ee5ed5eb7c4ad217b5430bd9623a7214e513b046aa9d5de301bd32480508130e | Triage™

Login
Reports

Overview

overview

7

Static

static

3

searchthisifucan.jar

windows10-2004-x64

1

searchthisifucan.jar

windows11-ltsc_2024-x64

1

META-INF/r...mo.dat

windows10-2004-x64

3

META-INF/r...mo.dat

windows11-ltsc_2024-x64

3

META-INF/r...ns.dat

windows10-2004-x64

3

META-INF/r...ns.dat

windows11-ltsc_2024-x64

3

META-INF/r...90.dat

windows10-2004-x64

3

META-INF/r...90.dat

windows11-ltsc_2024-x64

3

META-INF/r...u.json

windows10-2004-x64

3

META-INF/r...u.json

windows11-ltsc_2024-x64

3

META-INF/s...t.flag

windows10-2004-x64

3

META-INF/s...t.flag

windows11-ltsc_2024-x64

3

assets/fab...9d.ttf

windows10-2004-x64

7

assets/fab...9d.ttf

windows11-ltsc_2024-x64

3

assets/fab...x6.png

windows10-2004-x64

1

assets/fab...x6.png

windows11-ltsc_2024-x64

1

assets/fab...ok.ttf

windows10-2004-x64

7

assets/fab...ok.ttf

windows11-ltsc_2024-x64

3

assets/fab...a.json

windows10-2004-x64

3

assets/fab...a.json

windows11-ltsc_2024-x64

3

assets/fab...3a.png

windows10-2004-x64

1

assets/fab...3a.png

windows11-ltsc_2024-x64

1

assets/fab...1c.png

windows10-2004-x64

1

assets/fab...1c.png

windows11-ltsc_2024-x64

1

assets/fab...zn.ttf

windows10-2004-x64

7

assets/fab...zn.ttf

windows11-ltsc_2024-x64

3

assets/fab...uw.ttf

windows10-2004-x64

7

assets/fab...uw.ttf

windows11-ltsc_2024-x64

3

assets/fab...j4.ttf

windows10-2004-x64

7

assets/fab...j4.ttf

windows11-ltsc_2024-x64

3

assets/fab...h8.png

windows10-2004-x64

1

assets/fab...h8.png

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
searchthisifucan.jar
Size 17.6MB
Sample260805-ke9aaatajg
SHA256 ee5ed5eb7c4ad217b5430bd9623a7214e513b046aa9d5de301bd32480508130e
MD5 6822a2f595ce2df08b47c7c912827512
SHA1 376bed18754484e9d9f4c226a3f81a15a16cf3ac
SHA512 5f2ff3aa768014e823d729f689ee231d624cd34c56602ad3b48eb0383f4f7b7627846b231a8c97b0f219ebebaabb6ab06c668b6e47a6c781f2840ce91fffad6d
SSDEEP 393216:rYRwc+V5mlWnpBVV7smlNXjvRlZMDgRam8r3IZpC:qeEAnpBVBRlNjJmWpC
TLSH
T14907331BC724A83AD8EF057384221A8AA74CD78E7911BA5D07A9307BFCB75257F0631D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

searchthisifucan.jar

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

searchthisifucan.jar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

META-INF/runtime/dq2su80eahcc80ybxxt2mo.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

META-INF/runtime/dq2su80eahcc80ybxxt2mo.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

META-INF/runtime/functions.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

META-INF/runtime/functions.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

META-INF/runtime/h9wsoc1habnf90.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

META-INF/runtime/h9wsoc1habnf90.dat

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

META-INF/runtime/zpacrgbuq4eo7kdu.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

META-INF/runtime/zpacrgbuq4eo7kdu.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

META-INF/strangevisuals/runtime/client.flag

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

META-INF/strangevisuals/runtime/client.flag

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

assets/fabric/a7l5chr0btskem9odm49xhe0/ykdcerp5e6v4oopt9d.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

assets/fabric/a7l5chr0btskem9odm49xhe0/ykdcerp5e6v4oopt9d.ttf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

assets/fabric/a8ls2oonl6e2b6khpn771yf/zviw7tisrjzd/rq3b4rioecx6.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

assets/fabric/a8ls2oonl6e2b6khpn771yf/zviw7tisrjzd/rq3b4rioecx6.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

assets/fabric/ar8ieu666e3r/m2fwq9p5z4ahxok.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

assets/fabric/ar8ieu666e3r/m2fwq9p5z4ahxok.ttf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

assets/fabric/awjap9obfuzi8en47gwsa6/jpqbmowshbywr3a.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

assets/fabric/awjap9obfuzi8en47gwsa6/jpqbmowshbywr3a.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

assets/fabric/awjap9obfuzi8en47gwsa6/jpqbmowshbywr3a.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

assets/fabric/awjap9obfuzi8en47gwsa6/jpqbmowshbywr3a.png

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

assets/fabric/bc0mdpdc3z9x3ea74lw/bf8i2hlxivvwjy36saty/u9l3xra1k68ny0yl9g57661c.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

assets/fabric/bc0mdpdc3z9x3ea74lw/bf8i2hlxivvwjy36saty/u9l3xra1k68ny0yl9g57661c.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

assets/fabric/bku3b0vjryffmggau2/hrpuv0jhezn.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

assets/fabric/bku3b0vjryffmggau2/hrpuv0jhezn.ttf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

assets/fabric/c7et2c73umsu20plzu/hiaf3i9haha05h1lsm0uw.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral28

Sample

assets/fabric/c7et2c73umsu20plzu/hiaf3i9haha05h1lsm0uw.ttf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

assets/fabric/cjowvodzrkzxa7s11da59li/awnrlx3u0ns5qj4.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral30

Sample

assets/fabric/cjowvodzrkzxa7s11da59li/awnrlx3u0ns5qj4.ttf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

assets/fabric/cxpz354bhbe38e57ega64vb8/lo5a4b5fn1r4vx6399m1/y8f3jv06h8.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

assets/fabric/cxpz354bhbe38e57ega64vb8/lo5a4b5fn1r4vx6399m1/y8f3jv06h8.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  searchthisifucan.jar
- Size 17.6MB
- SHA256 ee5ed5eb7c4ad217b5430bd9623a7214e513b046aa9d5de301bd32480508130e
- MD5 6822a2f595ce2df08b47c7c912827512
- SHA1 376bed18754484e9d9f4c226a3f81a15a16cf3ac
- SHA512 5f2ff3aa768014e823d729f689ee231d624cd34c56602ad3b48eb0383f4f7b7627846b231a8c97b0f219ebebaabb6ab06c668b6e47a6c781f2840ce91fffad6d
- SSDEEP 393216:rYRwc+V5mlWnpBVV7smlNXjvRlZMDgRam8r3IZpC:qeEAnpBVBRlNjJmWpC
- TLSH
  T14907331BC724A83AD8EF057384221A8AA74CD78E7911BA5D07A9307BFCB75257F0631D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  META-INF/runtime/dq2su80eahcc80ybxxt2mo.dat
- Size 132KB
- SHA256 7243f832d6b65a90c52dd9ad73d48bd1e58c00815a7efc7e9b84c9eefc4a12b8
- MD5 ecd11e5370096157798487d276366e01
- SHA1 e6d6d179bcc745269e1b0103929e3571cba10aca
- SHA512 da3f9b0e9acc583e05f81da5e5279f0568afc289b7a532b42d426c2428bcebd4e0e92aa787c8f59e34593a83698cc64c13082f1ee8925ef5caf072a29cab6a76
- SSDEEP 3072:obvI9QuXgJ07Sen/r9SCT5Nn/yOZ7QIUbc:IOa0n/r9SKTn/eq
- TLSH
  T1BBD33A058197FAB635AFE34F8478D504A634C336DE995ACE3AF88C07FAC50D230DA596
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  META-INF/runtime/functions.dat
- Size 13KB
- SHA256 0c99b76a0d3800168a92ca624fae2cfeb85e8c442a23ab8f8eabd51bce643d9e
- MD5 69fd4b211878df161aef409d57cf9b55
- SHA1 11514e4586df981029ded0dca7b2722001cfd27d
- SHA512 ff3f3633cf489d7aade0fdde10f296a0991bf4894f04af65c97faf987d71e34d7e15915df8387708f61b21e28bf7c7d66e1f2f7391293d0a6d4029d53afd6061
- SSDEEP 192:TjmA/iFmAnYkFgqSIUWz31tVHH91lxVr99H6Osoi+7vdCcvrwhch7fg:vmI8YkFg+p31zVr9wkievdCcvMCh7fg
- TLSH
  T1BF52CF58B88BBDD100E62FDB0A297DD45963747604EBFD62E357EB16A34010EF27BA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  META-INF/runtime/h9wsoc1habnf90.dat
- Size 13KB
- SHA256 0c99b76a0d3800168a92ca624fae2cfeb85e8c442a23ab8f8eabd51bce643d9e
- MD5 69fd4b211878df161aef409d57cf9b55
- SHA1 11514e4586df981029ded0dca7b2722001cfd27d
- SHA512 ff3f3633cf489d7aade0fdde10f296a0991bf4894f04af65c97faf987d71e34d7e15915df8387708f61b21e28bf7c7d66e1f2f7391293d0a6d4029d53afd6061
- SSDEEP 192:TjmA/iFmAnYkFgqSIUWz31tVHH91lxVr99H6Osoi+7vdCcvrwhch7fg:vmI8YkFg+p31zVr9wkievdCcvMCh7fg
- TLSH
  T1BF52CF58B88BBDD100E62FDB0A297DD45963747604EBFD62E357EB16A34010EF27BA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  META-INF/runtime/zpacrgbuq4eo7kdu.json
- Size 1KB
- SHA256 6fe63f7f5d97daea84292f6d05ec14fe03764a63fe37b2bd38854536089c18c3
- MD5 95e7a75e646dd9674f3283a2cc6840d6
- SHA1 1ed7dc2d831348aafbc36302a59fc8d62862c98a
- SHA512 dcf65e779b63627aec888ce7cc4264c1b012f15fc33779ce0162e8ee891c5a799317c03f820a80e3823a97bdd761258199160571b0d0a00449351ad4743dffcd
- TLSH
  T17A21E10123940072FB35CFB1935EAB884E5E11D8600B14EDF2EE15BA518A187369B18B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  META-INF/strangevisuals/runtime/client.flag
- Size 9B
- SHA256 48d668189dc5112cbf358ed84a70c4216593628cf866cdc07ee2897ab14f8532
- MD5 01cf03c342e2a628b6476e93bb93a0ed
- SHA1 ba06a49966109b4b9a18fab7131671a308575cf4
- SHA512 a89215452e4591a1b7e2523d5178fbe42f3b1b8a510029cfca5130d9921bbb7b8abcfdebdb1b6d2b16dfbeb690c6895ae19f36d5ca790b5c0fa793840266ebf2
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral11 behavioral12
- Target
  assets/fabric/a7l5chr0btskem9odm49xhe0/ykdcerp5e6v4oopt9d.ttf
- Size 14KB
- SHA256 58a4eefb1e260aa25d0b155ba5118c6be7a73388985f21cd83b1e206767e5192
- MD5 f6abdd2a54e33b088ebb8a75c37eeed9
- SHA1 a45aa9af7f90210ca94e2a4d5d3850a4d24b03c2
- SHA512 38adf0a6c321b6cd12f5d3c22a54a94b647d71c448d43388217503bf5030ae3358fbbd384796052a4f45fb84c21342ec7879704ea7d59fddb89e9cf330b8a2b7
- SSDEEP 384:UnwlRiMqLvcAuhG2Wcthl2c6uKwh3Jb8T:Unw7i9SWc/uwnb
- TLSH
  T159625B59A6B851F0C20F57FBBAFD229802FE974924C0DAA2D33D1215685CDB53C42E8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral13 behavioral14
- Target
  assets/fabric/a8ls2oonl6e2b6khpn771yf/zviw7tisrjzd/rq3b4rioecx6.png
- Size 244B
- SHA256 93728dc0e2bb1cd6bd9c788168766b4464185f43d1b31c106914d32d3e56fb89
- MD5 03d0e2db01ed06b083f45857ee895ed0
- SHA1 472f6c2de176d067d883a854b45fb74749dded94
- SHA512 787f65a5fc5abda76f07dddebe0a2d09f1f893e35a1f0713ca8dd2c3242fbe17c64bd7ee5dd968c9e85fc84fabfd64a8fabb3aaec24ec3e87007f6651a0e54e1
- TLSH
  T162D097E1B22B2C3DF4601E3A0A2830608C22820D134D2C839FC4C2EC0943EC24872593
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  assets/fabric/ar8ieu666e3r/m2fwq9p5z4ahxok.ttf
- Size 308KB
- SHA256 790c108befe859dac2ddbd20af3fbb6917c601b3d544c8a05761519f3b5508fe
- MD5 275bfea5dc74c33f51916fee80feae67
- SHA1 48747b7a60086f97af0d373febcbd1f1bee87f17
- SHA512 0b82f93805dff2769bad25a503c6264094df6f403a636b039a8917aa2a1580b0c70c70ff4eb5135dda83aff0c3092e2a707216920685162ef52b395f82a86c11
- SSDEEP 3072:kAkl4i5ZELTzK/PxMJ2YkGIKpqjw0K2pgm0J2Rrq41tIW+yMaf/J7oPHUGHYI9LN:VLTnJ2CW9BpW2RW1JaZWRRnQzSF
- TLSH
  T108647C03F313C35DC9172D3A8B92C7A0B327BC926B12E10AB7243A55C99B4F85E6B5D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  assets/fabric/awjap9obfuzi8en47gwsa6/jpqbmowshbywr3a.json
- Size 3KB
- SHA256 b19a1ffdec0d0f008aa1b9ffda5e72e4bf9cff7a3b438dacc1417e1f2e2abe63
- MD5 c13e1064db0709371337fe311be0f70d
- SHA1 e6984731b8249ebc42a072ff5f16d4991b81067a
- SHA512 6d7449941dd8a964f456166758d8ad68f55ce99541491eaabe28780bb44686464edfa564544deb63d9ac47157f6392a02a3a04530ac5f1ce75e331076e076996
- TLSH
  T170811985F31807A992C9F293EC47BE912CAF2079539D2F573A1CD907C05345E1AA4EBD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  assets/fabric/awjap9obfuzi8en47gwsa6/jpqbmowshbywr3a.png
- Size 54KB
- SHA256 d27ddd8624d90b0e5656a79a2f9265c133fc92b06540df3b8974ed344768b1d4
- MD5 f3cca5fb02273c3cb89b2a2fb75ae3e4
- SHA1 3df8b48660caa89feb6d894e7d2429266edec2e1
- SHA512 ae9e26ec7efad08ac6721388ddd043aa02fc5c77f4811c73fd7899eafd46e851438d34ad2e1e27c08629dd33e2481a05b6354e2a3f8789a54174f2036e4c9ad5
- SSDEEP 1536:rpNSsCsNZDSog139atetqOAY4N0nNPUYer5xtUB:rfdxZ+og1339jNsxtxWB
- TLSH
  T17B4302E245FDD195CE9990D2B24E2E4E9B567118EBA7602F1B4729F36CF0200270F1AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  assets/fabric/bc0mdpdc3z9x3ea74lw/bf8i2hlxivvwjy36saty/u9l3xra1k68ny0yl9g57661c.png
- Size 294KB
- SHA256 c7f6a2972ca26adcca8612dd8dec0613efa436d1af0328e2a33dd093cf4cf486
- MD5 605b7a0986ecc3a32241b0cd82cf80d3
- SHA1 9ffcda4000b68bc7ff508ed531e223dee1f3c12f
- SHA512 96ec777ad540920604c3c29950312577bf9e67a99ab0cb0358bd4d98483afe071b7545c67f69e9b1bed5ea8608b915f4ead307d24176aca8afd438658a005655
- SSDEEP 6144:xSMGQZX4zIPdVXcwVejU313xSiRraL/zT+ifjmHh4hHoZtkup6godi/SvPF:xrGkX3rXcqejU31BvEf7fjS0oZtP6jIy
- TLSH
  T1F85423EE8BF589A1C40630328B6468AB5377E139517A630CB303F7A45F0765492E97FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  assets/fabric/bku3b0vjryffmggau2/hrpuv0jhezn.ttf
- Size 248KB
- SHA256 5af3a022922efae64a3111e3f1c1c0fddee9f3594533de2781cdad0432180375
- MD5 054de126b13a4584986d3b9f09de13c0
- SHA1 09656d6e99ab197db567c423125f533aaf3772a3
- SHA512 701fb424cc4f19852b568168c2e11d227e6b752684b19b133f5c9be47baab3b2e856f88ba64782b564aa09a839989ed336a9f8bc355b1c2442bec43b05fbe39c
- SSDEEP 3072:ej7fesosc3C2gVI+aR9OPK2GZmaR97ubsoN1EV5XTc73WYIDblyaVLHU3S4CBkdB:ej7MC2MzaR9OlULz7cNiTc7kXD+/PoDi
- TLSH
  T1EC447D28FB97434CC8636D350BE7D764722BB080961BF50CEB382985D65E37D2A5B2D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral25 behavioral26
- Target
  assets/fabric/c7et2c73umsu20plzu/hiaf3i9haha05h1lsm0uw.ttf
- Size 25KB
- SHA256 0e71338a9ae45df2ede080567cfab831627bac9a83be601521ddbace4cbed11e
- MD5 cd2242816d23dad4250f5ea159c7675c
- SHA1 de74028b5cdb4f3ddc5d5efb0a9b16111b5270fc
- SHA512 5636ff40d846a824c555b076b8ea95a24a62fce9e1abb04048d529a98d62c9961ffa9f12bbd38caa3281f33dc10900aef3095362f34309b6404ad82fd0900458
- SSDEEP 384:VfvBLFj/8zVzglSHg/CxhAzxhAefWVfW0Ur2tPRGVRZ:7LFj8zVzglIAbqlPRGJ
- TLSH
  T115B2AE084FD72B6DF23296752A61271CB371BE5F0386178BE69D287A1CB31CA4C256D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27 behavioral28
- Target
  assets/fabric/cjowvodzrkzxa7s11da59li/awnrlx3u0ns5qj4.ttf
- Size 5KB
- SHA256 8afec91d89b239d0045e12c88f60f518fdcaa38faecd9c4183167d94fa38be98
- MD5 63d057e550315b814a98c8c25605bc80
- SHA1 ee9babd08bfddc2bfb734a319e130937a91714ef
- SHA512 42f9c2d7b5262e923ebb42e41b065d96c991ff775997020a1c2e0abc318653e47a3bfbeece47074c59f9326f8909413e5a4e52280a215db1871d5ad36818ebb5
- SSDEEP 96:lh2IyS/kuuXP2Bnr5Db0AP+oDHPPF6OkVtr78U5xNnMIhnzufmH751QsmX:lsScPP2R5Db0A9F6dD8ozPDs
- TLSH
  T1D4C10B80CBE5CB0AF56BA335D4A58303AFF7EC12D9A687EEB484D13C89454C19C19999
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral29 behavioral30
- Target
  assets/fabric/cxpz354bhbe38e57ega64vb8/lo5a4b5fn1r4vx6399m1/y8f3jv06h8.png
- Size 231KB
- SHA256 cfea2c39717b80d82be73827cf2fe28041de8b61642901f3800d9be936e1ee12
- MD5 651d2980a2890c0d65088127f8997208
- SHA1 a5fbd83eb88a2e9ee13d14eb5b8d2c7083c0c40a
- SHA512 89b7cf48d55f9ed5e1553ea6cc47ec1f9d35b8627b7f49b6dd23ae5d57b24c45550f6c765b0369dd03928593730a7e565a60d70a89ad43e5bcda2695deb16c28
- SSDEEP 6144:VKdM3qEfT3UxjpmRsDcJ1xJFRuQ5VzIp6wMd9sK:VKS3qMkxU66xJFRuQDz/wiN
- TLSH
  T13A3412465AFC9EB0EF234179082B67966DA636CD970083A655D2493FCC933E32787C78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy