277ca6eef5c63f876402d05e65850faf205d519a24f402beca8edb8f39606430 | Triage™

Login
Reports

Overview

overview

5

Static

static

3

install-tl...all-tl

ubuntu-18.04-amd64

3

install-tl...all-tl

debian-9-armhf

4

install-tl...all-tl

debian-9-mips

install-tl...all-tl

debian-9-mipsel

install-tl...texlsr

ubuntu-18.04-amd64

3

install-tl...texlsr

debian-9-armhf

3

install-tl...texlsr

debian-9-mips

install-tl...texlsr

debian-9-mipsel

install-tl...ss.ps1

windows10-2004-x64

3

install-tl...ss.ps1

windows11-ltsc_2024-x64

3

install-tl...mgr.pl

ubuntu-18.04-amd64

1

install-tl...mgr.pl

debian-9-armhf

1

install-tl...mgr.pl

debian-9-mips

install-tl...mgr.pl

debian-9-mipsel

install-tl...gui.pl

ubuntu-18.04-amd64

1

install-tl...gui.pl

debian-9-armhf

1

install-tl...gui.pl

debian-9-mips

install-tl...gui.pl

debian-9-mipsel

install-tl...tq.ps1

windows10-2004-x64

3

install-tl...tq.ps1

windows11-ltsc_2024-x64

3

install-tl...le.vbs

windows10-2004-x64

5

install-tl...le.vbs

windows11-ltsc_2024-x64

5

install-tl...ig.vbs

windows10-2004-x64

5

install-tl...ig.vbs

windows11-ltsc_2024-x64

5

install-tl...to.vbs

windows10-2004-x64

5

install-tl...to.vbs

windows11-ltsc_2024-x64

5

install-tl...ad.vbs

windows10-2004-x64

5

install-tl...ad.vbs

windows11-ltsc_2024-x64

5

install-tl...DB.ps1

windows10-2004-x64

3

install-tl...DB.ps1

windows11-ltsc_2024-x64

3

install-tl...BJ.vbs

windows10-2004-x64

5

install-tl...BJ.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
install-tl-unx.tar.gz
Size 5.0MB
Sample260801-plcl4saq3v
SHA256 277ca6eef5c63f876402d05e65850faf205d519a24f402beca8edb8f39606430
MD5 125039cbee0d042e6fc6a1cd1530a9f6
SHA1 30ba31496e95ed776f062b6790a3dbdf16f7e96c
SHA512 d14bdc03c3ec56250a3fe0f13da062ee8d0bb9be463144cc5cb816ab6bb503162c4ada8e696628c7d02572ea5afe92ae07dde6a6e943157e5b49a9b008e8ca3c
SSDEEP 98304:AI7tzQ9V7D3k1PGd/kabYjOuYBspbSFIKKlzBbt9OKJtgeK8Ul7dhoGp0q1Yq:R7tzuzk1ObbFjybSy5bvd/UlhOGOLq
TLSH
T1D436332A4F719EBB9734F4DF1493DA01F191AC49C37F893AA441298CB5B80977C8D26E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

antivm discovery execution linux

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

install-tl-20260731/install-tl

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

discovery execution

Behavioral task

behavioral2

Sample

install-tl-20260731/install-tl

Resource

debian9-armhf-20260513-en

debian-9-armhf

5 signatures

150 seconds

antivm discovery execution

Behavioral task

behavioral3

Sample

install-tl-20260731/install-tl

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

install-tl-20260731/install-tl

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

install-tl-20260731/texmf-dist/scripts/texlive/mktexlsr

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

install-tl-20260731/texmf-dist/scripts/texlive/mktexlsr

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

install-tl-20260731/texmf-dist/scripts/texlive/mktexlsr

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

install-tl-20260731/texmf-dist/scripts/texlive/mktexlsr

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

install-tl-20260731/texmf-dist/scripts/texlive/tl-errmess.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

install-tl-20260731/texmf-dist/scripts/texlive/tl-errmess.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

install-tl-20260731/texmf-dist/scripts/texlive/tlmgr.pl

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

install-tl-20260731/texmf-dist/scripts/texlive/tlmgr.pl

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

install-tl-20260731/texmf-dist/scripts/texlive/tlmgr.pl

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

install-tl-20260731/texmf-dist/scripts/texlive/tlmgr.pl

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

install-tl-20260731/texmf-dist/scripts/texlive/tlmgrgui.pl

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

install-tl-20260731/texmf-dist/scripts/texlive/tlmgrgui.pl

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

install-tl-20260731/texmf-dist/scripts/texlive/tlmgrgui.pl

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

install-tl-20260731/texmf-dist/scripts/texlive/tlmgrgui.pl

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

install-tl-20260731/texmf-dist/scripts/texlive/uninstq.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

install-tl-20260731/texmf-dist/scripts/texlive/uninstq.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

install-tl-20260731/tlpkg/TeXLive/TLConfFile.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

install-tl-20260731/tlpkg/TeXLive/TLConfFile.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

install-tl-20260731/tlpkg/TeXLive/TLConfig.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

install-tl-20260731/tlpkg/TeXLive/TLConfig.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

install-tl-20260731/tlpkg/TeXLive/TLCrypto.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

install-tl-20260731/tlpkg/TeXLive/TLCrypto.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

install-tl-20260731/tlpkg/TeXLive/TLDownload.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

install-tl-20260731/tlpkg/TeXLive/TLDownload.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

install-tl-20260731/tlpkg/TeXLive/TLPDB.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

install-tl-20260731/tlpkg/TeXLive/TLPDB.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

install-tl-20260731/tlpkg/TeXLive/TLPOBJ.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

install-tl-20260731/tlpkg/TeXLive/TLPOBJ.vbs

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  install-tl-20260731/install-tl
- Size 124KB
- SHA256 0cb9f1d9e8781f7a4771da0c3544e40a091cfb2b444d809d74f9f510147e769e
- MD5 a6c8931d03e927858853e75b48b22aba
- SHA1 936521033b2a525f850d18da202ea4c1dd923bd1
- SHA512 ac25776be58d7821a2d0203e5a28ec73c2683b7a47c7c35ec0d0818b03c3e97a416382ce43ad36fb6178f278ba3253f8f4de78a358d815bf68bf4e70251b7721
- SSDEEP 3072:0p4+IT8QZv9yxymOLpG3gEce5SpP0QmLmlXYx:0tIT8QZvdXLggEce5SB32hx
- TLSH
  T1DBC3F9063AD6A73326A361FA7FCF9095F719D0671016EB24788D82981F4717C42F7DA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution antivm
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  install-tl-20260731/texmf-dist/scripts/texlive/mktexlsr
- Size 8KB
- SHA256 69ad33f540131258c479e2045ba875ca1bdf0f83932c6c5c3d0d99b262966ef3
- MD5 2e3ea4872d1461d2607b6149c574054e
- SHA1 6ad3fd8bd9210ae1c6962467e60c24f68f6aa2b3
- SHA512 c3cc5f3b22c9e6d88ecfc3b788b89434a014dcd22c4615dcc74e3b2949e6f2038b6239c99a4f3d75af7d977f448228e7ffb31ebbd751eaf8084dbb92b40327ea
- SSDEEP 192:Tma0T1WxNzyO3a+2Vp8jpdLvC2U4qa5frKx/uXVd2Q7GE7pRJTL:aaCWxN+O3a+MWpdLvdU4/5T0/u7HKE7p
- TLSH
  T1F402D806BFC4A770045382B56646B081FB18D12F8869AB3CF1ECD1495B62B6461FB3BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  install-tl-20260731/texmf-dist/scripts/texlive/tl-errmess.ps1
- Size 134B
- SHA256 1a0fdc2d943e070d8bef825f86e550c4417cd208da1bd86edb28e09d205a069a
- MD5 b544831e43daf0749d58eebc3555a179
- SHA1 e7127c65e268fe5f32dae6f73b95e33c28fd831c
- SHA512 98739ba4b83d28a3d9d5981b7469f07591bf8d455a5d5f63e62dd2dab22738e5ae9d2920f2a54db283a0a49cf9d13acad6b95de61c37216cd6e9ba2fdd03b3f7
- TLSH
  T1F5C02B946E90CD064235C056BED2B00238504220F0007401411C5063C8100079F74302
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  install-tl-20260731/texmf-dist/scripts/texlive/tlmgr.pl
- Size 356KB
- SHA256 bf22e87652e920da22160717273b777aa19eab5165cff89e0ea2bd8504637432
- MD5 91796bc0864f03659269454e478d8ce1
- SHA1 19c062ca425cf0f703a559c812ac02bf5d4ddb2b
- SHA512 107056d25d962ae37a465a098dd6f436577c752c665c82eae7b8fb06920c25d977627f3d51727b214e5093e32d4963610bfa511e72e05eda5337ccb0868824cb
- SSDEEP 6144:SlhnAbJlvRKOpgNPpwKTn6CwLY+4OeBibsAThCuHZpYSuz8W8r:5ONxwKTn6CwLY9nM
- TLSH
  T17474E71A36D3A73315B325B56FCE90907739C1A72228DA617C9E81D82F4247887F7EE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  install-tl-20260731/texmf-dist/scripts/texlive/tlmgrgui.pl
- Size 89KB
- SHA256 318c715466338b2cb3b1f97db5e7a50c783db030846c4f938e4da31940aceb43
- MD5 3ea3c51bbb567014f2b4558a2e126d1b
- SHA1 ef4e473a05a9e0d1290356bf4f93b5c444f353d3
- SHA512 c9aadc36c2683e39a942c5f7e7102b106ecc839b2f2ded29f0d6b7eeb3e063c392ecf866b11daae05fdad7a2bae0aae694f8e1264d369f26a86974f0c4e1b8d4
- SSDEEP 1536:5bNxKZiwtv18S9yJ+XS+bsoMXlKJlV6lK6a:56ZWS9yJ+X4Wb
- TLSH
  T12393B64630D752278AB73475ABDF40247EAA94C7224DEA823ADD71DC0F86478C8FED61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  install-tl-20260731/texmf-dist/scripts/texlive/uninstq.ps1
- Size 287B
- SHA256 5c4a041679b5371c0419aa783f03f3e391b3c20177cb83abc044fd388719b66c
- MD5 44b05f3c655941dae8f9ea5e832826a0
- SHA1 f2d5bc1ae253671ee6b5ef6edca7aebf7b96d220
- SHA512 b07bea1bad61592b269c3f8610a7193ae03b1a5add5f2e28b79d37c7b3827e9d1e4c7a0d936a23674a6838693dded2fe807312676bb8b7deb00f2068de581e66
- TLSH
  T1E5D0EB85E2E01221CFA21271BC8360CFF4F4033062252E3211EEB146D84201A00FB682
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  install-tl-20260731/tlpkg/TeXLive/TLConfFile.pm
- Size 21KB
- SHA256 33af2b63741c654d815f256a73c24f5cd5d55c052c3852fb55c6e6eb123110f7
- MD5 1f966e64fabfddaf435f6d0890ea6a56
- SHA1 8c212c2825e852a2c211300909e40bfc17ddb8b0
- SHA512 20a9f3fcec9db87707d6ae3323804ec8a970420df4a59e9c9f2515d1c0fff9855aeeaecaf805d8edf10dc0320586833a4c677f2d9d4deea1ef70f8a714de136e
- SSDEEP 384:YJSnU41e0tMpij8Zl8kAICElgJKUpUu8TDc:YJSnNe0Fj8r8kf8KuUuZ
- TLSH
  T14DA2B70A38CF96270066F8358E8911186A1DEBD3662DE9807C7CB5D49F91D29D2F6FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral21 behavioral22
- Target
  install-tl-20260731/tlpkg/TeXLive/TLConfig.pm
- Size 13KB
- SHA256 b9c35881c73ce8562bd1197d791a1046574dd337115f17859c4f68f38663d9fe
- MD5 848d73b580054ae1ccabd57c51b9db07
- SHA1 1503703b3837e41ee67ac969f6a196f08451e925
- SHA512 a972c1b641249b2eab4d17ef91dae61c30fb37d582e2f38ebbcb30b5e3a3bb037078508f270f2e6b9d5f7184c9e22fef09674fc061d344dd03e794c6dbd468b6
- SSDEEP 384:mC/rNMi6NouplqKYcEnZF6EXcZ5ZshJGnk18j:mOTQFpcKYcEZF6EXcZ5ZsynRj
- TLSH
  T170520A5B7285833328C253D6B91E96565724F59B6255D8B03C8EE14C3B1F87A03FB1EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral23 behavioral24
- Target
  install-tl-20260731/tlpkg/TeXLive/TLCrypto.pm
- Size 19KB
- SHA256 70e66670a9235d4636dca71bf7ed4c764fef866589bed79dbae7972961c21f2c
- MD5 96f79564e8621ca7b0705b98a29a6ebe
- SHA1 5557b405f6083a8178256493eec26efc8644c184
- SHA512 ccc4dfe879123bea3fc1bcfa4659195f3a15790a26f924f065f62c2e2cbf053ed6e803b913566c975ae69e9a940f04902e8ff98d2f9001dcfea81a7b9ad6252d
- SSDEEP 384:wLZ/gVzdkWs6vBprG+R99XvK3rM7jcwmshym/3M:VVJvBpU3rUcwfhU
- TLSH
  T1EE92821B69F363660A6FD1A42A5B8168B7568ACB0349DF00799CC0E56F18430DFFF5E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral25 behavioral26
- Target
  install-tl-20260731/tlpkg/TeXLive/TLDownload.pm
- Size 5KB
- SHA256 aa047b1128c34a3320204033ff8e2d5d6e6574a6baafbfe743cdc08a651adb98
- MD5 6bbf7f63d25a1af65ed17614ce5195d7
- SHA1 731b06ab9e90a58700f4f152a5e8ccd1c713971a
- SHA512 2442dff89a6a47c9142317e16c4d5427c91a8d464805fe2094e3a21ee8f8f2285912242315cec66fc61c37a98d7c79e806d657020fc85a3ed05fc1e51e226647
- SSDEEP 96:wBNqeN0XPr3veqxMM3EjTclhwaEiNkETqZYW18f5Jn0dW2Sjcfb4t/+l8hW:F7eCITehFEiNkJPiX0d1WI8hW
- TLSH
  T140C186CFB092A6136DB28036754EB091BB5DA1072A1E8560BCBCC0996FD783559F38DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27 behavioral28
- Target
  install-tl-20260731/tlpkg/TeXLive/TLPDB.pm
- Size 90KB
- SHA256 40cb6374e9742a77ff9fdc67173228af78cb73daf5773e46336c43e64c992028
- MD5 c0ede5be453657927e5aa08db3508ccd
- SHA1 12a0070cb7f9f271b99040cbcdb6d613cd158c28
- SHA512 61af54ce6899febf856177d1d3a04fdc90ba4a759654b18989252542809911f393838e839dce7d0ef5f47ef6c8ee3203fe8f6f1030055198b58883600b29668c
- SSDEEP 1536:BcWbMbPB2z8crnVBmJVfTgSDFEB5ij6l2R93bpF3Cdh/H8z:SMWuYfTgSI5ij64R03/8
- TLSH
  T10693B50974D3A73265B3297A2ECE9004B31DD4A3251CCD603DADC1486F8287A96FBEDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  install-tl-20260731/tlpkg/TeXLive/TLPOBJ.pm
- Size 58KB
- SHA256 6e49621a8a843ce90769bfe2c3ddcaaedd7fb94e3484bdfd14e13e618820f1c8
- MD5 590d324cd06d3bab6cb0938798df091c
- SHA1 c6227e3b44ca15e7ebc8ce4608934903c378f22c
- SHA512 d0752c6ad150f401934f2afe940831b7561efdb652117bd94b82cb3159d6fc46b6bb34f114d2062e221fea3d415b7a373cc81dad5640a4b60b54e814f11102c9
- SSDEEP 1536:fetA8EN4dhS5rllXY+v+D+Lzz+H7vozy9Puoz2qmR:/aMzyhuoz2dR
- TLSH
  T1A743A6567AD69373B1B335B81ACD9004BB0EC453261D9D543CBCC188AFC183A65FAEAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Unix Shell

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Network Configuration Discovery

Virtualization/Sandbox Evasion

System Checks

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

antivmdiscoveryexecution

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy