0f9ee5a086d4718b92187be8de8e7b3b93d12056d9ca3ae7a00ac3c70ed85f8a | Triage™

Login
Reports

Overview

overview

5

Static

static

1

clawagents...TA.wsf

windows10-2004-x64

5

clawagents...TA.wsf

windows11-ltsc_2024-x64

5

clawagents...t__.py

windows10-2004-x64

3

clawagents...t__.py

windows11-ltsc_2024-x64

3

clawagents...n__.py

windows10-2004-x64

3

clawagents...n__.py

windows11-ltsc_2024-x64

3

clawagents...t__.py

windows10-2004-x64

3

clawagents...t__.py

windows11-ltsc_2024-x64

3

clawagents...ors.py

windows10-2004-x64

3

clawagents...ors.py

windows11-ltsc_2024-x64

3

clawagents...ges.py

windows10-2004-x64

3

clawagents...ges.py

windows11-ltsc_2024-x64

3

clawagents...ver.py

windows10-2004-x64

3

clawagents...ver.py

windows11-ltsc_2024-x64

3

clawagents...ion.py

windows10-2004-x64

3

clawagents...ion.py

windows11-ltsc_2024-x64

3

clawagents/agent.py

windows10-2004-x64

3

clawagents/agent.py

windows11-ltsc_2024-x64

3

clawagents...t__.py

windows10-2004-x64

3

clawagents...t__.py

windows11-ltsc_2024-x64

3

clawagents...oop.py

windows10-2004-x64

3

clawagents...oop.py

windows11-ltsc_2024-x64

3

clawagents...els.py

windows10-2004-x64

3

clawagents...els.py

windows11-ltsc_2024-x64

3

clawagents...und.py

windows10-2004-x64

3

clawagents...und.py

windows11-ltsc_2024-x64

3

clawagents...t__.py

windows10-2004-x64

3

clawagents...t__.py

windows11-ltsc_2024-x64

3

clawagents...ety.py

windows10-2004-x64

3

clawagents...ety.py

windows11-ltsc_2024-x64

3

clawagents...fig.py

windows10-2004-x64

3

clawagents...fig.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
clawagents-6.20.57-py3-none-any.whl
Size 790KB
Sample260806-gxwkcsvcpf
SHA256 0f9ee5a086d4718b92187be8de8e7b3b93d12056d9ca3ae7a00ac3c70ed85f8a
MD5 c0b350b70f295ae22d594cd1573cb6ff
SHA1 12e6f31f30f99423aa0ebe0a7cda304db26637e1
SHA512 f70a2b1295973e1ba3b5fe953f3871d4672502f5877cc766ca4bb9a6dccf8d57f8e41499b973f3e96e98dbb1fa490f6697ba48a1f2c8f23e1c3fab4f6c9d9d97
SSDEEP 12288:PnLk/LFetTmAVqj7Q/o8FPMNsDNpC9Ep4KuLUpo8dRcNQPOhIcIspZgU2RKc2YNx:PnLCelVq9NGFXJSyW57pHOdsk
TLSH
T112051224D69C9073C7E7833BE524BD27B53D266A7DF2E016B9204155FBA3BC886046C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

clawagents-6.20.57.dist-info/METADATA.wsf

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

clawagents-6.20.57.dist-info/METADATA.wsf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

clawagents/__init__.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

clawagents/__init__.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

clawagents/__main__.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

clawagents/__main__.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

clawagents/acp/__init__.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

clawagents/acp/__init__.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

clawagents/acp/errors.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

clawagents/acp/errors.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

clawagents/acp/messages.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

clawagents/acp/messages.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

clawagents/acp/server.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

clawagents/acp/server.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

clawagents/acp/session.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

clawagents/acp/session.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

clawagents/agent.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

clawagents/agent.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

clawagents/autopilot/__init__.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

clawagents/autopilot/__init__.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

clawagents/autopilot/loop.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

clawagents/autopilot/loop.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

clawagents/aux_models.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

clawagents/aux_models.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

clawagents/background.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

clawagents/background.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

clawagents/browser/__init__.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

clawagents/browser/__init__.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

clawagents/browser/_safety.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

clawagents/browser/_safety.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

clawagents/browser/config.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

clawagents/browser/config.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  clawagents-6.20.57.dist-info/METADATA
- Size 83KB
- SHA256 63eb2803b3f93bcefd8b3c7bc36401b1d8d3ac937b949c4ccc252da2cde67dbe
- MD5 8e5b1bc3422daaeac28c3b39e25f633b
- SHA1 895d509eb6807ea5ccd112a21ad05304f518dcd1
- SHA512 412d71ac83d3f12457d0b9e779a363d7fa34d1ccc25610795d565b40f190be5b10563bc788e1c5c91decbbfbea80b48afc3b922e2e1f7d0e6c31b6dd4e3042b9
- SSDEEP 1536:8ytFZYY5dXnTiCWUscjZzqtKFipXFeQH5qCm7+R7GauOER6RUSrqvPRPdUBWgizm:8ytFZYY5dXnTiCWUscjZzaKFgFfqCm7y
- TLSH
  T1F8832CE2D1E53D7E27D2835FB2177895A226B48475C814687CCFD01C939C2B982F62B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  clawagents/__init__.py
- Size 12KB
- SHA256 b5ef467965d2196e725e958aea3662f24fcc3ce76eca68d2ffcb970091fb3850
- MD5 36a8fc18f0788789ffc507ca7853c741
- SHA1 a42ecd19bb696fe5acdec36734b04a262c8c582c
- SHA512 70bcc285f1ee8a05e504d115831f03ad60da29c388223e1fd5ec71fbee1b511d6448e5b817f9c7bc69fc8dc760495e751cf85e8dcde93e6803a55412b3c3bfc2
- SSDEEP 384:GF5yIsfkXauR/toJC7vbwEBwoY62JdHtbXA+MS:ipPR/tVD0SidHtYS
- TLSH
  T1B342603A866D353B36E4CB4EB6593822533632533ED0AD1174587328AFDE30C6AB15B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  clawagents/__main__.py
- Size 33KB
- SHA256 542b9695d212d7ec07d0cf84c90f559f5dc13b46149562091e7101b898fadbaf
- MD5 1c8a8d097645e375e96e09d1dff90253
- SHA1 627253642b636b87d7cfc586141eeccfde2da750
- SHA512 1d1fb80dd92a3f1b283940f2c7b8232d4c7fd0b2bd9cbd528e63c7770f5cf9eb096be18d4e0187b7eda4e8bcfdc0467da7da788295df1cbe32ec13877d4c6abb
- SSDEEP 768:KSP8oDYtAUbTs390g+xodt1AEDJOC2Go0:KSP7MNbTQNdt1iC2h0
- TLSH
  T130E2D932D419297373C7C66DAAE698119336798338805438349CF2986FCD57B92B1BBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  clawagents/acp/__init__.py
- Size 1KB
- SHA256 ba852d2201e87c79e126fd58f1b88d7320245633c12125dbfb37ddaf3e276ac4
- MD5 d03797a0d398faf2bc90c3359c95f78c
- SHA1 8045c423269810ddd49c1f71844e26948baa3bc2
- SHA512 a3ca003485d26763a3c6d1243c3bca415b0b91566ca8892eb3a796e97842f4c3e011869fbe77f309642f506a5a4cfef32db4b1ff39b58344b2330e68d5ed3f83
- TLSH
  T1C741218BC965BF7F2567E34474461662BB3400833DA83028B29903CE6BAC70E5A7D15C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  clawagents/acp/errors.py
- Size 721B
- SHA256 818d652be630903cfb72a7b96a763fb525f155a005519646ffee88ac06b60aa5
- MD5 9b7151aa4c0713b15b9b8c924f7f9b99
- SHA1 1a08bbc39fe5ceb4e2377826650dfef027d1fb2c
- SHA512 22405599db863022470296741481ec6368dfe0a89961bb62b20759eaad8418980a3b17aed931a2f4a54442a491279e9b08f7f2becf1301641b16f87eddc43f90
- TLSH
  T105019446C79F0A77E5CB03B655A3964162381203BA565EE03CFEC1CC3F07120D58135D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  clawagents/acp/messages.py
- Size 13KB
- SHA256 7b8a4d49e29cd623b9d892becadc24a3616e038c8cd7d2310a0ef368c5d8fbd0
- MD5 a1ed1e514a779cc0f1bb7864b5cc2476
- SHA1 758aff3c99e37c683fd40ef6e0ad34495334a2ee
- SHA512 a9cb9158e18ffe6ab52b4d13a797cdf3d8a8fddebf42617346d53f7ea8c4f21ee589d6685bf92f3734da6dd9bcccf1c97e44487e75b5619667eacec42f5213ca
- SSDEEP 192:KseT3S+Ckpb2dh/Lsbyo0mIFTkZJstOV+BYwOJSpchsbySbyozAk2MK6uRa+4JJa:feudhIuv1ko8V+aw803uSbyozb8WE
- TLSH
  T1AD528376C522C592BBD7C07C4C66E5132625B403790510A8BCACB1AC5FDDA1B9AF2BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  clawagents/acp/server.py
- Size 10KB
- SHA256 7111dcc6cc42a228581e79e00c3a7086b55aee271105895135bbbaabcc8284d1
- MD5 b7faa54dca06d3ce3d5fb0d3ade52b4f
- SHA1 78adc7774a61318ecd11a85eb295929ea5e1bced
- SHA512 3b3c117a7138d72f01cdf80cb8ef02630f65d470067cc09f5bdb1d0de06a84a73f136da024301cc74d4708f5cc8926d498487cd2e0de043edfbaef842fd53631
- SSDEEP 96:c1gnkZBIhdy53BZDgPVj8VCpCmlfOelinopeoLVhzK86tofUhX3Yi5cOFcf/mgHK:+ZGdy1cVUCXiUJL9i4Cm/bYgs
- TLSH
  T140327532D82AA632B347EE4E29BAE451537574433E040C70B5FCB2149FDD235A5A1AFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  clawagents/acp/session.py
- Size 10KB
- SHA256 e1455c81431c5b23d24a00fe1fd79d20cd2348f305b0113b62368cc30adb5074
- MD5 501f4973b260af3d1126adbdf1cad1ba
- SHA1 82338e2efc51c43d1441d011c5acd3dec61a556b
- SHA512 ee843a0790e14461b4ee9c04d3f19513b657b507f2e7b0da72b9c6a5cd9282f818d7676c3e78a7790166591004ee6ef263d0151ef6fcdd9e61498f552ea45f40
- SSDEEP 192:qp4E0jeC239kzGlvHwZ4ttDq8a2q4eqJj4L2xzZzKS42zhl8QokKU8hr:04EWeVfvHPkX/LYKg0
- TLSH
  T1D022A672D526E221BAA7E39C6951E9226336F0433C0010B0796C76990FDE92592F1EFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  clawagents/agent.py
- Size 90KB
- SHA256 6e00a4882cd56609112750b95f6d3bfc659f23764b1ae8a58c62cec8af69fe6e
- MD5 662d9b74f6acc63954000d8da48dff89
- SHA1 ee3fada2b68717c19056a27a71af01d355eb8601
- SHA512 649541707d57a82b8a474181ff839e3a76b30b1e983392566eb8d9127f8846af361c01ce4418325834b6a2820256ea1e49a8d16e1caf7405f90df16beae6b6ba
- SSDEEP 768:chtOjV4khXGmmUx5PeEFAxm50eM4YA0Ax6Xn/k7zZoc1R1zbgjWqgwUl2VkjaX8N:XoUxxMdxUogtl7jR/lvbz5zWQ
- TLSH
  T1B693D836D835682363C3CA9D6DABA141633574432C442434BC9CA26C6FDE679B2F1BF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  clawagents/autopilot/__init__.py
- Size 1KB
- SHA256 2cd3ae4b4dad778a90f4112bdf658c45f2ce57363ba28a280a60e338eca23cb9
- MD5 b08728a0403bf225b397e0cc2a60f2f2
- SHA1 10ec5924e0dd3abdeb4e625ab0052e4629eae2e6
- SHA512 258da9479317f91e8ddea31cd5d0e40ad4c8c16a6a31b05060e7869d7c60563731a30e75bf2337476c4f4f13f72a2e7af0447957c5bf874a4658e0c0e1302204
- TLSH
  T1AD31E15C8937F5EAEFDA8EBE0411C4329255DD874D08742031BC8364EF2701D9574ACC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  clawagents/autopilot/loop.py
- Size 4KB
- SHA256 58621a9b42cbb4ac7bfc5c3ce22f2e3cbb5041e3e50ac4c7f5c3a1d91c6d5a16
- MD5 b0d842345b5529f31bf5e79b4a4c8cff
- SHA1 57796b88d894741de81817898c8339d5548ffd07
- SHA512 00f13f5a8bdea9fbdaadad613b5b17bc69083b24d17d90e32bac4c8280adc86b96b0a82301ed8c6797f7cfd55520073adfae0cc38cd7e5c7245a0f1cffab3ca0
- SSDEEP 96:Q23VKuGD4q0nGAUa1c09IxeW1KDLmkXdHT6EcKp2gS+9q:Q23VpnGp8cGI4WkLmSHT6A39q
- TLSH
  T1E091630CAD3A31DAF7974F9A0AFA520287B57C4F0D48B521345C86F81F4A12E33B1AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  clawagents/aux_models.py
- Size 7KB
- SHA256 27b7cd901b97ae1928238a849a90e751d8c30d3b7040523804fd6f0502dbff46
- MD5 c56879255d64bee273655422a33c56ac
- SHA1 f6f1c151083fabd50cbb8187ce6ace3a315aca33
- SHA512 33b77457cde4e72fa36159f364124520514689b0e12c2c7c3bd6de54d6605a9eb965fbfec12f36594087146a985c05c2d3a4d35f59f3f95302b1abc7821e8fe0
- SSDEEP 192:wzjXFAMj/IdiiFvQ67QgiowxnUPDv44DQ2tLebkq:wnXuQId9Fv70vsFk
- TLSH
  T13FF1962BCD665E21579B8BD6EDC775039A6A98C78E0C24F3786D80A42F0E039D6F44DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  clawagents/background.py
- Size 16KB
- SHA256 800f9b932a33034ba19f8b2487cc9bdc908e2ebf36ab1e3af1a5d6a0ad85a3dc
- MD5 7519d516d89c67b84b5f8210d4dfe48d
- SHA1 7d26f50417b45ce8214cfe102264b736b12fca78
- SHA512 fba644053e127755e13fdda77e7f264fb72716d1777ef4cb51db87fd66fc99bdbeb07c3bd1af4ae178ba0a5636e95c35d2285f9e0bed5960007b5d4e3b138e84
- SSDEEP 384:WSDzWJIkJYyJx2ft3QVdt6rYabPZzcgKf01MfbbbDj:WSuJ7JYynGgjtWYabPdcgKf01Mjf
- TLSH
  T101721946C2B74E61A3938CB5245690938ADCA9079E10E0B83CFDE39C3F19134C6F5AD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  clawagents/browser/__init__.py
- Size 2KB
- SHA256 1836379c2153a3ea664f2bd3d21955bbcbff53d1629e6ad64054eba99554a474
- MD5 d365fc7fc977784a125f6476af97e618
- SHA1 efc57e241f528a58d2ee577a5bb421991b4182f1
- SHA512 7eb8a195e0e4bb64e211aaa4d47da7327dba116f5aaed53324ec2e08f1537c28e517b4b026aa0c23483af7e2e834ded52fd32de9b881b1771d97c0ebc8b5d1b7
- TLSH
  T18E516585CD3EAEE78DE85757AE5C85243A3305431DF0B814311B82289F4DA1E9ABE34F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  clawagents/browser/_safety.py
- Size 1KB
- SHA256 e3d829718d99346bf3aa5eabf0e6ac9e4ff9348259d1d52cc1b22bca44563dbd
- MD5 3b6299834525883f41da922d67a4a1fd
- SHA1 c217cf402a10d7cefd92aa42de92ca107c529bc8
- SHA512 2fdb9c072b0196df4568b5334d14638852156b87ce827436a6a7a0685a6658e47b449296c942611dd612881bc8077ac5468ee609d5ddaf4679939be8a9277f30
- TLSH
  T1A54131E7ED9AB593432845BACD02D263F31A774723BD8E98F88D40193F8897595BC208
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  clawagents/browser/config.py
- Size 2KB
- SHA256 ff883cddacd1e409f617963411efd36af09cf1cf21a419f232c355ece6318772
- MD5 346a537e1e68d7c0f1f8bdcb6d83fb99
- SHA1 7bc0815c4480c543352518472b866e9089b484b7
- SHA512 11ec5e0183bd276ccc1076f67dc49bc60b18378ab2bcc331f310abb62f165f47126587bfb199e7b5c7d44801f7cf7fa85e2fd53a291ac8004b7d7390d2997c86
- TLSH
  T16741841BF10490F016BB0C72E51E25426993660F6A2630B8B9BDD23C5F0D52DE5E62CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy