e9a0bbe88b917d20d66a74e43d6f52a7cf84f5cd97e77f27b0ae10666403e81a | Triage™

Login
Reports

Overview

overview

3

Static

static

3

Ankacraft.zip

windows10-2004-x64

1

Ankacraft.zip

windows11-ltsc_2024-x64

1

icon.png

windows10-2004-x64

1

icon.png

windows11-ltsc_2024-x64

1

modrinth.index.json

windows10-2004-x64

3

modrinth.index.json

windows11-ltsc_2024-x64

3

overrides/...erties

windows10-2004-x64

3

overrides/...erties

windows11-ltsc_2024-x64

3

overrides/...erties

windows10-2004-x64

3

overrides/...erties

windows11-ltsc_2024-x64

3

overrides/...u.json

windows10-2004-x64

3

overrides/...u.json

windows11-ltsc_2024-x64

3

overrides/...s.json

windows10-2004-x64

3

overrides/...s.json

windows11-ltsc_2024-x64

3

overrides/...ap.txt

windows10-2004-x64

1

overrides/...ap.txt

windows11-ltsc_2024-x64

1

overrides/icon.png

windows10-2004-x64

1

overrides/icon.png

windows11-ltsc_2024-x64

1

overrides/....0.jar

windows10-2004-x64

1

overrides/....0.jar

windows11-ltsc_2024-x64

1

overrides/options.txt

windows10-2004-x64

1

overrides/options.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
Ankacraft.mrpack
Size 1.0MB
Sample260807-dmjk9swerc
SHA256 e9a0bbe88b917d20d66a74e43d6f52a7cf84f5cd97e77f27b0ae10666403e81a
MD5 e7e5184a4e22c821bc1d260987ef58ce
SHA1 5f0af541db3d81fe16511da957dd69e93a3acbe3
SHA512 7568806908b06721fe12a9158b4362f8d2653aa8b2fbb6a0907a8e54791e1e445734d455896a4c3aea4d4e10c28511da90742513dae50f5c154ebb55149b83c1
SSDEEP 24576:R9S5gQKrDQvkWRfkCARxJjD1g9S5gQKrDQvkWRfkCARxJjD1Z:R9t/MfRfk1jp1g9t/MfRfk1jp1Z
TLSH
T1EF35233A781DB446D2B17373412E71026AC090D5F5F4CD3729D9A76F30B2B793A2B9A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Ankacraft.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Ankacraft.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

icon.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

icon.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

modrinth.index.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

modrinth.index.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

overrides/config/iris.properties

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

overrides/config/iris.properties

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

overrides/config/lithium.properties

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

overrides/config/lithium.properties

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

overrides/config/modmenu.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

overrides/config/modmenu.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

overrides/config/sodium-options.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

overrides/config/sodium-options.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

overrides/config/xaerominimap.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

overrides/config/xaerominimap.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

overrides/icon.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

overrides/icon.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

overrides/mods/SMP-1.0.0.jar

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

overrides/mods/SMP-1.0.0.jar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

overrides/options.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

overrides/options.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Ankacraft.mrpack
- Size 1.0MB
- SHA256 e9a0bbe88b917d20d66a74e43d6f52a7cf84f5cd97e77f27b0ae10666403e81a
- MD5 e7e5184a4e22c821bc1d260987ef58ce
- SHA1 5f0af541db3d81fe16511da957dd69e93a3acbe3
- SHA512 7568806908b06721fe12a9158b4362f8d2653aa8b2fbb6a0907a8e54791e1e445734d455896a4c3aea4d4e10c28511da90742513dae50f5c154ebb55149b83c1
- SSDEEP 24576:R9S5gQKrDQvkWRfkCARxJjD1g9S5gQKrDQvkWRfkCARxJjD1Z:R9t/MfRfk1jp1g9t/MfRfk1jp1Z
- TLSH
  T1EF35233A781DB446D2B17373412E71026AC090D5F5F4CD3729D9A76F30B2B793A2B9A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  icon.png
- Size 518KB
- SHA256 87c3d66ba72e0e034c1a05f48044edc5badc25d55344dd32a2f38b82874add73
- MD5 ccc5325d4fcf8820b6273b12f133f684
- SHA1 d1c4d234a36ff2c5c7b39cb50dc4a2fa2c5ceea2
- SHA512 c5e26001532ed39ed4377ea657c5a0f8fd6b6f087db7b8562f5b468e0f63deceaeba5316f99e925b8ef79b02cd2ca569a4c6519a9838d1fa702b7b08078a3f3f
- SSDEEP 12288:P/ynDkH3qPBCzm99K2RZ2NcuUrLJ8KYej1MXiY:PX3qJCzuK2RZkcuUrFRj16
- TLSH
  T11AB4238B76385EA2F633F23BCEEA4045E6055FA1D3328B4515E9EB583267F7C1186708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  modrinth.index.json
- Size 11KB
- SHA256 aa5c1f71a6c1b8161de4bceb52af456949cd33e2040a7c15b6c8d8839aed6b3e
- MD5 f22ee2089a324406d19b896481ca2ef4
- SHA1 18ca834b33bf6c9467c1d778a0590fbcdc66251a
- SHA512 3f722e3a8620e6ff738c324dddd751d5956df5ed84af97460174b2e3084a169cea5d58e3965d88382af13254d3019be7e3c1c4653dc3b30ab3496f2f0df10e1d
- SSDEEP 192:j3FDY60z30zlzrAHzdzizW4m1zApzfkrz7VzI2zvtZzAzfCGzPrVzrzojzPySzPo:ZDkwZrizRWrOg8H9vHMK6PrpHGP5P7Xs
- TLSH
  T1153255A8D3F48CDB1684B6B2DC2F50426222965F0F7C7C1975EC408D4F2F22D676A6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  overrides/config/iris.properties
- Size 226B
- SHA256 a36780099062c141401771f6958662f6d373bb1d9c1bc576a17ef863f5d047e7
- MD5 f8f96b5635c5b4c8c84ba74a709e785d
- SHA1 0eba952faab24709bb90d707b120f2b15513f053
- SHA512 c6a9cc285b10f2d79ece373e021e6e1fdde4b96f229e9efcedec9fe32684fe4aadb58d511826005fc9d67837eabe1e2d3d3a6158d2ba1891c2e208c4435e5a2b
- TLSH
  T156D097C30AC13837E2738348E505A8A3402882B029068AB0A026006C23FA801CBE3844
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  overrides/config/lithium.properties
- Size 1KB
- SHA256 defbefad7b40e2a8902ff096aad10a2365c3bc1148a091998b3421eec8394b8a
- MD5 772a7f3ab5ef54ab6cdddb88a8d1e8f7
- SHA1 0606befb4df6dbd080b694c921a2577af6965060
- SHA512 bc83abce927e2ed459260ee61d475afc3b7d59c3f7d7d35698b686c36a83fd21aca7a1cf3f55762181b6461c4f24d05abaa0baacf5eadf0d71ce970558386034
- TLSH
  T12C41BDD7C7F115BB0AE2535D50F608A0F2248F602B536150DC388E636D295536A6F20F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  overrides/config/modmenu.json
- Size 530B
- SHA256 3a8d57d336378c3acd12096ab8db0752daa002fac2d4b7ae0fffadc50ad99b20
- MD5 ff5ab0f614d25630d2a0631bac57db97
- SHA1 d2a8fd45dafd3e3f2f579e270f963fc4116821ae
- SHA512 fdedfc18a42e7b73acc87fad330c40f455bfc56021b11307e20fdd6b36be1593c31d80afda559acd379dd923d8047047afe4c491e3ba2afee439edfcf5247c43
- TLSH
  T17EF0B470D1BE88B516F22218EDCEB0071F329D5902467D2543871A0A129DB3F32B79E6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  overrides/config/sodium-options.json
- Size 720B
- SHA256 3a6c9c6ae08653658ac4aa80636a5277d66045e6597190559df907eabe7e5d93
- MD5 c1617c550902af69a286111936d39fc3
- SHA1 82131dae64534219b4ee31ec9380afcaa9d995c7
- SHA512 0a92c778c64bf9588005fab8753b8d42732f5221d9bcf7dbbbe062c4ee1783d73e33311eb0b89cd0eaa2d7add280fcbc4df8d62dbbdb494ec5d9b404f9cf2a9a
- TLSH
  T13D017B62D4FC5C7110FA542018ADE683443145232E1D3DBEB1EA606C2F8E78F267BDE5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  overrides/config/xaerominimap.txt
- Size 627B
- SHA256 ee148cc9c3411abd1f2c6aac69797443c66195184cb70bb3fa9dde90bb488964
- MD5 ab39cb60c40a30596fee4f7eaff09e60
- SHA1 578038768fd7e3e49dfd08ab5c31a8787f27c86f
- SHA512 2da961b322c01477d2cc030190926906f22ddebffd6dd0deca98fae8b857631230f68f64d109dc756b5a2d98232cc416e7fd32786f3c71f276e18084e6a7d2a0
- TLSH
  T155F0A2E06DD71379CB861131F84A39837E33AD34B8976B6775FC019DA8075008B7C429
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral15 behavioral16
- Target
  overrides/icon.png
- Size 518KB
- SHA256 87c3d66ba72e0e034c1a05f48044edc5badc25d55344dd32a2f38b82874add73
- MD5 ccc5325d4fcf8820b6273b12f133f684
- SHA1 d1c4d234a36ff2c5c7b39cb50dc4a2fa2c5ceea2
- SHA512 c5e26001532ed39ed4377ea657c5a0f8fd6b6f087db7b8562f5b468e0f63deceaeba5316f99e925b8ef79b02cd2ca569a4c6519a9838d1fa702b7b08078a3f3f
- SSDEEP 12288:P/ynDkH3qPBCzm99K2RZ2NcuUrLJ8KYej1MXiY:PX3qJCzuK2RZkcuUrFRj16
- TLSH
  T11AB4238B76385EA2F633F23BCEEA4045E6055FA1D3328B4515E9EB583267F7C1186708
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  overrides/mods/SMP-1.0.0.jar
- Size 3KB
- SHA256 098c4093c60279b654fe518d99b8163c0a1b465947e58ef07ccc9732d7eec8b3
- MD5 90a78f93842b205088a6cd0e33dcd216
- SHA1 83a11eab88c258afd00f485c43596f2bf1794d2a
- SHA512 8c13f2d7a60ed0ac599f0189e2525474a7045a74bc859f75982238caa8fd7ad4dc47891cce930d8c9967e333b2e82f3fa03e93279555dd9c174d08c0fe994585
- TLSH
  T1AD61A6557EDED11EE80B467A86D2E8A638241A8A9680F50F25533A580CD09476F43DDF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  overrides/options.txt
- Size 3KB
- SHA256 5b8ce80bd59ad779b94bc3e356205185bed3861ccd3c0db74b6e6424e28506b6
- MD5 fe85771c3437f7626c1a6d05c6364154
- SHA1 c8f31b6c321e1bd811522438f8a1aeb26d5a330a
- SHA512 f4ae42449b1bdb133fc5a7c339c6be31bbd381c0afd01b90a95c438116b3b1f1ba420061ab50d916af746677d3fb3e1bb35e4da219013952dd79ce05d27c61b4
- TLSH
  T146719A21503EFC7AD9D63E0AD550B6212E264834ACE2BCECF52D48EC374714846BEA9D
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

© 2018-2026

Terms | Privacy