8102045aff3435ade9a30b13d9092a9af0f7d6928df657bd67ddecb6d8fbe2ad | Triage™

Login
Reports

Overview

overview

3

Static

static

1

outln.from....0.zip

windows10-2004-x64

1

outln.from....0.zip

windows11-ltsc_2024-x64

1

modrinth.index.json

windows10-2004-x64

3

modrinth.index.json

windows11-ltsc_2024-x64

3

overrides/...n.toml

windows10-2004-x64

3

overrides/...n.toml

windows11-ltsc_2024-x64

3

overrides/...ns.txt

windows10-2004-x64

1

overrides/...ns.txt

windows11-ltsc_2024-x64

1

overrides/...n.toml

windows10-2004-x64

3

overrides/...n.toml

windows11-ltsc_2024-x64

3

overrides/...c.toml

windows10-2004-x64

3

overrides/...c.toml

windows11-ltsc_2024-x64

3

overrides/...t.json

windows10-2004-x64

3

overrides/...t.json

windows11-ltsc_2024-x64

3

overrides/...erties

windows10-2004-x64

3

overrides/...erties

windows11-ltsc_2024-x64

3

overrides/...s.json

windows10-2004-x64

3

overrides/...s.json

windows11-ltsc_2024-x64

3

overrides/...g.json

windows10-2004-x64

3

overrides/...g.json

windows11-ltsc_2024-x64

3

overrides/...n.toml

windows10-2004-x64

3

overrides/...n.toml

windows11-ltsc_2024-x64

3

overrides/...l.toml

windows10-2004-x64

3

overrides/...l.toml

windows11-ltsc_2024-x64

3

overrides/...t.toml

windows10-2004-x64

3

overrides/...t.toml

windows11-ltsc_2024-x64

3

overrides/...t.json

windows10-2004-x64

3

overrides/...t.json

windows11-ltsc_2024-x64

3

overrides/...a.json

windows10-2004-x64

3

overrides/...a.json

windows11-ltsc_2024-x64

3

overrides/...n.toml

windows10-2004-x64

3

overrides/...n.toml

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
outln.frombelowland BETA 1.0.0.mrpack
Size 941KB
Sample260803-d3zx7abe85
SHA256 8102045aff3435ade9a30b13d9092a9af0f7d6928df657bd67ddecb6d8fbe2ad
MD5 494b2f1b550ec460b364f4346424ef28
SHA1 a00acff94c17be15d80e3b5317f2d5799bda1faa
SHA512 06471c47dbe95524c706f4fb3bbcf9daf0ed82b3ba1461df57dbda302089030cb7a6d5bca2db8d750f151ac939343f62b0d615f582e424840cb1c646939ae07b
SSDEEP 24576:TQXQssIH+5wH9uck+yCorySujtskFy/H7sh:TQXQssIHIwHlk+ZScGbc
TLSH
T14125332FC0EAC820C0A74A7BBC64069D7ED0A69E4BD0BC2B67F5E291377503A4F57546
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Static task

static1

Behavioral task

behavioral1

Sample

outln.frombelowland BETA 1.0.0.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

outln.frombelowland BETA 1.0.0.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

modrinth.index.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

modrinth.index.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

overrides/config/Wonderland Configuration.toml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

overrides/config/Wonderland Configuration.toml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

overrides/config/badoptimizations.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

overrides/config/badoptimizations.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

overrides/config/belowland-common.toml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

overrides/config/belowland-common.toml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

overrides/config/e4mc/e4mc.toml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

overrides/config/e4mc/e4mc.toml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

overrides/config/embeddium-fingerprint.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

overrides/config/embeddium-fingerprint.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

overrides/config/embeddium-mixins.properties

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

overrides/config/embeddium-mixins.properties

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

overrides/config/embeddium-options.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

overrides/config/embeddium-options.json

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

overrides/config/entityculling.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

overrides/config/entityculling.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

overrides/config/ferritecore-mixin.toml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

overrides/config/ferritecore-mixin.toml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

overrides/config/fml.toml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

overrides/config/fml.toml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

overrides/config/forge-client.toml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

overrides/config/forge-client.toml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

overrides/config/immediatelyfast.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

overrides/config/immediatelyfast.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

overrides/config/moderner_beta.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

overrides/config/moderner_beta.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

overrides/config/modernfix-common.toml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

overrides/config/modernfix-common.toml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  outln.frombelowland BETA 1.0.0.mrpack
- Size 941KB
- SHA256 8102045aff3435ade9a30b13d9092a9af0f7d6928df657bd67ddecb6d8fbe2ad
- MD5 494b2f1b550ec460b364f4346424ef28
- SHA1 a00acff94c17be15d80e3b5317f2d5799bda1faa
- SHA512 06471c47dbe95524c706f4fb3bbcf9daf0ed82b3ba1461df57dbda302089030cb7a6d5bca2db8d750f151ac939343f62b0d615f582e424840cb1c646939ae07b
- SSDEEP 24576:TQXQssIH+5wH9uck+yCorySujtskFy/H7sh:TQXQssIHIwHlk+ZScGbc
- TLSH
  T14125332FC0EAC820C0A74A7BBC64069D7ED0A69E4BD0BC2B67F5E291377503A4F57546
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  modrinth.index.json
- Size 8KB
- SHA256 295ada48a7336651d06817a368d8fe1fd1faf99edb678cbf68943dd05bda1c2c
- MD5 38539cfb8d9fba85423634f5137b298e
- SHA1 6808aa2de7416380cac33d5aa19baa6c857b9545
- SHA512 83b65044400aa108a2c5472931d64a80e8a3d8081383c4b73e2b1fe82ea8ed2ee74010b2fecc9a305dc595f8bb4dec894353188c192cc4411598eb2b5b562df9
- SSDEEP 192:f1X2e4zEzyzc4QzAHl1ra0zZ2VzqBzX1GK14PzU91Gj51pi91tzk:tywGc48ezraA2qllbAGIUrBk
- TLSH
  T1861245ADC2B44DDB1695A3A1D42F61426321C55F4F6C3D1979DC008D4F2F21E226D9E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  overrides/config/Wonderland Configuration.toml
- Size 5KB
- SHA256 97b93b238b9b58175c5b21c149faa9f06be378546349eff755693f7cc64060c5
- MD5 81985f5d79d5b5d236cb66ca7b851bd3
- SHA1 0a6846f93d142886e453c71f8d7fa93201a49067
- SHA512 88e5456cf0833b810f2e14e98748f630cf84ca10f53da9873e219532aea20ce6d859475befa0a756c8d166b2ad7613700bcc82474cd12dcfd97c16e7702e5181
- SSDEEP 96:6wG/K1ECQpeVITKetmTPhleWgPP9IdNYi1QpAcHs3R7tO8z3qJ7dSWotWSwW/FWJ:8yrQpe+fXCxOAR7WkW2WXWNWrrh
- TLSH
  T10AC1643672E0361D9065F58059713C3AA7B527B5E70A691CF21E79A2CEAFE0C53FC284
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  overrides/config/badoptimizations.txt
- Size 3KB
- SHA256 cae5ba66971b2f61e0b523c5aeb8b8d4fa806f0bea8a1709860e4fea94426ac9
- MD5 7714652525dd4a0c873ddfc124aac217
- SHA1 aff5e1434dd35e1349ef9ebb6a40148c71e7bab2
- SHA512 d2d40b2ca9bc67a990a7f84c79411eba44e6b80a34b47ed1ff026488e6dc782b91727fb8be69cc6dcf8204c3d709298ff8438d7816a5b7db028f2ed118225a83
- TLSH
  T1EC61A69592C5273B84EB2253F68AF16473249869536A9DB094CF007D338F37503BBDE9
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8
- Target
  overrides/config/belowland-common.toml
- Size 1KB
- SHA256 e29bb5596e7ee04e79f041607c7c4edfc9609e0dd51a797ea0b5701781834285
- MD5 e2f6426b31ab680a5b018cc32692fab8
- SHA1 82c1ab65b7ea1ec538a1dcad72fae90ad2be65a3
- SHA512 5044ced8fb098930267e9f37412f6aac6ddef86da9ee575b870c6be8b7ae68a08ae1ce74ded742ca6c4342ea2a22132b745046e554fd9fa7943b7c86b9af8508
- TLSH
  T14141002CD7E915C9585D4337D2B720437B697DD0A01E1BBCE8697C2D32890AB81EB9C9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  overrides/config/e4mc/e4mc.toml
- Size 1KB
- SHA256 3967d3b931472a818bdb8430414c324f40f2441132fafc029fef95f89507cc8e
- MD5 695d87835bfea490baa375477d6cfb43
- SHA1 5a51d61c084b257cc3b294e3a0b5ac57c36abe9c
- SHA512 8c2415ae02528a573f6c05d09e6cd8935d181155d60bd4bf23c1fad8fe71309e65e06e25b3e13c8b2f49bd96eb00f314b76d13614410d036de2e5dd348ebc1b6
- TLSH
  T17221661233C676B4467E4AD3C18BF466B436CB5CE9233C21D4F41699006CE2B505FAEA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  overrides/config/embeddium-fingerprint.json
- Size 427B
- SHA256 34b1c5f5686bb4731a6e3fd0caa81afcb4c959363a2813fc66df8d61f2c1314a
- MD5 d7ce10462a30ef75754e4a35c5e251a6
- SHA1 9478014bcd74b50446be63b622b8f4368f094631
- SHA512 7841174b36e821ec311ecef37db8b480b3f567da5c27e1daa0b1d310a51d541a1238142d11ea78c570874aad28df98048521c1854198044d1fdf900f0c22e1c7
- TLSH
  T1E6E0AB2109651A8966BF06E5C9C6C33D6AFC7C763DCAE48924D0E33509A24804B16B75
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  overrides/config/embeddium-mixins.properties
- Size 309B
- SHA256 a3c279431d384de6ef051e2e33d9cd5aa009ef93e9e3cce84c270da12322e428
- MD5 7b4f78464c259b75ff8e93582ed3f166
- SHA1 d19accd94009a7d2d4486b6ff0e305e819a94fed
- SHA512 cb661fbf5c3b57f81662882243135b56abce704305b957efb5a7ffb89cd6538fdf8003370e712a0d077575f7170a6ad879a3f2d3f629c1454034b74d9f92126d
- TLSH
  T1EAE07DCF56C77B17642142A6869E44DB6A26CE3CD6394544F45B580023094A253FAEC0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  overrides/config/embeddium-options.json
- Size 851B
- SHA256 b78e1a745d5080dc2e50dd192982aeb59f32b1645626b77ac38a2b725ea52122
- MD5 1d15d6fc42c8aa5cd5f1dde75b4ae5f3
- SHA1 de8add0f213fe49e16011076be4efa52e5f4b570
- SHA512 a16e8a696d02c4bb4cdf3c5be2a86e652cea995d83e8107dabe1667311a9532d9d52febd55ccc251a411c6b7edd44cdc1eef2eede6aaba7c79bbc7d18640ef8f
- TLSH
  T1ED01A666D4B85C7210B6642108ADE883413091232D193CBEB5E2605D2F8E72F22BFEE4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  overrides/config/entityculling.json
- Size 2KB
- SHA256 48527836eabbda32f541d1e44b718a3a384e7aaa4a377b70666bc4f1dabfadde
- MD5 cc26eb70c215699c0145a7db42a76cc0
- SHA1 32c5ef204e1f99162828cb8db9a0507bda825a51
- SHA512 e049f5443b113eab58aaf2e78fa08e254064876e55f2e90d9b6dd7e81387d4f83ca7bc6a78f399c69ee8270d314ba41b4dcb823c72ee847f18b3bc9e2c0dadef
- TLSH
  T135417DA0CC5B1ECE20AAE8116DFD5902AAF4C96B8C94349E7734851D2F8D1DF117747D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  overrides/config/ferritecore-mixin.toml
- Size 1KB
- SHA256 c164439c632aa7c95c07edec5cfef74b8e2d5671a8445a781deeb4de7ad0c8b6
- MD5 ab9006eb6d50292a11f757c0ae658ac0
- SHA1 bada32b53873ce4121ffefb82ca804c94aef2e0b
- SHA512 9319b8a97c17b8f8f97ad2faf7b69575586e4050d4269a524c38499559a41ea6b4e991a7da7c49b5d26e1ed5f832b55d6753dc1807de1a2bfdbefeb57cfcf20a
- TLSH
  T1283125776BB032A78D5921A3F6A95061D7B5F0CC172B75B1D47DC009100C9D8437EE61
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  overrides/config/fml.toml
- Size 1KB
- SHA256 f5954b6c5f094630d7317132892628dcb7ed4cd2e36d86310afbad0105e884d0
- MD5 0ad4d9ce60620ce4b1cfd38f407be96e
- SHA1 67561efa02101f7bbb1b865cf749d3b1e0add029
- SHA512 5d93ff5ea8f11316fe907a561b2183a95f76d59fa6973d539df76e22c73ccf84dc3ccd02b3445f623676722660406968994b64131d5791b5bfd62b3b3b53c968
- TLSH
  T10321BE5950D0266FCC7052157E437329CB528B2A4B4BB06158B8710CBFCA50F93A6ED1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  overrides/config/forge-client.toml
- Size 1KB
- SHA256 0b1b3c45343435184c9dde3149b38afcdb97953e287686ecda54385f53ebcddc
- MD5 94d0dcbf248b1ee18bf1266c672327a1
- SHA1 55e80f51f0c9cf66de1f95c4d775b24dc59627a1
- SHA512 593e81e207de8b5d7b4f030d798560678eb63770b244a9543b0be6dff5612bd0c4fe429aa46c8c525da8204bc2744e07c80ae977b455d3c311739e07335bd6ef
- TLSH
  T118312464A82972A40C5615D2EB3DE1BA6214C55E137B7375E8DBC40C7348879432FEAD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  overrides/config/immediatelyfast.json
- Size 1KB
- SHA256 f2b7f219198f0a911d04b09f545f2c1256e8d114951443924878dc10963e16aa
- MD5 7b2d05a9b2f2745055edf3c8d1d0b155
- SHA1 adcb21b0ad5f7f1c124517ff64fc701a737e4ea1
- SHA512 6a1a3dfdd4c0bcf32ed49f2003ec47b744a89e2e271b55b7e8037bd51c2b292195f042b8348dd2ff15b0bb3101a9ddd187586c8d75fce5e280a2b743b9657d64
- TLSH
  T120116021EC9550B510E2C816DE18E1DB4790164A909C7DEEC5DB3888138DB3BA3EEECC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  overrides/config/moderner_beta.json
- Size 6KB
- SHA256 4017be6fac21abfe9ff6dac7eb5a096e805e8f4c9d4c98ffa97b1264b9efc0ba
- MD5 3d72011b741296a84c75c900ea684e8d
- SHA1 c0d1f2a0db7fb1b936efe854de0c178578de754c
- SHA512 9c1fc7c9dec8aefa2ffc4d5d6e6f79b4a016f90e7be96edbb89f25f83a0db864d618a3a85195343717830ca51d703cd8e389d7e554591b7f88e8d08d0b6a9041
- SSDEEP 96:al87vxqFnBMdkklLi7YyqxLFJidMJtX3alZIMIcYncnmUrnulXZjelgfKjvHL8Wa:Xwi+/GNdclSfvaWkqf8du
- TLSH
  T16ED1D740D92A7E5FB4DBFC564DEC2A81B724A43BC8107899B323431E2FDC5AD4B23555
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  overrides/config/modernfix-common.toml
- Size 107B
- SHA256 fad9aea710ec3508eab562cd8f2b5f8e2dda6ee1c5fb1fe818f90ce253017f66
- MD5 1d50de2e9c0bda2952844de7a3306d10
- SHA1 046452d3af87f5c1fd5de5650e3d1b73c930fd92
- SHA512 edefe5862f5d3c14f3c9cc332f78b5e58336fd73b5a017dde55dd54a5b501ac2ba94cddaebaf30c13764e6a5ad32e7f4e2a04a56f85270694174c286f01e9f52
- TLSH
  T138B092A6012ECA210DE29285A06812D1428F87D22138C05BB0F80006AA188A028B2595
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy