df89b73be23db1292fb035cea15ebab40c665dd60de2b7d2a7d675601329dbab | Triage™

Login
Reports

Overview

overview

7

Static

static

3

TropixInstaller.exe

windows10-2004-x64

7

TropixInstaller.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$SYSDIR/OpenAL32.dll

windows10-2004-x64

3

$SYSDIR/OpenAL32.dll

windows11-ltsc_2024-x64

3

$SYSDIR/Tropix.scr

windows10-2004-x64

3

$SYSDIR/Tropix.scr

windows11-ltsc_2024-x64

3

$SYSDIR/unicows.dll

windows10-2004-x64

3

$SYSDIR/unicows.dll

windows11-ltsc_2024-x64

3

$SYSDIR/wrap_oal.dll

windows10-2004-x64

3

$SYSDIR/wrap_oal.dll

windows11-ltsc_2024-x64

3

OpenAL32.dll

windows10-2004-x64

3

OpenAL32.dll

windows11-ltsc_2024-x64

3

Postcard.exe

windows10-2004-x64

3

Postcard.exe

windows11-ltsc_2024-x64

3

Tropix1.exe

windows10-2004-x64

3

Tropix1.exe

windows11-ltsc_2024-x64

3

tpx.exe

windows10-2004-x64

3

tpx.exe

windows11-ltsc_2024-x64

3

unicows.dll

windows10-2004-x64

3

unicows.dll

windows11-ltsc_2024-x64

3

uninst.exe

windows10-2004-x64

7

uninst.exe

windows11-ltsc_2024-x64

7

wrap_oal.dll

windows10-2004-x64

3

wrap_oal.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
TropixInstaller.exe
Size 19.9MB
Sample260801-s95jksda29
SHA256 df89b73be23db1292fb035cea15ebab40c665dd60de2b7d2a7d675601329dbab
MD5 970c7007c0e0c70cc6c2b33c4ea68c5e
SHA1 6e0ba52551b254fcc6a621229a186839b6a6d2a6
SHA512 8314e23479d9c3f7ad27a25da04ad7867352a3557c2d470b66e8c2c3100d1e4d844e7c9acea7ae7b02e2d323c1fadd6dd4a8f2bde55b0dbf850954acf2d29212
SSDEEP 393216:YfFq0HpDcz1joSNOv4yF8FqiaF4ZtwH5dKWiod5Qc2+wG+2tggkC4g10Cw4Qr2cr:YNTJcPnqTCHJSLQb+wGBtgnC4g13w46r
TLSH
T1DC2733C237810C79E8DB5D7863FA1C15AB8E5294E2825043319937F487EA6A772F4B73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

TropixInstaller.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

TropixInstaller.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$SYSDIR/OpenAL32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

$SYSDIR/OpenAL32.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

$SYSDIR/Tropix.scr

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$SYSDIR/Tropix.scr

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$SYSDIR/unicows.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$SYSDIR/unicows.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

$SYSDIR/wrap_oal.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$SYSDIR/wrap_oal.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

OpenAL32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

OpenAL32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

Postcard.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Postcard.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Tropix1.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

Tropix1.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

tpx.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

tpx.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

unicows.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

unicows.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

uninst.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

discovery installer

Behavioral task

behavioral24

Sample

uninst.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

discovery installer

Behavioral task

behavioral25

Sample

wrap_oal.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

wrap_oal.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  TropixInstaller.exe
- Size 19.9MB
- SHA256 df89b73be23db1292fb035cea15ebab40c665dd60de2b7d2a7d675601329dbab
- MD5 970c7007c0e0c70cc6c2b33c4ea68c5e
- SHA1 6e0ba52551b254fcc6a621229a186839b6a6d2a6
- SHA512 8314e23479d9c3f7ad27a25da04ad7867352a3557c2d470b66e8c2c3100d1e4d844e7c9acea7ae7b02e2d323c1fadd6dd4a8f2bde55b0dbf850954acf2d29212
- SSDEEP 393216:YfFq0HpDcz1joSNOv4yF8FqiaF4ZtwH5dKWiod5Qc2+wG+2tggkC4g10Cw4Qr2cr:YNTJcPnqTCHJSLQb+wGBtgnC4g13w46r
- TLSH
  T1DC2733C237810C79E8DB5D7863FA1C15AB8E5294E2825043319937F487EA6A772F4B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH
  T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $SYSDIR/OpenAL32.dll
- Size 108KB
- SHA256 26ba695d73fdf78ff133ab9c0e12300c26076441627a25ffba80c8b8aedb10ec
- MD5 ce0cdc5459eaa1d574af781ddb8f2685
- SHA1 709f3ea879ee83ca8b61dba5a2e497919bb8a4da
- SHA512 8ccff5c8f02580116d539f63e8b849b57447d83d8b1eb7c91c4ad34761ca4c058dbbe57fd8e114f9eb7f463915b6c089c854f4d89800381f91a8f4088a6a3687
- SSDEEP 1536:yt/4Cf2I9FoBPKhT451Kg16REzdlPAPbyR9/FTvIhJt1xuTE1:yt/j93T459N5fhIhJt1xuTE1
- TLSH
  T1A8B37C1039D28472F04B477D418A87A59B7F1D13BFA298CBEF7416D86EA42E4463A3DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $SYSDIR/Tropix.scr
- Size 3.8MB
- SHA256 dccc32bd46aa698775113507f1aa235d5120f8f67b6c04165a6df7427f208433
- MD5 c57b24542d83c9a8480ff68bc4cb7aee
- SHA1 02584dd0948a1d326efcb86ce8d3dda7e5b7098b
- SHA512 32b20651d26fb92c87f69271150ac2f46bc6903784b05eefabe8130cb586164a2d511ebd86197697413c2aeb489ab96b2433e93344cbda494156daaf5b5d060a
- SSDEEP 98304:z3nbNyy4drOaHJ6pNKGGlIGVZAYAVle4YREAqUJz340zdJdhYxU:z3Jyy4drOaHAHKGAIGVZAYAVlCREAqeF
- TLSH
  T1B2065C00A752552FF9F309B14CBD516E51687A720BE490C7A3C8285F2AF69E37E31B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $SYSDIR/unicows.dll
- Size 252KB
- SHA256 f06f36fa03a5db4980c9d1120ada1d9e558515be73eff5b7cd34c48c0d9afd35
- MD5 f8d176db5b14aed7c9b25e0640226bd1
- SHA1 a31c1c641639f5b50e79e0330cfc91e6613bf7f9
- SHA512 ceb50c3de105cb8a9541161c2bc9d65cc86c9b2bf5e6e40dcb8c8227ba38e0713d30aa84d8479c78e03ee63ef2f75debe7a5bc6a86cc6dcbcee106d93b9597bf
- SSDEEP 6144:Y4OkcR5cbvIFc8vuB4ShpH4BemwbVkEZ77:YFkedmBPjHv777
- TLSH
  T10244F985BE80AE53DCB733BAB118763497EFDB6407186CD345C54F8A6571BC016382EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $SYSDIR/wrap_oal.dll
- Size 404KB
- SHA256 c2ef86cbdb7fa07a9da8f56d5ffa548c57c5eaafd1ce5462ed397de7b8c823a3
- MD5 9c24ed831ddfa8319382b2bfd9691aa9
- SHA1 ab7872c0c0f48ed156d505ebad2dc4b0baff36a4
- SHA512 f424c7f4ab4c40a0c53756f4441e911e0d0279e221547c9c04c640d857df0ec61f5e2c4c61fdbd464fe6a3b96605ca31b24bf753dd991959c47c85299a1b0aed
- SSDEEP 6144:oabEPTjusRMQGZrwsOvlc/NQPBLMSMykOl0AObO6Edy7u:KPJtDgQPBgSMfOl0c6ta
- TLSH
  T10A94AE21FA41C1F2C4AD447854B36B6E2A790B2113BEF9F3FFF01D5A5E642D4A836249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  OpenAL32.dll
- Size 108KB
- SHA256 26ba695d73fdf78ff133ab9c0e12300c26076441627a25ffba80c8b8aedb10ec
- MD5 ce0cdc5459eaa1d574af781ddb8f2685
- SHA1 709f3ea879ee83ca8b61dba5a2e497919bb8a4da
- SHA512 8ccff5c8f02580116d539f63e8b849b57447d83d8b1eb7c91c4ad34761ca4c058dbbe57fd8e114f9eb7f463915b6c089c854f4d89800381f91a8f4088a6a3687
- SSDEEP 1536:yt/4Cf2I9FoBPKhT451Kg16REzdlPAPbyR9/FTvIhJt1xuTE1:yt/j93T459N5fhIhJt1xuTE1
- TLSH
  T1A8B37C1039D28472F04B477D418A87A59B7F1D13BFA298CBEF7416D86EA42E4463A3DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Postcard.exe
- Size 220KB
- SHA256 0c04fa2845ebca65df1037b20106fdf733ce8ebe99b7d965da54102ec4b0acf2
- MD5 c9be01f6e187a5ac2090d1b5edce3529
- SHA1 bf613235c0a2a978662520a91a8e67e09e13641c
- SHA512 0ced538897953fa74872e5785235d958f5682b4afc06af41ad9806d97af56debf8e72ac65f2c881f669231d7417a6450ff101e51a01d317e8794aafc0fec0983
- SSDEEP 3072:nFdEKm5bZd/kZK2jmZ9IhTEvdjJlTJd+w+7gnAdft822QGuG4k4YLOsBo1r:nF+Km5NNKTov5PNddCdGpLOZ
- TLSH
  T16124AE3037E6C032D96B0A3144B583EE6ABE7913777195DFF7901E8E5D202C2A936369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Tropix1.exe
- Size 2.3MB
- SHA256 cc863f905c37cf6c2ea1ac128591a51e311f27b19faa0ac77b8742a180acc75f
- MD5 acd2e2e1491976a9ef4085a7a9cd08d3
- SHA1 4ead405a001ec18028602f6e6ddb08d8b5ed9856
- SHA512 9ad84ae43832cad3186d97a5c1fd433abd166c217ae7f5fb4f862ef706c56b893e99e25080864ffcf7515de8604797f11d5a28930c62af18d8bcd24685cdafc2
- SSDEEP 49152:bTndpH8LWlZqJVlJhdSyFAD84eW6fqr4qEOFTV1OXwYK7MJzBvH/ggoKieq5mlM9:bhphV1OXwYKYJzBvDoKieq5mlCx+08AV
- TLSH
  T179B55C01A742453BF9F304B689BE516E95187A310B64D4C793C818AF5BFAAE37D30B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  tpx.exe
- Size 3.8MB
- SHA256 518ed7bd62bef96fbcf41de374ec0d840b0d0199a167cc3b4c763a6abbf3f630
- MD5 c4386d3ff34a7bfb255133b71b2c0509
- SHA1 6324ff84dc28b7b58c4fd3a1262001762dd62684
- SHA512 37be49e00b517fb0e768ebff9c71013fc4df772b8dc143fd56943fc7ba6401f7a1b276606d45864a74f0595e5bf6274eac30668018d11a5adde5cabc315e982b
- SSDEEP 98304:jIb7NOIIbVTeM7RoS7RJDrnyD96DCGw+8OZKKTfc/I0NxDhS0gDvk:jI/N5IbVH7RoS7rD+B6DCGw+8OkKTfcD
- TLSH
  T164065B00A752552FF9F309B14CBD516E51687A720BE490C7A3C8285F2AF69E37E31B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  unicows.dll
- Size 252KB
- SHA256 f06f36fa03a5db4980c9d1120ada1d9e558515be73eff5b7cd34c48c0d9afd35
- MD5 f8d176db5b14aed7c9b25e0640226bd1
- SHA1 a31c1c641639f5b50e79e0330cfc91e6613bf7f9
- SHA512 ceb50c3de105cb8a9541161c2bc9d65cc86c9b2bf5e6e40dcb8c8227ba38e0713d30aa84d8479c78e03ee63ef2f75debe7a5bc6a86cc6dcbcee106d93b9597bf
- SSDEEP 6144:Y4OkcR5cbvIFc8vuB4ShpH4BemwbVkEZ77:YFkedmBPjHv777
- TLSH
  T10244F985BE80AE53DCB733BAB118763497EFDB6407186CD345C54F8A6571BC016382EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  uninst.exe
- Size 48KB
- SHA256 b448480306fbe10af8b5daacedc6f78c196165b9fceb8b85d45b749f20b61616
- MD5 7b00cb0a59ce56ff6af69f4fa0d78ed3
- SHA1 493dfe2558718ee02b589aee39e9fe8ee3d7c22a
- SHA512 6ae16ee96fade31cd9b00905e0f6966ff488403e3c56192413eeabff27ed9715e0fc3df500eb3f49d07461ca6febde08a9bdb2101b16bf3d08c0ba72193832da
- SSDEEP 1536:ipgpHzb9dZVX9fHMvG0D3XJRgdLeAyN//:ggXdZt9P6D3XJRceAy
- TLSH
  T15523AE0B76C08CF7C6A6063019B7A7BAFBBAC69002115E234BA46F7F6D61143CE15197
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Deletes itself
- Executes dropped EXE
behavioral23 behavioral24
- Target
  wrap_oal.dll
- Size 404KB
- SHA256 c2ef86cbdb7fa07a9da8f56d5ffa548c57c5eaafd1ce5462ed397de7b8c823a3
- MD5 9c24ed831ddfa8319382b2bfd9691aa9
- SHA1 ab7872c0c0f48ed156d505ebad2dc4b0baff36a4
- SHA512 f424c7f4ab4c40a0c53756f4441e911e0d0279e221547c9c04c640d857df0ec61f5e2c4c61fdbd464fe6a3b96605ca31b24bf753dd991959c47c85299a1b0aed
- SSDEEP 6144:oabEPTjusRMQGZrwsOvlc/NQPBLMSMykOl0AObO6Edy7u:KPJtDgQPBgSMfOl0c6ta
- TLSH
  T10A94AE21FA41C1F2C4AD447854B36B6E2A790B2113BEF9F3FFF01D5A5E642D4A836249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

discoveryinstaller

behavioral24

discoveryinstaller

behavioral25

behavioral26

© 2018-2026

Terms | Privacy