f16cefd7e171a776eb86df8a8e7d7342a3e28f5f189596f7c2a827703a5c7694 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

Tool-main/...ree.py

windows10-2004-x64

3

Tool-main/...ree.py

windows11-ltsc_2024-x64

3

Tool-main/AltRat.py

windows10-2004-x64

3

Tool-main/AltRat.py

windows11-ltsc_2024-x64

3

Tool-main/...Rat.py

windows10-2004-x64

3

Tool-main/...Rat.py

windows11-ltsc_2024-x64

3

Tool-main/...ord.py

windows10-2004-x64

3

Tool-main/...ord.py

windows11-ltsc_2024-x64

3

Tool-main/...ord.py

ubuntu-18.04-amd64

3

Tool-main/...ord.py

debian-9-armhf

3

Tool-main/...ord.py

debian-9-mips

Tool-main/...ord.py

debian-9-mipsel

Tool-main/...ing.py

windows10-2004-x64

3

Tool-main/...ing.py

windows11-ltsc_2024-x64

3

Tool-main/...ipt.py

windows10-2004-x64

3

Tool-main/...ipt.py

windows11-ltsc_2024-x64

3

Tool-main/nigger.py

windows10-2004-x64

3

Tool-main/nigger.py

windows11-ltsc_2024-x64

3

Tool-main/...xe.bat

windows10-2004-x64

3

Tool-main/...xe.bat

windows11-ltsc_2024-x64

3

Tool-main/...py.bat

windows10-2004-x64

3

Tool-main/...py.bat

windows11-ltsc_2024-x64

3

Tool-main/...nnn.py

windows10-2004-x64

3

Tool-main/...nnn.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Tool-main.zip
Size 55KB
Sample260801-frse3seb49
SHA256 f16cefd7e171a776eb86df8a8e7d7342a3e28f5f189596f7c2a827703a5c7694
MD5 ffa7e302393eda3572de05a2751f2ca2
SHA1 cc66b36915f923aabbbfbdf9f21c62f3976c8971
SHA512 c1e562f45adaaf83117f47a1eeddde0aafc2b5ca3132a7dac59722f034a55fb3eeb4daacd10b9901a5a58373041d2a39a00f4b34decbc13496411adb4ce1e04d
SSDEEP 1536:80uACKkJzAVylJJQB2ADPVlsoDAKCtM/msH+a7egHDxe:80uACyAyBFPlDAZtmHpM
TLSH
T1FE4301A9E12164C4DED55CFC981FC5CA8B5E2E054C30B10A944A2F8A6EDEDC46AF5DC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

Tool-main/Alt-tool-Free.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Tool-main/Alt-tool-Free.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

Tool-main/AltRat.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

Tool-main/AltRat.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

Tool-main/Discord-Rat.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

Tool-main/Discord-Rat.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Tool-main/Server-discord.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Tool-main/Server-discord.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Tool-main/Stealer_discord.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution

Behavioral task

behavioral10

Sample

Tool-main/Stealer_discord.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Tool-main/Stealer_discord.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Tool-main/Stealer_discord.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Tool-main/Steam-Phishing.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

Tool-main/Steam-Phishing.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

Tool-main/built_script.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

Tool-main/built_script.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

Tool-main/nigger.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Tool-main/nigger.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

Tool-main/setup-exe.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

Tool-main/setup-exe.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

Tool-main/setup-py.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

Tool-main/setup-py.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral23

Sample

Tool-main/setup-pythonnn.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

Tool-main/setup-pythonnn.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  Tool-main/Alt-tool-Free.py
- Size 138KB
- SHA256 f57679809dc5b21d3cd4234906de3dfec51a1ab3100e3546e67bc65aa40509aa
- MD5 371ecf5daba90823b073e22971fd98ca
- SHA1 5bd30f40cdc731cc9d40e6264c5c01ae8d1ef72f
- SHA512 37553a078251cc756a99bfb3f84cf3c2bfdf5e0d0e8ac31ab19e552c74664726aa8fe83ac666191b0d247918bbe6ec6d927c1a51e76ccbe13ec751e4785bac10
- SSDEEP 1536:kD2fjrDSSlMucpQoYogoKdLHmRygcM3UzL2hyGF3cv1maNvlnB:kKnSSSucphJRKSbkzL2hy+cv1maNj
- TLSH
  T119D3C832D8102E718347C82D98F2E51AB71A39539515B434FAEC92D82F8D53AD2B5EFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Tool-main/AltRat.py
- Size 9KB
- SHA256 7529e168afa5055741a7be7e6f3c3563a4b15b325541d6f589b4cb0f80a8bf63
- MD5 c60211f34fb5c2744b6a82d4a3ac4ee4
- SHA1 299445978107599b20fa0f154edbdedecdba15ae
- SHA512 061b5d02b76a837d2817b299d17df738dd0a62fb8705f2375ead6200676d07892adecdeb2d426645c83b417abbece8e5548626c65e1521c0bbcb4b61c011aa4b
- SSDEEP 192:vRDXjz3/ZV4as+GYBy8EPPb3rh9fDN1FlZct:vJTz3RhJByBPPb31lFo
- TLSH
  T119125085CC7E182A02B7E2497966F087E7244B5341273723B7FC866CAF7C45182E4B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Tool-main/Discord-Rat.py
- Size 14KB
- SHA256 1b924b95eede54ae665b3064c5f27b9ede7add71371cc5ca58420dbfd6dc6a63
- MD5 32bd9d995248fbeb063575f9ca4850a5
- SHA1 9b8b3d9d1dcf1c1cd704eb1798070dbe8389046b
- SHA512 ad0c24b9c63439f28bf2e65229be27075310dce88c5db3fa4a985fbee74d4ed73d5d428585f42bb86c71bc417b85ad0b6b2eeaf28d60592dcb73cea3258d3a62
- SSDEEP 192:kXTDPgO0ID2IC4cY+cNBkGiGRES8vYJbyWrqo0wF5+93cA3KBIS:kwIiI5cFWESwYJOWKwFs6A3KBIS
- TLSH
  T1A762C6468C7D1C354343A1557E95F08A27346E474206763AB7ECC66CAFAC37183E8B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Tool-main/Server-discord.py
- Size 1KB
- SHA256 acacc11d35652a0e91d7e1509d6d5d1dd316eff9b0646c6dfc4ca971efaacaed
- MD5 ad2c0d06cdd12bf84f6c32a4dedfc6c1
- SHA1 32e209d42395d31fc2517214e93d2d9917860be7
- SHA512 f23617190639dcffe06bb2f40373c000ade4d87417f51facd02c2fae4d3c08ad40a73bf51b24701080cde4b4cd3045af7c90a7e86c32eeda025e077379164a7d
- TLSH
  T1FC3112241A9DD42053E3C56A5673B34B990635275608A8007FED8AB82F200F693A2FEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Tool-main/Stealer_discord.py
- Size 15KB
- SHA256 c1693f83378d5f635c396614ec5dc2f5a37ca2e60b1e1c5c0900ea9d3295757c
- MD5 1b726f7b9ded049ed4b2b3a0e509cf56
- SHA1 8f4f18ee4cb6d3117f15c033313aab0f3065258f
- SHA512 0fd62c273a3d7a7ba183958978b23cf7b3c6a690e968e775d8eea6b951f19ee2c65db39e9efccfe9b7fed453ae4516fd6b52ad4517dcd554625a3fa45e064acc
- SSDEEP 384:JycOXmEpPA9i6jK6pDlPakp5l/R5pJ9Y6w54c1X1Xj:JFOXz2999mF
- TLSH
  T1446297057CB6642592C3CABCED6AD442012A7C07D90D3C297B9C52904FA9379DAF8DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution discovery
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  Tool-main/Steam-Phishing.py
- Size 22KB
- SHA256 ad3fd7bfa0caea7eb3bce59c07204ea2a36b5843fe9b5c29cba63f18f71fe1fb
- MD5 d0eb0672fa6167c1c4d3ef4244de4ebb
- SHA1 865a5f1d3aea7d1b0be1a629242526916cb7d542
- SHA512 f46080ed0cd3317db1324a73a800f50553af0f60b79372fe33b6fd9e8cec328b99ecbd5d7cf9f616966b69d41acfbd2ed35fca04620da3ae48d9e23248440f5d
- SSDEEP 384:xlKgsHOkIwozh/3YNjWhPECuQ4wN4SOiE6Ie1laxQvsi:xlKIwozh/WiP1zN6i1Ie1lb
- TLSH
  T1CDA21A5227B015167203C164BA9297DB3325C4C3A50AD57CBBEC6198CFCEE92CA377D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Tool-main/built_script.py
- Size 487B
- SHA256 cc493d477e747fb75c13758bf1a082ef20edba4c17c744f1f29bd3d58b64b388
- MD5 a34bbb188abb1f221f67a656e9f43a59
- SHA1 99068e45f8d66bf871f7b59269cbda89cf08a828
- SHA512 6334671ff637fb284140600a55f2ba0f05edc22d75687d304fd188044ff86e872b22004af851da90a3b7df43716a1102c92b1fb83203886a178e2ff825591011
- TLSH
  T1B7F02E3001D3899901A6E655F0112E08F6AE81116F7A6CD953F0D35F5867C46B9D0287
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Tool-main/nigger.py
- Size 4KB
- SHA256 c83078b459d45c99eb77fce38a515e2e6456cd054030007e88f7df950c1a083c
- MD5 fce70126857e1a01addc5fb125b621ad
- SHA1 5d0eaca65a76ffd912ea43feb7aea2a961995d85
- SHA512 27840ca1e6e801cbcd97a9e22eb70c4a9e10aab2ff338a0e7c8e95a6ddbc2f55be43548c2f060c93e84fd8b07a976fbb4e2f1df1955c0a2f1a974c24ebe0c787
- SSDEEP 96:kD30ndKb3SmprNapi5PDeHNBM2zlTiPKL3vd6wBNqLHuNEYxEVjl1hdTn:kz/LZN25eylBNqrDSEVjl1XTn
- TLSH
  T11CA18503AC572D1A8179C11C58C6D034DBA927179F146D2B79FDCA3C7FF94106528E39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Tool-main/setup-exe.bat
- Size 398B
- SHA256 bf68dab1f16bf543a561d8a9231b94a3de4eb425134e2c01470984bc7d456824
- MD5 0da135749fcecf1116b9031abec1f446
- SHA1 a665d4398662b6e2ed346bc694e74d65d8895114
- SHA512 23deee3d5e8f21af98a1ff1f41aa7bdf878eda70280410856f22915d85265c45a76471fc1585a1f1fbf0c5bfd923a9d883fc44f3cacc6658b6df3344a0914e18
- TLSH
  T18EE0AB4371A1B936B64A1F1AB86111012582B4D3A01B9C64D0AF00D5098B2B6B097A5B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Tool-main/setup-py.bat
- Size 663B
- SHA256 355fa4bcb6d210e6fb2c37774d34c29a524b30969976a3fbbf7f676907ee6cae
- MD5 11149dc660a66b87268e16e2074811c6
- SHA1 ffda4baccf1b69709e59c50ab5f69a951dab0585
- SHA512 fea0258e6f08f8f4bf12f3f2ab3545dadddd45e97daec340e83d9cf3b0ba3548c7e78c8b40fd2658667a4583c95374972b6366d8c7635c2b458e20b27f378025
- TLSH
  T17B01FE13F2E1E878A741AB2CB4A19061302D20E3901B7DD8F0E510C80E8A3B2F59230D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Tool-main/setup-pythonnn.py
- Size 374B
- SHA256 da0898b794e26cc59f58f1770097cb458dfa91a28071945be51cb1c0db15d3de
- MD5 7fd8f23bbc4ab574fa002988c0959dd9
- SHA1 01fabd884c558aef3123765f189aa6e1a7ef5294
- SHA512 302832fb3eb4decbf62089162d20517235bd1221dd97b4987d90353e8c9ecaf762471b9b02586009f023dfbac5e7ea171fe933b0d1a94ceff87380ab7e9b0b49
- TLSH
  T128E0D802D1261E13046A05ADF84012404EE265975D2138B877ED80DD8F0F31FA0F5A7E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Python

Unix Shell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

discoveryexecution

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy