d16e818aba349f019d012a19349a422d75ed50331582fb058a10aed77b559818 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Krypton Cl..._1.jar

windows10-2004-x64

1

Krypton Cl..._1.jar

windows11-ltsc_2024-x64

1

DiddyModule.class

windows10-2004-x64

3

DiddyModule.class

windows11-ltsc_2024-x64

3

a.class

windows10-2004-x64

3

a.class

windows11-ltsc_2024-x64

3

ac.class

windows10-2004-x64

3

ac.class

windows11-ltsc_2024-x64

3

ad.class

windows10-2004-x64

3

ad.class

windows11-ltsc_2024-x64

3

ae.class

windows10-2004-x64

3

ae.class

windows11-ltsc_2024-x64

3

ah.class

windows10-2004-x64

3

ah.class

windows11-ltsc_2024-x64

3

aj.class

windows10-2004-x64

3

aj.class

windows11-ltsc_2024-x64

3

ak.class

windows10-2004-x64

3

ak.class

windows11-ltsc_2024-x64

3

al.class

windows10-2004-x64

3

al.class

windows11-ltsc_2024-x64

3

am.class

windows10-2004-x64

3

am.class

windows11-ltsc_2024-x64

3

an.class

windows10-2004-x64

3

an.class

windows11-ltsc_2024-x64

3

ap.class

windows10-2004-x64

3

ap.class

windows11-ltsc_2024-x64

3

apk.class

windows10-2004-x64

3

apk.class

windows11-ltsc_2024-x64

3

ar.class

windows10-2004-x64

3

ar.class

windows11-ltsc_2024-x64

3

assets/kry...nt.ttf

windows10-2004-x64

7

assets/kry...nt.ttf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Krypton Client 1.21.11_1.jar
Size 5.3MB
Sample260805-xya8tavapb
SHA256 d16e818aba349f019d012a19349a422d75ed50331582fb058a10aed77b559818
MD5 336691ff7b0c025f20aea3682f4e9380
SHA1 5ac3e69c7c70d7ac66cb9de42646e8f7c078f3e9
SHA512 a245b196d504ddddc8421f12bc8606d798620596ef68e4165b35f5279498f22c7e4a1fecfc4ef75b91f2f5a5d67a2f4907d1524236d0dbe5e04b1b65c13cfa5e
SSDEEP 98304:Fw00LQGWc8IQYrc16j5E0iGRoEi4bAt7i+Ot6UO6jdnxpZ5ds+dQ5:i0wQ/+QR16j5E0bWyedB6jFrZvm
TLSH
T1D1463314FEDBE67DD16311304C86842B294E32CCAD45AE2B23B41CAA4D35E856BD6FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Krypton Client 1.21.11_1.jar

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Krypton Client 1.21.11_1.jar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

DiddyModule.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

DiddyModule.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

a.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

a.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

ac.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

ac.class

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

ad.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

ad.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

ae.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

ae.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

ah.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

ah.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

aj.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

aj.class

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

ak.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

ak.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

al.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

al.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

am.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

am.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

an.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

an.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

ap.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

ap.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

apk.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

apk.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

ar.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

ar.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

assets/krypton/fonts/font.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral32

Sample

assets/krypton/fonts/font.ttf

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  Krypton Client 1.21.11_1.jar
- Size 5.3MB
- SHA256 d16e818aba349f019d012a19349a422d75ed50331582fb058a10aed77b559818
- MD5 336691ff7b0c025f20aea3682f4e9380
- SHA1 5ac3e69c7c70d7ac66cb9de42646e8f7c078f3e9
- SHA512 a245b196d504ddddc8421f12bc8606d798620596ef68e4165b35f5279498f22c7e4a1fecfc4ef75b91f2f5a5d67a2f4907d1524236d0dbe5e04b1b65c13cfa5e
- SSDEEP 98304:Fw00LQGWc8IQYrc16j5E0iGRoEi4bAt7i+Ot6UO6jdnxpZ5ds+dQ5:i0wQ/+QR16j5E0bWyedB6jFrZvm
- TLSH
  T1D1463314FEDBE67DD16311304C86842B294E32CCAD45AE2B23B41CAA4D35E856BD6FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  DiddyModule.class
- Size 233B
- SHA256 121fcc8cccd3d6b87a52c5bf6bec2d30c89a3e9c9a336528b3de4fbd0308b272
- MD5 d7a434dae51de263a6fbfd9af99bf22e
- SHA1 ce94cd49f9af77ab7121c03f3771640fd78edcf4
- SHA512 d5fe6648a15029a6921fb616db560a919c418c6129e6083bd99837f156798f3e142b4b4876c8140081fba62646bfe3646173e389cb5ea84b4f7ea273539daf1a
- TLSH
  T168D0A79FEC524317F140863588A013496B008C2A0A176E24DF8C01270DD25C16E04AD4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  a.class
- Size 7KB
- SHA256 aad4f7aa2b3bc48df2faf4dddb865be4eb5b93016ca234fee1cfb3c9d7289bcd
- MD5 65539ff687b0b4e9e6554766f1428fdc
- SHA1 a37f7ee105f3208c3a6b9f150f61f1ed1c51ac29
- SHA512 24902f5d3f759f116ede6aa04ae0a0f112d31707a29d38c106680fa58b4f5570e07ff9b078b87a5551e1356930240c7c6da7f75f376aae1488334031afa24286
- SSDEEP 192:P7Es51phvmJFloeso0Of1OVbk/JLHn2qhjX3H8kCn:TEs5sFido3f1OJk/JLHn2+jXXrCn
- TLSH
  T139F1419BE910069AE740E33445C199A8C718EE516A13ECC37FBC6B1764FE4D9FCA06C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  ac.class
- Size 30KB
- SHA256 f42937e469dbc4cb87f8943120a611518ba294bd235f37d0a57665edeedd7131
- MD5 113c9a52e2633dace75694d9486b15a5
- SHA1 64c30ba9fe1b22d430ae6d172fa4699e0f877a9a
- SHA512 edca2fcac43b215904fe8397e1b54c8d32053c4978564c8dc919cdc38ea4a5b70ef3f08aaf5c4dde62283a810b2208b6d6cc6a159f86be587626c7ffbc5acd75
- SSDEEP 384:wd/zKPSasIuopmMK82fR5kbLDwgMjYYy7riYNWfo01LtqWR8Qa:wQxsaLT2pcwgQNAq8D
- TLSH
  T1B6D2DECDDF909C04DFEE897E1EADC480A170DD2D128EE6279AD6B85B0350667CDC3A49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ad.class
- Size 671B
- SHA256 ca938d31e432a21dcac7b6570f82c2865bfc15c1f74cc3c153f4538da59c1ac7
- MD5 1e2c47fa6a1f65521061c532d1510017
- SHA1 9b30ea4a783ad57611e70f4a20fd634a38794aaf
- SHA512 dfcc02cc4fdb835a9ac02b2dd6472d70e3b0ac5ceef360596045526c5a77414b163cc1c100430e196dee2cc3f61bfbabee606697bff8262aab0655641e9d1858
- TLSH
  T17801D37E4901545AD75A763608A2BFA7DF33CC114413220207316A65CEEC0E6BE693BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  ae.class
- Size 976B
- SHA256 d47635c4e8c4c43b18c14ba4266860389422855cb033b23497c4ac5b6068fad9
- MD5 3755f6e52d484bbd80440c09c61acf8f
- SHA1 4ff15c110419aa00c2d23264d14c9e4db2ad5653
- SHA512 225935b3bae01a72a06f8361ff0365f4e38a951ecaa5d0f00421902939a105cf93c19630fe77396cef94c6bdc467f48411cbac8f997e8c9a56d2f894d6ed2e66
- TLSH
  T1B2117627B0548B03F260E73C2D1823184964F82592ABEAB2AF9A5C37689A684CA507C0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ah.class
- Size 20KB
- SHA256 1ee59246b2c067384ac9b1ac5e154eb299c809c0795e193f03a0396029c80cd6
- MD5 575bcfc8ce2ecb70fbf7a05a43971f83
- SHA1 4e93d1fb12a6802eb48f271b70c15217a9b20172
- SHA512 e18edf274c74de87e48bd0fc095be982b5cd6328b4b3ec988296d2bccc6e966050948c8271c5069a73899207248c6999810c824e03a51b0720ec19df6d5f3db3
- SSDEEP 384:V8IqdVGjNisVvHeURbM8V9wbM3iSvaMGF7Sn6JHrW778nw68XuCE72UIXzpw0dKU:VjNXQ2
- TLSH
  T1869203CD7F13EB2CEB9A59796A730401E1E1F4A970B7C30B9792DAB524482E9CF0614D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  aj.class
- Size 59KB
- SHA256 a1aab6ad3aa755352abb2dfcc7175764cfb038cbea2f6b5731490a3f7a2d8b0c
- MD5 48080f1b0774070cc962e1817ddfe9d3
- SHA1 5882296b159430dd4ac9fcaca8801a7d5a68b148
- SHA512 f356229fa08dca592f26e7776dd3c61b3cbd94eb6a3db22ea729f081b85e877765d2d856365f84bceb88e395659b1f593fef3e89613a64a21d8ede1cfc3fb83b
- SSDEEP 1536:bTmCs2mSOKkDGCft7g/zGHWF4cCisYezpZZe84+thU/E2YtJGR5:bT3MJ/Dxt7EzGNjjU
- TLSH
  T1D25364DFDFEC5DC1F6FF593E2A6042811662AE922181F6A727D184C0AA040E48FC975F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  ak.class
- Size 23KB
- SHA256 535e3eae4756ccbcc49de04e047470d28bd912645e0f4f470b7d54f665d991f3
- MD5 7fcb00025c66f149006b603c7cfedcd5
- SHA1 b130729ff398de0cdc2579bf26f7a859a7a2e3c6
- SHA512 9cc04fd7f32415e3814e53491d2d19f7332c185e7cc6b6d2343fdc0014822c41a854671926dc36b48b4e72077816b7ac6cf1392353ab4f160df401bd3569335f
- SSDEEP 384:tXnx0Elydm22U6Bne5CGM9cPb6EaE9Qdsf:2QnehMcbkEt
- TLSH
  T1ECB2AF5EFF846ACFE7D64F3A083A09449340FA122D73EA9736B5968134B2143EF49749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  al.class
- Size 51KB
- SHA256 13dc771d9eed57d0b699eb24e3b39f2fd1089c4253c17a02ce6e0d1e039b1446
- MD5 6ec5916c164e56511f8428cca6acbe7a
- SHA1 78105ae7881dce5dfa4605c59c83b3de9dd152cf
- SHA512 2bf8ca47f59b08fc9e45fcb7cbba90bb1b1d83382a06e3e4c1b29b800384e4ca8ca97d7f14b6b10a84a1b01f9f9528176548f2e2b46241a36630209cc8bc93fe
- SSDEEP 1536:1VDBzcM8oo6xMDMrfCyFYpYGs6dSpYpppDvP46bLZwwdjnz:19Bz0n7z
- TLSH
  T16333FB8FFF1951AAF387B2F8B155404051F1DC27A812FF6756EAC98B34C8A4ED8C5988
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  am.class
- Size 23KB
- SHA256 1944711f10958f172effe337ada6fcae85feb5b3bfbf080787479b31efb196a0
- MD5 410dcaa270cf275d9e0aaeead1896729
- SHA1 dba3316ed8b0ac9f4de939d5e2730b0da71e7471
- SHA512 be1f5c8b3f683393e3b2c093436687b7dfc80afea38dec38ed66f9a4f28d1f5ee19f506b604448c516445fcab666c85d8a9c77634a470a4a7cd82cbaa6b48622
- SSDEEP 192:ODpHScMbKi1xS9RaDRrlCKnHo2TYECWKi69m5Hna4yqk:QE51xSYHCmI2RKi6aHa4yqk
- TLSH
  T106B2251D6F32BA4ED7E28539346186837780F50555C7E34BEEE588BA94443F6CCB902B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  an.class
- Size 50KB
- SHA256 9adfc8d8af1b75597e38ca727cd84cbfa35fe0850a959660326df5d194020f16
- MD5 a75f8bcc418eaecf54679790a89df857
- SHA1 8010dc5a85d85cb72bdd4a4c2bf33a3fa7949807
- SHA512 f12f3a91603b7b7865b43efaea2460411d32b0f67be09766e7dba16c71a8e9539a235d821099e7231ff567fa628f2c52882582bedcea07731a3e5f1cbd47ed37
- SSDEEP 768:bgPp49MC+3R5SMU9gR8CgV5srxRbaiGlVHOggxyEtrjCW/VD+:yqMJ3tU9jYYXZZgx5A
- TLSH
  T1B933D95EBF41958EF293EABB74990141FAD8F83E1982F38FBBDDD4511882185AC43246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  ap.class
- Size 89KB
- SHA256 95d13ad5147599c670ad704eaca846c66850463b19aa0f25c9769bdae042431d
- MD5 615402ca9e93b807a02aca97c77810ab
- SHA1 07ffa2351be19ac6e6c9907f4bad0a19f0598fc1
- SHA512 b894613a9d22abe7099561c1e463e008bfc0d01682f90ed25dae3724413c7d5efde0f98c6fd33d0bf3ac1d231d8415795466d9b4c860e536040ecaa67534a0e2
- SSDEEP 1536:WqFKowx1EsDPxIJ8rdJf+DJ3XubbR5OTH9sARTNh3ZT9+Ex/OG8R/nHpJ2JA9yXP:ArL2Kzf1vdv8KcusdJyw
- TLSH
  T17493B42FAB20A90EF5B3627418B56C0D31A8DC52849EC79BE7E3EB1744512DC87D978C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  apk.class
- Size 42KB
- SHA256 1fa4073515ac583171d2ab34d376b1bfeaef697eae293b03c35fc1793cfbb914
- MD5 a771b79e6be068112d2a9e442e83a0d6
- SHA1 4d59279d0d1d6fcd73f22f0c2e10750e97416d88
- SHA512 210e0f0dcf12cc8b4d2d759c24ccca69a1cc19762e5be2080bb8a898ddca07998436ffc93956bcb30ae0c64f208d95ba9b4e9bb6f5e954b402cc8fbafd367e26
- SSDEEP 768:pb1Cb4IC3tDsV6hmpyUREE4chhJ396AmYxdh3XX9o+Z7eHrhSdy1NomEdMeiV/yW:d1k4rtADHGchD96AmrKMD18TtQ
- TLSH
  T1EE139A0FEE627E45D7A2BD7837135912969D80E90806E3C757ABCC51BEF037AB890648
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  ar.class
- Size 337B
- SHA256 92f052eac4859bfb460243b8e15513fd4dcec1e3658515939e68f87b46d10564
- MD5 a1f1b84c6fd280b6a08299a80abf22bd
- SHA1 3c6fd59e41bed8c6811c022c0a0d2ae8c806db24
- SHA512 69546882bd2ea114f9795ce265be4ad902b164168e3f74dde8728a16c66e2b3bc40649e0c5803991eb34e3b82d6bf774865bddee3becb14e27872fc32375e2ba
- TLSH
  T170E07D3BB602C943F5626F39A88293008BB4C51D1B0736D21F490573FCC42A14D513DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  assets/krypton/fonts/font.ttf
- Size 6KB
- SHA256 38b2597635531a26b0772a1dc6c460582be2f4df24ed467855702c60dc307426
- MD5 bb2364632c8098d9b448ce5bda4fc26e
- SHA1 ea76781dde6a1dfde898c92dea501694c30c907d
- SHA512 710ab35e9b6f1cd1f0a0416267d23c0c9f3bbe3d7d9c26b2c397843eb2c9991be0b2205887197961e6665682c400f5738408998a3dd55256cd17a6394216eb16
- SSDEEP 96:qeNTNwduBP6JvIwe9iyQsy/+ACMFx/+ACMFRHfwsHxZaDYeYC0RM4:JZwducJvsQstnRX0i4
- TLSH
  T16BE1DF4C93B7EA2AE1E3E5386E525F05D334ED107751375BC4C8BE71AC94D4ACC02A6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy