e35dd44024cbf3b41bbd288248213be62e85d5438f5d847140113aceb30cedef | Triage™

Login
Reports

Overview

overview

7

Static

static

5

_ZS7NPTCon...AS.vbs

windows10-2004-x64

7

_ZS7NPTCon...AS.vbs

windows11-ltsc_2024-x64

7

~/xabo/dle...y6.pdf

windows10-2004-x64

3

~/xabo/dle...y6.pdf

windows11-ltsc_2024-x64

3

~/xabo/dle...b8.pdf

windows10-2004-x64

3

~/xabo/dle...b8.pdf

windows11-ltsc_2024-x64

3

~/xabo/dle...u3.pdf

windows10-2004-x64

3

~/xabo/dle...u3.pdf

windows11-ltsc_2024-x64

3

~/xabo/dle...v1.pdf

windows10-2004-x64

3

~/xabo/dle...v1.pdf

windows11-ltsc_2024-x64

3

~/xabo/dle...10.pdf

windows10-2004-x64

3

~/xabo/dle...10.pdf

windows11-ltsc_2024-x64

3

~/xabo/dle...l7.pdf

windows10-2004-x64

3

~/xabo/dle...l7.pdf

windows11-ltsc_2024-x64

3

~/xabo/dle...e2.pdf

windows10-2004-x64

3

~/xabo/dle...e2.pdf

windows11-ltsc_2024-x64

3

~/xabo/dle...y9.pdf

windows10-2004-x64

3

~/xabo/dle...y9.pdf

windows11-ltsc_2024-x64

3

~/xabo/dle...t5.pdf

windows10-2004-x64

3

~/xabo/dle...t5.pdf

windows11-ltsc_2024-x64

3

~/xabo/dle...f4.pdf

windows10-2004-x64

3

~/xabo/dle...f4.pdf

windows11-ltsc_2024-x64

3

~/xagf1.dll

windows10-2004-x64

3

~/xagf1.dll

windows11-ltsc_2024-x64

3

~/ymddz2.dll

windows10-2004-x64

3

~/ymddz2.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
03082026_0253_02082026__ZS7NPTCont-bjuilx063264_DHY7XCfgK8AS.vbs.iso
Size 5.1MB
Sample260803-ddrkhs1ves
SHA256 e35dd44024cbf3b41bbd288248213be62e85d5438f5d847140113aceb30cedef
MD5 4cd690ccc0d254c7584dcb8c5c9d808c
SHA1 f4e8d532eef8a529d09af77a282319541eed8675
SHA512 27904c4f32a01fc68128320a74c86faa878f3bab02fb7cd05164978797438a5dc8967031b4cdf031ec237171adec87d7a9e87ba7853ccff81b159f6630a99918
SSDEEP 49152:m70RxRTC8c41ZV31HGi2btTSCJCsy8MXCP/wyNT2GsChcUoOyWfo:WJyWfo
TLSH
T1D03623319B418D6BC39177B4B00E2E161E3F65534388B2D7B45CA4723B7AFC05A3E96A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery execution link pdf persistence qr ransomware spyware

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

_ZS7NPTCont-bjuilx063264_DHY7XCfgK8AS.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

discovery execution

Behavioral task

behavioral2

Sample

_ZS7NPTCont-bjuilx063264_DHY7XCfgK8AS.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

300 seconds

discovery execution persistence ransomware

Behavioral task

behavioral3

Sample

~/xabo/dlexd/pbkufk/madxv/cfkmxy6.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral4

Sample

~/xabo/dlexd/pbkufk/madxv/cfkmxy6.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral5

Sample

~/xabo/dlexd/pbkufk/madxv/dclob8.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral6

Sample

~/xabo/dlexd/pbkufk/madxv/dclob8.pdf

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

6 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral7

Sample

~/xabo/dlexd/pbkufk/madxv/kkqu3.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

~/xabo/dlexd/pbkufk/madxv/kkqu3.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral9

Sample

~/xabo/dlexd/pbkufk/madxv/nadv1.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral10

Sample

~/xabo/dlexd/pbkufk/madxv/nadv1.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral11

Sample

~/xabo/dlexd/pbkufk/madxv/qikr10.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral12

Sample

~/xabo/dlexd/pbkufk/madxv/qikr10.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral13

Sample

~/xabo/dlexd/pbkufk/madxv/tlpl7.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral14

Sample

~/xabo/dlexd/pbkufk/madxv/tlpl7.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral15

Sample

~/xabo/dlexd/pbkufk/madxv/tpne2.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral16

Sample

~/xabo/dlexd/pbkufk/madxv/tpne2.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral17

Sample

~/xabo/dlexd/pbkufk/madxv/tqxsmy9.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

~/xabo/dlexd/pbkufk/madxv/tqxsmy9.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral19

Sample

~/xabo/dlexd/pbkufk/madxv/xxit5.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

~/xabo/dlexd/pbkufk/madxv/xxit5.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

~/xabo/dlexd/pbkufk/madxv/yrmf4.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral22

Sample

~/xabo/dlexd/pbkufk/madxv/yrmf4.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral23

Sample

~/xagf1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral24

Sample

~/xagf1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

300 seconds

Behavioral task

behavioral25

Sample

~/ymddz2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral26

Sample

~/ymddz2.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

300 seconds

Malware Config

Targets

- Target
  _ZS7NPTCont-bjuilx063264_DHY7XCfgK8AS.vbs
- Size 4.3MB
- SHA256 3eb7dcc1a9e72472f8aac0cb303354149917b8f7ec3298bd05f709d0687638ed
- MD5 24f1f2398bba3273dc1bc56971e042d7
- SHA1 5ed446ba84453ad4c104981d6da2f3b955b3f218
- SHA512 e1d2c98531858472675c70022d29ce60f5991dfccf51b6801dca5dbb1f70c670cc659808534acc58c7497cbe12f99df2c94a9178c60446080d2cc07963cb7f89
- SSDEEP 49152:A70RxRTC8c41ZV31HGi2btTSCJCsy8MXCP/wyNT2GsChce:a
- TLSH
  T118263330EB996D3F07A18735A05F3F256EAD8CA3850CD2DA98D4F186374DAC4463B972
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  ~/xabo/dlexd/pbkufk/madxv/cfkmxy6.pdf
- Size 23KB
- SHA256 2bcc62c45158e1fb9295713570a5831505d6a184cf5a82f131164d9e185b4487
- MD5 657ce560d3a74398a5e84b75929e1d40
- SHA1 39458171d2a32652a8553c6975740247dba85714
- SHA512 6a618fd29e20f083716c3c0443a636aecf89a9d995d8ce91e25e59f669160126d71c0e116467ec08674139d3cb4069d921ba01ddb2fba52339330fb25d2008a2
- SSDEEP 384:szMb0ccsPH3VpFdH9G5bBxJN/C2IRbQwaybIl5QeQdD1WkDVS97dm5i5q4h:JAiXVpFe5+bQwaEIlaeQOkg
- TLSH
  T1DAB2456E6B63CA98E9152F8DEA8427869334333617404F31FBAC2505D7C4F17BD5E88A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  ~/xabo/dlexd/pbkufk/madxv/dclob8.pdf
- Size 31KB
- SHA256 e1680c8496a702d81fd59733137d234cccb90582f1683ae6faec50637f905d62
- MD5 7fbb2cbef0ace6cf5b3543b59f1a0240
- SHA1 e9f851af9a15ead29ec7690e43ae7ed26600dee0
- SHA512 75bdb0e0c9d857b0a1478c64d1f032ce84682d2a9100b94b47ea5fd317a35049e010b5cc33646ad16b82047df2fd60b721abecb79f4719ee2728e70e4f9e02de
- SSDEEP 768:+C4gGOdpZa7jSfFRQZiXn8Q7OZeHHGzQqKIAqJd:+C5GKZYjKwA7OZenyUq3
- TLSH
  T145E2AE2E3107C8619B0753D3BB1D1AD2EA69F30F24A899B65E2C8D169947FF0F4091E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  ~/xabo/dlexd/pbkufk/madxv/kkqu3.pdf
- Size 24KB
- SHA256 729d923b61d77dd4904b3a4fc86e89217427b3d722834453cd3d41b865e5676a
- MD5 10c0d7ba6d2ed43ed2cbcfca0a224352
- SHA1 40eb26002a480373dec993a59658ad4b648a0c7a
- SHA512 8150dfdce9a2291cf93c3e57ef5fb592a4f0abc306fccc2813f09310994ca87062caeb0614e147208d5cd9d9fc10a18ea942acee94c55913a6545b6619b86d6a
- SSDEEP 768:J6Yk0ix9lueYV9LGfgI5ROkuiqKIA+h9T:4x0ix9lU9aoIce+nT
- TLSH
  T13EB2AE0C6403C5A0E79796C3BF2F5DD39499B70F446898E22D2D9D879A8BEE4F52C1C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  ~/xabo/dlexd/pbkufk/madxv/nadv1.pdf
- Size 1KB
- SHA256 d42b489af7b86727b04366eeba9e55bacf3840ffbb083e933f10d8fddc8347f8
- MD5 35d3f67356b24d33c0b0059205c265c0
- SHA1 4b67a32723b6c9635b985c2b82e1051963e4a103
- SHA512 e5a13f78946d8a7261396753bbcabac17d0678b89d37e333d0fe3595c5058050c552c06fac89eb69ce110702ed4358680df5df1c76cb8b396ba19e406de22790
- TLSH
  T1AA416654A5C80CCCE5A6CA52BB2EB4D3A97DB14351E8A8D1117C834F8189F95AD53A07
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  ~/xabo/dlexd/pbkufk/madxv/qikr10.pdf
- Size 90KB
- SHA256 26cfa79ae9b841b7aaa166371767c1c00b471590755221fab05d1e46d8b35c8e
- MD5 85f7de2b0a5df43979f7735143fcc0bf
- SHA1 3b042eefbc4496231d7ee004714665dd7aa1bd8f
- SHA512 fbc1cf42f2172c5248ea677ccb2f312a9ce2aa012120a80e8c88e7307b3b1fb1b8acbf94b555bd12b2d5f280ca43ee7f33c19d205a27d47a3b4cdf78be89fed4
- SSDEEP 1536:62VCjJTiF2Z4O8d69XXT34teAxbbbPHi+7Xxj0uarUphdVKpW65GijIoAadVKpW3:5oJk2Z269Hj4JbbbK+jN4r6hdVMPGNby
- TLSH
  T15693019D4152AA01E1C5D66A5FD46CC708F7F0C2120805223E6D9BAF6B22FE1F594FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  ~/xabo/dlexd/pbkufk/madxv/tlpl7.pdf
- Size 24KB
- SHA256 6623bcc39e8c2144889d69eec86c3e29f8be93dc1bb38227dfd91e786281fb23
- MD5 f4ab10215b567686d31cd6d3ab64e167
- SHA1 969bcaabc5358d848d55b40c5e22ef1bb2c79b86
- SHA512 183176f7bfedad4e8235e25cd137c0ce0845896dadfa92c75d1e59cd132f4e077c7e14e4aba9c8c6273a1d6a020c8e77a5de25f17f1972de35350dec02dd978b
- SSDEEP 384:2PLcIJFhWv6uIuMoHr+g/PA20nLAH6tqE7NpJ9ftVmoYgt3ustqgKYIAlE0/CQ91:W/XhWvSuR+E49ltzb9jmoGiqKIA+hc
- TLSH
  T135B29F09318BD5A0DF5382CABF2DB581100E734F11C4AD926D1E4C62568BFF9F60C4C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  ~/xabo/dlexd/pbkufk/madxv/tpne2.pdf
- Size 24KB
- SHA256 cc19fcdd6504c868a83763e255f867b70f5967ca0ec8eb71c018fb3d203484f9
- MD5 d7c6195f8236d485ed76a1b274982fd6
- SHA1 aba97540c72a5eed1504c3fecfbce3531b99bedc
- SHA512 f6a563813c37208ebace5c7471fed9ef3e39dd9ad5a1384d7985b6d65c37bedb68b5ebccfc8e7657611b7412af40478fb3b1fa799164659203d0f7994eaeca96
- SSDEEP 768:oOCYtCaX7XEJ7uSe7w2irD3E6iqKIA+hq:zCYtt0J7Je7i3E6e+M
- TLSH
  T1F2B28D0C6907D9A09F07AAD6BF2EBDE39059A31F02D499729D2C0C065553FE6FA4E1C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  ~/xabo/dlexd/pbkufk/madxv/tqxsmy9.pdf
- Size 44KB
- SHA256 ddda5f8676fa31fab2eb716cfb42e0aaed59377357f09ee5532b0a26484a67eb
- MD5 af74701156f8c493fd2372380f3ac7c7
- SHA1 cb3c36fb0b9d0a0b6dad5693f48223bdfef96569
- SHA512 08113cb80dc522a10cce2164f919161685c18776db37ddeadfb7320b5a3ac7671baf62a281c5c94052639126bac1fe1fa85665525e291bb9609b829cca547c2d
- SSDEEP 768:Fm9ySR3+/U+C4e0UegG0IvyBpyyLSTtuWM5p1V0MoE0HPfzJmzJj:lSV+cfeY/y8SIWI2MoEObcl
- TLSH
  T1E21307978D088E879448C3F87F172CAD2B1D770DA9C67AFE40220ECA7F955651C9A12F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  ~/xabo/dlexd/pbkufk/madxv/xxit5.pdf
- Size 1KB
- SHA256 3d86778d6a0ac6012c653496a9819f3d927472fff4d06f27f12af843ce030e70
- MD5 59eee470e420fd499abb9cfbc15f9a21
- SHA1 950c9358cf4cf4d3ad3d0bf0d102f566dfa471aa
- SHA512 30030162df910ebcb382bbf4f75be3e0619fefc5b310d4c8761b7b818a707854977bc22b98aa64f33588f12f337a7bfa112e2fa8d7b576f7b20885ed2b4744aa
- TLSH
  T120414214888C5CECE4A65342BF2FF88BB579724316EC79D5006DCA0B808AF99AC5331F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  ~/xabo/dlexd/pbkufk/madxv/yrmf4.pdf
- Size 24KB
- SHA256 134ae5f08ee3bc450bd8aa6d7a3bfdafeec4a341fcc81e83d6430eacb71acc0a
- MD5 e8ee5f06c3164494aed226750e2a4ce8
- SHA1 650f192c9e49b3a6b6d2f17f6a78eaa91708d1da
- SHA512 82e1b87a64c3c592eb6a2242918c719fcf8b9f8fd05897bf6360dc115ba1090613ffaf423408d2da973f181b2ea2801a06fb63aeb2ecebfb5eb2008a89261099
- SSDEEP 384:cGsmDQDCpLjmlx8eUBgUntKKc82JFThmp9rd5XD06lgmUHKzba9xLRV:wmMDCpPm38e6jcTJF4p946lPK
- TLSH
  T1C6B2BF434D458D67D9F19B51BF03EF0E2B9A7E98714B37D710A2A8CA3B24AC25C4A21D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  ~/xagf1.xml
- Size 39KB
- SHA256 14d0aa191aca3089782d36f62d720bacfd486199b87e0641fcb24dc1e800e34f
- MD5 38ede3907f545b2c91f0cb4f9a04289a
- SHA1 b6f32ccb76a3ba20cb8f9e0ef0c364228fbbfd03
- SHA512 8b8446401ad45ee19b858c2bb0da0e8de32179554e68024c6aee491207f5f5a4d937434fd5fe3421f24f6695cd54d533c6e6231242a5dfb75219ed38a59cd3ac
- SSDEEP 384:mb3EHj0FgWGNyEIYi2mL4/y8RLVHKphXmcy:E3ED0FgWLYiDLk5/y2cy
- TLSH
  T16303A5B666804D0DFBB37A7050946D3E1A27B4D055D1BB8121C0B03ADA70346AB6FFBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  ~/ymddz2.xml
- Size 38KB
- SHA256 a5b88f84fb563b4c97faea5074f94ff8991ab04bc879c96fda32039f73876d34
- MD5 e3b3357c99116495ea512e11aafcf658
- SHA1 301bc26d07455b97fb3fd8ec4108b49bedf28518
- SHA512 9a403cb9bb63a246fa51cd4f75eec4454cd35ad428771544712d89dcdeb5a1c85a5521f90749db4c731e2276bf968bfb88744da26c8842ebc92ba79dd20bde68
- SSDEEP 384:lsbtFMFjxdLsDTMtHKMYGjJqoRnPV5TiUdK7W9RY/5CYJL+mcXfeM+:qtOFFdLsD6KM3jJqmndyW7Y/5rLJT
- TLSH
  T1E103728735304EE1EDC00D7A91E65E734C7CD2284BAB90D7A6B601962E413E63E3B79D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecutionpersistenceransomware

behavioral3

adwarediscoveryspyware

behavioral4

adwarediscoveryspyware

behavioral5

adwarediscoveryspyware

behavioral6

adwarediscoveryspyware

behavioral7

adwarediscoveryspyware

behavioral8

adwarediscoveryspyware

behavioral9

adwarediscoveryspyware

behavioral10

adwarediscoveryspyware

behavioral11

adwarediscoveryspyware

behavioral12

adwarediscoveryspyware

behavioral13

adwarediscoveryspyware

behavioral14

adwarediscoveryspyware

behavioral15

adwarediscoveryspyware

behavioral16

adwarediscoveryspyware

behavioral17

adwarediscoveryspyware

behavioral18

adwarediscoveryspyware

behavioral19

adwarediscoveryspyware

behavioral20

adwarediscoveryspyware

behavioral21

adwarediscoveryspyware

behavioral22

adwarediscoveryspyware

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy