ffa380fdf91230821b2c0ddf1253113a976d530a39514b04a42837581c7505fe | Triage™

Login
Reports

Overview

overview

6

Static

static

6

emiprolock...pi.dll

windows10-2004-x64

3

emiprolock...pi.dll

windows11-ltsc_2024-x64

3

emiprolock...pi.dll

windows10-2004-x64

3

emiprolock...pi.dll

windows11-ltsc_2024-x64

3

emiprolock...db.exe

windows10-2004-x64

3

emiprolock...db.exe

windows11-ltsc_2024-x64

3

emiprolock...se.apk

android-9-x86

emiprolock...se.apk

android-10-x64

emiprolock...se.apk

android-11-x64

emiprolock...ne.bat

windows10-2004-x64

3

emiprolock...ne.bat

windows11-ltsc_2024-x64

3

emiprolock...-1.dll

windows10-2004-x64

3

emiprolock...-1.dll

windows11-ltsc_2024-x64

3

emiprolock...up.bat

windows10-2004-x64

5

emiprolock...up.bat

windows11-ltsc_2024-x64

5

emiprolock...tup.sh

ubuntu-18.04-amd64

3

emiprolock...tup.sh

debian-9-armhf

3

emiprolock...tup.sh

debian-9-mips

emiprolock...tup.sh

debian-9-mipsel

emiprolock...er.apk

android-9-x86

emiprolock...er.apk

android-10-x64

emiprolock...er.apk

android-11-x64

emiprolock...nds.js

windows10-2004-x64

3

emiprolock...nds.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
emiprolocker-mysql_v9.zip
Size 13.9MB
Sample260807-wv15ds1dld
SHA256 ffa380fdf91230821b2c0ddf1253113a976d530a39514b04a42837581c7505fe
MD5 4f4c64bf0f74de406064ec24cf82ec67
SHA1 6e551e43ef96b8aa71f392cbb6bd01e4e8411fea
SHA512 9f018f2236bc81635530d9e2b9671e11d3546e53e04cc28f361884de42416bc7325bc3b82ad01639db1c3224c090a87ea655fccce6481764ca7b54c02bd648f4
SSDEEP 393216:nAjRQI40vKOAEB5DHjOLiaRjd5g8ZEB5DHjOLiaRjd5gg:GQIbAY7jOLiCWgY7jOLiCWg
TLSH
T134E633D1816E099EC89C77BD557A23C86F9D8F8B8C2734AF7F441B626343367A970608
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

android defense_evasion discovery execution linux

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

emiprolocker/adb-setup/AdbWinApi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

emiprolocker/adb-setup/AdbWinApi.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

emiprolocker/adb-setup/AdbWinUsbApi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

emiprolocker/adb-setup/AdbWinUsbApi.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

emiprolocker/adb-setup/adb.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

emiprolocker/adb-setup/adb.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

emiprolocker/adb-setup/app-release.apk

Resource

android-x86-arm-20260325-en

android-9-x86

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

emiprolocker/adb-setup/app-release.apk

Resource

android-x64-20260325-en

android-10-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

emiprolocker/adb-setup/app-release.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

emiprolocker/adb-setup/fix_offline.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

emiprolocker/adb-setup/fix_offline.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

emiprolocker/adb-setup/libwinpthread-1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

emiprolocker/adb-setup/libwinpthread-1.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

emiprolocker/adb-setup/setup.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

defense_evasion discovery execution

Behavioral task

behavioral15

Sample

emiprolocker/adb-setup/setup.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

defense_evasion discovery execution

Behavioral task

behavioral16

Sample

emiprolocker/adb-setup/setup.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

emiprolocker/adb-setup/setup.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

emiprolocker/adb-setup/setup.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

emiprolocker/adb-setup/setup.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

emiprolocker/apk/emiprolocker.apk

Resource

android-x86-arm-20260325-en

android-9-x86

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

emiprolocker/apk/emiprolocker.apk

Resource

android-x64-20260325-en

android-10-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

emiprolocker/apk/emiprolocker.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

emiprolocker/assets/js/commands.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

emiprolocker/assets/js/commands.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  emiprolocker/adb-setup/AdbWinApi.dll
- Size 105KB
- SHA256 120bef587119c6cb926b86b9be90fdfbce38937588eae28cd91a94ce63c7b965
- MD5 47a042211f076ac2ec64a8959f455d02
- SHA1 ddaf6836e376c7a5d649e7c66fb0f7f193097ab1
- SHA512 134a9484acd567957a6e35fc0a872ed6f8bd3ac6c1526cad2efe2ce392879c5bdf467dd994be4d2c7e78e9849f37710a91d506702a7df5e55e0d852f5734572b
- SSDEEP 1536:Rwqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCPj7+9o:RwqD3L8Tezq0et+ui1yYco
- TLSH
  T130B36A227891C072C8D361B91AECF76593BEF4B10B6589C7339803DADE643C25B7529B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  emiprolocker/adb-setup/AdbWinUsbApi.dll
- Size 71KB
- SHA256 6ca69a2ca0e31309c087d288f058977d421ad03500e4c3e1dbd981241a069c60
- MD5 70d9408186450f9aae9b284428593017
- SHA1 af00109a1596f5faa7aa0038d535c3ed54dfaa76
- SHA512 157354d5a866378f854eb3c1e5cb4d3ad8a8dde93931c0f9ca0e786bfda3edf58178212a066c8cf19ca22225363b08eaf68f6d30c986dae52bca512b39804811
- SSDEEP 1536:b72doFmOiHizFbPlspcsbj5ZsP+YeTs1pT7+w2:bSSfN9+YeTs1pT4
- TLSH
  T1F4636C237990C472CC9651B819ECE621A67FBA501BB184C7779C03DB9E203D1ABB9397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  emiprolocker/adb-setup/adb.exe
- Size 8.1MB
- SHA256 957e46b8615f7af5b7292a2ddabe98d2e61940c3fb2b0545756507f080613e71
- MD5 f62bbae3edbffbf33f913a536c37f5c5
- SHA1 c8cb0d5720e2d34d359a89f4250e0971ba4f2da1
- SHA512 f2b79507c0b83006c304c5e3e0fce19c9685465f9e487fc0992e8447a6f43f47a18aa39cfe0d21b2e4a29f134c16b17285d5463547ca82347eed9f72d36a5577
- SSDEEP 196608:hQbvGuN6MGAaC1spB/fZEf7t/tg/78gPPvSQpZjXvDD+cNGwFZN:hQbvGuNtGAaC10Xi71tjgPnS0BfyMZN
- TLSH
  T1C6869D06E153A179C90310F1212EB37D6F244A148B258EFBDBD4EDB86B659E0353FB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  emiprolocker/adb-setup/app-release.apk
- Size 5.9MB
- SHA256 8f62d07f22759a0549ff0bc7dfc5ff67a903e7b4e79a552f5f16246a17d84385
- MD5 df30581f644ea9f0b4ee5bc4f3a4a0e3
- SHA1 34ccbcaf7fb351f04ec931f50ab533acc7c0db60
- SHA512 cb8b7f767f2f5dd0091fba7871e201bdc7c83b35953072edb50df957d4dc3ef509ab7468f7d54567f073cbc90729764feff7d81e419f4f80fb1f3c3207fb9175
- SSDEEP 98304:dTZDjiIT7SeQW9aB5hvu7QPGRfYsoJV1buTp2OybGkd0UyDd7iUBoTwr8Ch:dFnSeQNB5hhPGRGHnOybGk6uUdh
- TLSH
  T17B5602D6F7E89D2FC8775032C56A62F5625B4C128A839F876904371C78776E80F89BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8 behavioral9
- Target
  emiprolocker/adb-setup/fix_offline.bat
- Size 1KB
- SHA256 82cb93472e6387066ff4bc3f521af58914d704709c5188900de7c7246317dce6
- MD5 d148dbf7e84faf7df18a33030856a42a
- SHA1 6b8e9ca2d3adfa1c2b2bd03fa55ef922c0584f76
- SHA512 a02020afed62fc9c48c8ea1abfdaf23d8993b278f773d450b35881d2e256987b9b78302a51be1a988718d958b4ea2caf49bf5c2cdd9bbd93c754fb1a36aef736
- TLSH
  T1EF4120157912640881BB17D29D3D1C21B50E80CB9B23BEC9F093917679483E4BAAECED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral11
- Target
  emiprolocker/adb-setup/libwinpthread-1.dll
- Size 237KB
- SHA256 283a8c3f8d1542df333e0899757b00d484888978d62ccf8c99db662a95cce764
- MD5 feb38066af2c64419bd2c659bf402ca5
- SHA1 7590b9b3db327a8e943fa2d613ba0153e6504eaf
- SHA512 944a0c7d33ca54a8f71aab9b3daa9959af4f7a0ef42493d74017971ed60c3dab9e729576004d49cc4dc16afb19b57b8a52f4f79f6fab7c4410972f74ed6cc502
- SSDEEP 3072:Lj7MrkFLe6s7qS2RnQt+dw4Ijim3YwbX0Lh1Zy8KdwkdcmPqQzaxtubRRyNqJrdn:LjPFPsmtBDqim3YZLLZtvQz8YHrd4L8
- TLSH
  T17D344CA6B3858CEBE912173E44E7C757223DE2940B038F476F74A839BB5B78079C5249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral12 behavioral13
- Target
  emiprolocker/adb-setup/setup.bat
- Size 2KB
- SHA256 97f2d9fa9fadb27e86e20287ce6b09abcd2535eaa37c0539094d0f36f7e12c6e
- MD5 df36f47b665f1011736dd02d2bad7532
- SHA1 c4e74e4cec62c2bbeb4982902e64b0b09c6a10f0
- SHA512 f5a9fda067fb3cd40f5702d3797fdf68794087f481a8560e7c46c8c92e6cb539552b42e9b21f180694db37e7fff704b9c462d8aa51df51bfc5e5f5073fe2f7c1
- TLSH
  T1535163453612116F11BA1BA25D784521FA4D818B9223EEDC70B391B02FAD3C03EFD699
- MD5 SHA1 SHA512 TLSH
Score

5^/10

defense_evasion discovery execution
- Drops file in System32 directory
behavioral14 behavioral15
- Target
  emiprolocker/adb-setup/setup.sh
- Size 981B
- SHA256 fb4b3c311d2d48ccecb24794e6ff6a670c20a276fcb1e778c7cdb08169292e43
- MD5 9dec52222e49be9aacda50605010556a
- SHA1 1d3063e9468907ae0f4b4b06f7265732f5d631cf
- SHA512 bca885fd35c19240a3f533974d6a8168a34e34d300ac5aa0e4726a4cd220d03862b1f2ba61914ddbab2556a288dd967edcace00d28a560a2d99e39af008b19b4
- TLSH
  T17E11EFA13519A034553B1131BC11A410BA18285F8770ECB8713B84B38E48BD03CEF760
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral16 behavioral17 behavioral18 behavioral19
- Target
  emiprolocker/apk/emiprolocker.apk
- Size 5.9MB
- SHA256 8f62d07f22759a0549ff0bc7dfc5ff67a903e7b4e79a552f5f16246a17d84385
- MD5 df30581f644ea9f0b4ee5bc4f3a4a0e3
- SHA1 34ccbcaf7fb351f04ec931f50ab533acc7c0db60
- SHA512 cb8b7f767f2f5dd0091fba7871e201bdc7c83b35953072edb50df957d4dc3ef509ab7468f7d54567f073cbc90729764feff7d81e419f4f80fb1f3c3207fb9175
- SSDEEP 98304:dTZDjiIT7SeQW9aB5hvu7QPGRfYsoJV1buTp2OybGkd0UyDd7iUBoTwr8Ch:dFnSeQNB5hhPGRGHnOybGk6uUdh
- TLSH
  T17B5602D6F7E89D2FC8775032C56A62F5625B4C128A839F876904371C78776E80F89BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21 behavioral22
- Target
  emiprolocker/assets/js/commands.js
- Size 988B
- SHA256 af7361f776dfde8ffa4e0c6a587a21f6fd4a503f648f1150f7ca8145e93e0231
- MD5 4659eba85efb0a825bc9a54e6ea7b806
- SHA1 bac3a30a902081af955c0a77527e5440f43341e5
- SHA512 6468b5d037d05fa85b1fd3e8d9e5b9084a41d4426b3e0198e63bb651f17c0699780054c436080a33f0217457cc56ede7cf8543dd0a3f66ce5535950ec4baa6d3
- TLSH
  T1B411CC4B31FB2C724EEB223A6CD7E945323150073902AD86BEDC21149F84E1584F2FC5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

defense_evasiondiscoveryexecution

behavioral15

defense_evasiondiscoveryexecution

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy