a36efa11cf4958db719d29a65
- SSDEEP 768:UKo0irYoFD/2i3BjdqCP2t+i5M17e8uh9VN2eiIAa8CYlQ:CHNd3Bj5P2t9Ce8a57SQ
- TLSH
  T12203BE279D06D54DD856E5D27F6E792D8B1E733A7AC068C23C7C0E835B00990ED1B993
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  ~/ubfo/jeymah/rolm/uiup/sndr8.pdf
- Size 1KB
- SHA256 6e36ef6c309a508bb6e59bd452382090b130006bdfda8a28a9eab47a87203772
- MD5 2d8bc26ab8e8ccd37cc7ce6689844e78
- SHA1 ca13a431c96ada9b2ed1f6cf1a08d910bb54462b
- SHA512 3a1624355403f4252b1ff5d08d16ea763cab4663b76f7d6b37983a3b39d8e84c2375ce6003b51045a1a4e7a4e99e5c104b61011a933dddc7dbca70e5cfc36e28
- TLSH
  T1A741667459EC5CDCE4E756407F4AB987B46C700353D8E4D2105DC60F418AFD6696391B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  ~/ubfo/jeymah/rolm/uiup/tutuhk3.pdf
- Size 25KB
- SHA256 eef534d5b510e40abdb97af2c37f8810555707467a6669aeb86284941ad3a1da
- MD5 4f6a8772b8ba69fcc2add660fabd4717
- SHA1 1b08fdc99b1c6507b01d2eb33570817994f298dc
- SHA512 bcddcb523ffb87c1449266d1e3f7c8318993d38b123f79fba23313017c9130a8cd7af6e71900ac4daa472acf5b7cbc9b3f7c5c0a4efe93f9d882a44037ef4e5b
- SSDEEP 768:dlhX38EWdokhimfq2JGulIoXwIx2iqKIA+h4:x7oRhTCwGdoXwve+W
- TLSH
  T10DB2AD0E6087C5A0AB8B67C6FF0EFD5B6154A30F2994C8619E5C0D029A97FF8F11D2C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  ~/ubfo/jeymah/rolm/uiup/xmyviy5.pdf
- Size 27KB
- SHA256 28db7f9abee695a72199093ba7474693111323f5c1e4bfb2f2fef0c408111338
- MD5 0a95a73b6a33e76788b6376eb6a00518
- SHA1 d9e8f21773ab48c420920a6e5f50f920ec9b8665
- SHA512 9b02664bba6d333a13867634321f6b7b5306a4f1eb55cdf252985af12e576b54d822c6e7a31b7b605626f937f8318faf497fac8eb2408bb40707029af67f46ed
- SSDEEP 384:seI0ekMOgRqGsJ8HssUdoj0vJ7B5X3gVxUXxtIXfrWzUKdoQnopgRIP0oKw33sLX:tMOgRiiH09B5nONDWzULwC4qKIA4pY
- TLSH
  T1EAD29D5E5447E1E1DB0352C6BF1EBCE66049B30B11A89EA21E2C1C475A83FB6F45D2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  ~/ubfo/jeymah/rolm/uiup/xzxis4.pdf
- Size 24KB
- SHA256 e5953e034a05460eed3b99a55887adff98471b1a1ab1bb958cccdefc76169b2f
- MD5 0d35cd1ac7f5cd85b909c6d387cdf741
- SHA1 79db70b6b9b4427f6a3128cfbb77ae99e57cbeae
- SHA512 37729d7165585f052a4d7f1a55093f97cdf21ccc2bbff1b8c1eb5d91737a8e532f2c85b8403e67a6fe01f771d3897224f12cad0bcc0e9a7d4be8cd0639a8101f
- SSDEEP 768:EqKgmQHghb3lHY2cr7vwi4gJbik3+VVFHRkiqKIA+hk:/mQHgpWP4OJbikOzV6e+S
- TLSH
  T136B2AE0C5103D960DA2B17EBFF0E688752A8F34F61608DA06E6D4D558993EF4F94E2C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecutionpersistenceransomware

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

adwarediscoveryspyware

behavioral8

adwarediscoveryspyware

behavioral9

adwarediscoveryspyware

behavioral10

adwarediscoveryspyware

behavioral11

adwarediscoveryspyware

behavioral12

adwarediscoveryspyware

behavioral13

adwarediscoveryspyware

behavioral14

adwarediscoveryspyware

behavioral15

adwarediscoveryspyware

behavioral16

adwarediscoveryspyware

behavioral17

adwarediscoveryspyware

behavioral18

adwarediscoveryspyware

behavioral19

adwarediscoveryspyware

behavioral20

adwarediscoveryspyware

behavioral21

adwarediscoveryspyware

behavioral22

adwarediscoveryspyware

behavioral23

adwarediscoveryspyware

behavioral24

adwarediscoveryspyware

behavioral25

adwarediscoveryspyware

behavioral26

adwarediscoveryspyware

© 2018-2026

Terms | Privacy