2427e9590bbc80a44c6a1c1c7f9cff932cd11ea4a497b9202c30ddb74f28ffc2 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

Krypt.Trad....0.exe

windows10-2004-x64

8

Krypt.Trad....0.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/app-64.7z

windows10-2004-x64

1

$PLUGINSDIR/app-64.7z

windows11-ltsc_2024-x64

1

resources/app.js

windows10-2004-x64

3

resources/app.js

windows11-ltsc_2024-x64

3

resources/...trc.js

windows10-2004-x64

3

resources/...trc.js

windows11-ltsc_2024-x64

3

resources/...ser.js

windows10-2004-x64

3

resources/...ser.js

windows11-ltsc_2024-x64

3

resources/...ent.js

windows10-2004-x64

3

resources/...ent.js

windows11-ltsc_2024-x64

3

resources/...nts.js

windows10-2004-x64

3

resources/...nts.js

windows11-ltsc_2024-x64

3

resources/...dex.js

windows10-2004-x64

3

resources/...dex.js

windows11-ltsc_2024-x64

3

resources/...dex.js

windows10-2004-x64

3

resources/...dex.js

windows11-ltsc_2024-x64

3

resources/...ipc.js

windows10-2004-x64

3

resources/...ipc.js

windows11-ltsc_2024-x64

3

resources/...ket.js

windows10-2004-x64

3

resources/...ket.js

windows11-ltsc_2024-x64

3

resources/...til.js

windows10-2004-x64

3

resources/...til.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Krypt.Trader-Setup-5.0.0.exe
Size 87.1MB
Sample260808-xapfjaw1e1
SHA256 2427e9590bbc80a44c6a1c1c7f9cff932cd11ea4a497b9202c30ddb74f28ffc2
MD5 91a0e5f3de8e06415a57fe10ea8681b2
SHA1 e01fa4289c5cdc89141427b83a9f2dacce11ba66
SHA512 65eae5e814ae22d807cdfbbc4932496ec64c474de93c6e53673c55717029fd988d54ba5cd4a8cd463b7d6dd746ef9513f81683cc1f7aab516b6e9af14bc5e3d9
SSDEEP 1572864:Ne2u7dc22g1pmBuiJmp2bfLjOxjf1ijZESL/EC1Wt5gOevmYmjp7IKOD:NeTJouiJMkQ01Ey/g8HCIr
TLSH
T12F18339835D79DB0D6F17AF5D63C8DAE59FAF3824FE3A5A229BC32B3F4464244948001
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Krypt.Trader-Setup-5.0.0.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

discovery execution pyinstaller

Behavioral task

behavioral2

Sample

Krypt.Trader-Setup-5.0.0.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/UAC.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/UAC.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/WinShell.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/WinShell.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/app-64.7z

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/app-64.7z

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

resources/app.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

resources/app.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/.eslintrc.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/.eslintrc.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/browser.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/browser.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/client.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/client.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/constants.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/constants.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/index.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/transports/index.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/transports/index.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/transports/ipc.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/transports/ipc.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/transports/websocket.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/transports/websocket.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/util.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

resources/app.asar.unpacked/node_modules/discord-rpc/src/util.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Krypt.Trader-Setup-5.0.0.exe
- Size 87.1MB
- SHA256 2427e9590bbc80a44c6a1c1c7f9cff932cd11ea4a497b9202c30ddb74f28ffc2
- MD5 91a0e5f3de8e06415a57fe10ea8681b2
- SHA1 e01fa4289c5cdc89141427b83a9f2dacce11ba66
- SHA512 65eae5e814ae22d807cdfbbc4932496ec64c474de93c6e53673c55717029fd988d54ba5cd4a8cd463b7d6dd746ef9513f81683cc1f7aab516b6e9af14bc5e3d9
- SSDEEP 1572864:Ne2u7dc22g1pmBuiJmp2bfLjOxjf1ijZESL/EC1Wt5gOevmYmjp7IKOD:NeTJouiJMkQ01Ey/g8HCIr
- TLSH
  T12F18339835D79DB0D6F17AF5D63C8DAE59FAF3824FE3A5A229BC32B3F4464244948001
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution pyinstaller
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/app-64.7z
- Size 86.5MB
- SHA256 190f1d2677f924e38b8286a47efe3d43b4d3c587d783eccb8b6a43b6ac0b0805
- MD5 567e0cee42e2136bbb9aeac91ac3a77f
- SHA1 0d62f421b132084238b26ae77ec207cbd3e23d54
- SHA512 b6575817912f571fff1ea8888d60f45b6a3fe292e4c30d157fc337db8e5e41df99e7a4926af6ee4810bd26cae043ef0256036fe4e5a391a11839bd404f766ede
- SSDEEP 1572864:e2u7dc22g1pmBuiJmp2bfLjOxjf1ijZESL/EC1Wt5gOevmYmjp7IKO6:eTJouiJMkQ01Ey/g8HCIS
- TLSH
  T11218339C39D75DB0D6F179F6D62C8CAE59FAF3824FE3A5A618BC32B3F4464284908045
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  resources/app.asar
- Size 2.0MB
- SHA256 39dd631c550bc78454e69416bc8b02e751cc874310fb8fba2a5a2bd4d0ffc263
- MD5 f4e481f0774582d3ff11cf1bdbf06376
- SHA1 521d4624cdd2ada6bc466d1524e8f3725b0e2ff9
- SHA512 2f897a9a1f6727bcb02fbf8479132480312f1c56e5c945c5407360fc8d2241e0f645b9b098170d9eb4a56316fdf095fa31fdc0781ff7599865f85df9b2b72a38
- SSDEEP 49152:kFWu3lThwjcg2fMl6fkcod3ryRQ77C83SrwOUd9Rqk/MggGgLgHzO:HwAhhQx8i0O1
- TLSH
  T155A55C94B2A1726F52BA43AC8C6B400AF23B1479940D9434F0DCD8ED2F6C95D61A7FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  resources/app.asar.unpacked/node_modules/discord-rpc/.eslintrc.js
- Size 2KB
- SHA256 7002d9a81ab28e145de657890a69203643005155c0ae152492e770c7a13e8def
- MD5 5209425051759d6e1234066b6d03211a
- SHA1 5ad80d772bec9948ebf744507c31576dbbe5b8a9
- SHA512 4b973b685d4308afc0d779fce567cbc65370e9906d5bd3a19196aad15dd3d13e179feea595a9cc3ce66075474bb9193aab72a0521291c5b6d0fdb6b27e2c68f1
- TLSH
  T1FE417CA669BB403B196593BECD5E9523A6200047AC3D3C34F99D06402F9C2AD65B6BF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  resources/app.asar.unpacked/node_modules/discord-rpc/browser.js
- Size 47KB
- SHA256 6032495a2f445685607d08b0cadcd68c2809a5264d5baa41b76ad64b01e87c66
- MD5 cfb9ad790ce51f1b1927d09c72276379
- SHA1 97e62815f8e85d6f4b4058ebb7a5a17cc7b3ac7f
- SHA512 8273a4893f8fa32efbb380422d40efae8bfd91476ecebdc25538f3cf960d15365eb6561a5c8219b476f2dfa9a0e6c356177c7554ee715d439b3f32ce5bab7e48
- SSDEEP 768:s/yuha9kJ5pCxm/HZOPURqV5G+fclVGodz/gMy8hRrCgSl/c3lc0sefr7vrW7jKg:EK9kJa8ZL+Oy8hblcHiWr
- TLSH
  T1BA23D788F3B5B07113E762A5502B500BF135E929740E48B8F225E8E57C789CEA57BF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  resources/app.asar.unpacked/node_modules/discord-rpc/src/client.js
- Size 18KB
- SHA256 eaff1c043bf0c996d7a53a578011e38a78e301e422490585907bdabddec2326f
- MD5 e801592a9164b88322909fccddfb54b6
- SHA1 87e039fc73fa130c48ca3e0603ac67de6d918014
- SHA512 12ee358e99f81c0ce36ebe4e15f96786a8d9d9de5b5225dff5e03e3c8acf70ae4b349f56c2cec97fa9a56211152fad560abe2f0e9c92064f13561c03464bec06
- SSDEEP 384:kEkg20b8XdY5Q5/R6MwlOHpOuBAeZvVIebIbaAIq0Oa7Zr5HYuYC:Wj04wGeWz/
- TLSH
  T17382A9CAB6FA11E2426360756F9BA683F125F10F390A5CD5786C37E44F5D33882B5AE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  resources/app.asar.unpacked/node_modules/discord-rpc/src/constants.js
- Size 3KB
- SHA256 174db6e530abb29e1d2705cfbf43569e35f1972176e8c4ed405f8ee6e63dfd0b
- MD5 d8c53237370210cb540c816d2c3231ba
- SHA1 0fc4c54864015e5f97ef5995f4128c7937bef0da
- SHA512 e7314e17042b8a9d8e9a283ee40fd67711a718bd838780d66cac7e02250c2fd27151326a2ebc6a621cd1ee85be51f875c2a94c7eef1f5f17d7ed8e26ee556ca8
- TLSH
  T1E98100F3226526EAEDAA1A3A203C09447C21D31F65DB3CBD91220555985FF07CEF49BE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  resources/app.asar.unpacked/node_modules/discord-rpc/src/index.js
- Size 166B
- SHA256 807f3c2a7d1b380cb73d423f325978a7b33b0730efc7e0885813bef0bc032713
- MD5 79e518ef097f0dfdbf03a08a400bf0e7
- SHA1 7785a8b24a9f18fc3185e7b72cbea11b1e4f8a2f
- SHA512 c5a5121b54046495e6d6113d3a51090690eedd5f6d23fc7fe5d930e5af3d3413f77cb547f86e5374e32513e1f8d9bfbc25ba338f9181bf46fcb75632f2130111
- TLSH
  T11DC0805D5FF2F1271B5B56C8D607C4017097D551110D5904E65815DD04C55CAD178CD9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  resources/app.asar.unpacked/node_modules/discord-rpc/src/transports/index.js
- Size 99B
- SHA256 293dd7ea565428ac11311683763713b0b7f76e6ad2d1adfe91fe1b410494b678
- MD5 2f7688f275a929f322478d9c7655d91b
- SHA1 8613f4b6f7eec12cc5bdc0e646900ef795b35dc9
- SHA512 0611ecceef0b76b47e16c8f0a330e8b4d98d6c1efc527f8cad3d51636f4aa17b370d3f181d414a22f5a6add78ee6bcf4ab10a9f523d1d0ea1d13e2e49d163e07
- TLSH
  T1B9B012D71FF8B2CD325483C09006640570E2C060090C548D45A47CC9908DC881620C7D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  resources/app.asar.unpacked/node_modules/discord-rpc/src/transports/ipc.js
- Size 3KB
- SHA256 00c165347303edb40a65340910c2157f79be4e5a9d3440cdef8db0e2e4891dcc
- MD5 cdf4dab7acdb1ddaa2764de1d5f2c36f
- SHA1 7bcb981ad2ba62e4ec76de7d4fc65abc3edb92f2
- SHA512 5e1b958c8553d878588479675514f36ef1e0cc06b9b5601fb0df4a784e87274981158911b152fdc50cf2436943c0b85990c7f7402045f6ea94f00fc724baa541
- TLSH
  T1CE815644B6F7186441B7B1260E4FC412361AE01B215ACE157A9C8FD4AF5D078AEB1EF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources/app.asar.unpacked/node_modules/discord-rpc/src/transports/websocket.js
- Size 1KB
- SHA256 5b97b43cd54354dda86e7e813ae412c21a6d75d5797e36ad1d68cec5f19c04bd
- MD5 f7556481579c5bb049b37dc750cf7218
- SHA1 bba42d819edf9c66e3e9d3df5f31b20b4b330f0f
- SHA512 83dae814d14d081ccb822d9d245aeda3e26b659cff8a1cdd4c1b4344fdc6725c7c8a31b633727d03972e5f932d7d0952090d229fa98b45b576b037f419518a64
- TLSH
  T1AF318D0467FE1424D1B771AA8F8BD4037228445B294BDE59F56C5BE88F465B04630EB4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  resources/app.asar.unpacked/node_modules/discord-rpc/src/util.js
- Size 889B
- SHA256 c52042a1ac2ab16f7e318673b85f195e85f078b3056d0993b97bc92748696719
- MD5 e44af3edd2906a749be96eb568157084
- SHA1 d9756726c78a396bdd8a3c837573e33b3bc904fb
- SHA512 74f549d03737de277fa21f0f59e6cd6794ca909125af1122471213efcf6c01ea0400805a4f7d623c55927715e2d7e5668cb817ae79d50b1b2880664cebf76a4d
- TLSH
  T16911AF997BF3A03B46D6B45D0E8DA001B42DD47312AC8D50FB0C66E2AFA342C63F2784
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpyinstaller

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy