d94ebeeea3eefad03576b52ed1c9658bc5787e61d75dc0183eafebf6f21a518c | Triage™

Login
Reports

Overview

overview

7

Static

static

1

rls_repo_m....1.zip

windows10-2004-x64

1

rls_repo_m....1.zip

windows11-ltsc_2024-x64

1

lua/ge/rep...er.bat

windows10-2004-x64

3

lua/ge/rep...er.bat

windows11-ltsc_2024-x64

3

lua/ge/req...ds.bat

windows10-2004-x64

3

lua/ge/req...ds.bat

windows11-ltsc_2024-x64

3

scripts/Re...pt.lua

windows10-2004-x64

3

scripts/Re...pt.lua

windows11-ltsc_2024-x64

3

ui/modModu...ck.png

windows10-2004-x64

1

ui/modModu...ck.png

windows11-ltsc_2024-x64

1

ui/modModu...on.png

windows10-2004-x64

1

ui/modModu...on.png

windows11-ltsc_2024-x64

1

ui/modModu...ck.png

windows10-2004-x64

1

ui/modModu...ck.png

windows11-ltsc_2024-x64

1

ui/modModu...on.png

windows10-2004-x64

1

ui/modModu...on.png

windows11-ltsc_2024-x64

1

ui/modModu...er.css

windows10-2004-x64

7

ui/modModu...er.css

windows11-ltsc_2024-x64

3

ui/modModu...r.html

windows10-2004-x64

3

ui/modModu...r.html

windows11-ltsc_2024-x64

3

ui/modModu...ger.js

windows10-2004-x64

3

ui/modModu...ger.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
rls_repo_mod_manager_1.0.1.zip
Size 1.8MB
Sample260808-xcen4sck4y
SHA256 d94ebeeea3eefad03576b52ed1c9658bc5787e61d75dc0183eafebf6f21a518c
MD5 12b4003235128f2bac945f3f35f19720
SHA1 762a68083a6fac3237aed54793fb5f3d81249663
SHA512 3d15584767443501ce9464d1655d95782d6b8d5e7c447d47f8ede43637287da7ff6fd5fea706a36fcd032ffc6bb56052565ec14df9de650082dde17f7bdbb46c
SSDEEP 49152:WRhnIGOFJ6ELNzEa7FnKE6wV4XlB07lIhYdw79sW+uivpgR5Fh6Pi:EIfR7lKE6wV4XEiIs9sW+uepgnFh6q
TLSH
T194953373D6240166E8A707FC844E67CD8EB293B5974C372A028CF19CEF9ED83536650A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution ransomware

Static task

static1

Behavioral task

behavioral1

Sample

rls_repo_mod_manager_1.0.1.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

30 seconds

Behavioral task

behavioral2

Sample

rls_repo_mod_manager_1.0.1.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

30 seconds

Behavioral task

behavioral3

Sample

lua/ge/repoManager.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral4

Sample

lua/ge/repoManager.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

30 seconds

Behavioral task

behavioral5

Sample

lua/ge/requiredMods.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral6

Sample

lua/ge/requiredMods.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

30 seconds

Behavioral task

behavioral7

Sample

scripts/RepoModManager/modScript.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

30 seconds

Behavioral task

behavioral8

Sample

scripts/RepoModManager/modScript.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

30 seconds

Behavioral task

behavioral9

Sample

ui/modModules/repoManager/icons/create-pack.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

30 seconds

Behavioral task

behavioral10

Sample

ui/modModules/repoManager/icons/create-pack.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

30 seconds

Behavioral task

behavioral11

Sample

ui/modModules/repoManager/icons/default-mod-icon.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

30 seconds

Behavioral task

behavioral12

Sample

ui/modModules/repoManager/icons/default-mod-icon.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

30 seconds

Behavioral task

behavioral13

Sample

ui/modModules/repoManager/icons/default-pack.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

30 seconds

Behavioral task

behavioral14

Sample

ui/modModules/repoManager/icons/default-pack.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

30 seconds

Behavioral task

behavioral15

Sample

ui/modModules/repoManager/icons/repoManagerIcon.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

30 seconds

Behavioral task

behavioral16

Sample

ui/modModules/repoManager/icons/repoManagerIcon.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

30 seconds

Behavioral task

behavioral17

Sample

ui/modModules/repoManager/repoManager.css

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

30 seconds

execution ransomware

Behavioral task

behavioral18

Sample

ui/modModules/repoManager/repoManager.css

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

30 seconds

execution ransomware

Behavioral task

behavioral19

Sample

ui/modModules/repoManager/repoManager.html

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

30 seconds

Behavioral task

behavioral20

Sample

ui/modModules/repoManager/repoManager.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

30 seconds

Behavioral task

behavioral21

Sample

ui/modModules/repoManager/repoManager.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral22

Sample

ui/modModules/repoManager/repoManager.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

30 seconds

Malware Config

Targets

- Target
  rls_repo_mod_manager_1.0.1.zip
- Size 1.8MB
- SHA256 d94ebeeea3eefad03576b52ed1c9658bc5787e61d75dc0183eafebf6f21a518c
- MD5 12b4003235128f2bac945f3f35f19720
- SHA1 762a68083a6fac3237aed54793fb5f3d81249663
- SHA512 3d15584767443501ce9464d1655d95782d6b8d5e7c447d47f8ede43637287da7ff6fd5fea706a36fcd032ffc6bb56052565ec14df9de650082dde17f7bdbb46c
- SSDEEP 49152:WRhnIGOFJ6ELNzEa7FnKE6wV4XlB07lIhYdw79sW+uivpgR5Fh6Pi:EIfR7lKE6wV4XEiIs9sW+uepgnFh6q
- TLSH
  T194953373D6240166E8A707FC844E67CD8EB293B5974C372A028CF19CEF9ED83536650A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  lua/ge/repoManager.lua
- Size 46KB
- SHA256 6d8c8f8d94ff90ebea4bc012051012a47c068e19331e97dc257b4ccc21818438
- MD5 b9449f20a3713ec4e3953cfaaf2181c4
- SHA1 cc589fca617449ec320b9e74b5e0b591f8278f20
- SHA512 01ed700ec99468956c9aec3130178485e90394fd06cf1287dd983f85791dc52a8b1501d712fac541a15d8ba8b75ffb1c02d3d81a4cbe3a09e672046e7cd8b20a
- SSDEEP 768:XGPswRHZpisjL2fKRiYJtfM6/jSTOPe63uHd6qhr50U9pVzEtBCnL0lE:2sDhGtE
- TLSH
  T14B23644F276F367469B683A7D94B6412F21D9083139B4475B9AC03587FB0A9CB1F0EE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  lua/ge/requiredMods.lua
- Size 47KB
- SHA256 1549ccbe4cf520b4b5bc8ece1657c2e3bc00d7c2d339b70d2de569a6cb567052
- MD5 c7357baa5eeea6cc9283f7d8eda7c28e
- SHA1 0012e5dfc049723fd17e4ad8d89e4fa5903dd472
- SHA512 5cfd87c7d0a07266271c9a220b1b1d8ac11811ba25c36884c8e15cd1a8b4ae221605f9d31c08acf3fdd0cfa111c5601b7013073d9a3182ab0289830d6650afac
- SSDEEP 768:yEkbec7g+fcTmD4BJxP9+eXsoYFHWbcg+tWcy6M8bai6QkaHebWM6dMy1R0xJ96h:59TYxySFD
- TLSH
  T15023424B6BAB3670A9F3D27ADC6B4101E22D00430657042579ED06942FB0BADE6F5FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  scripts/RepoModManager/modScript.lua
- Size 726B
- SHA256 be833796541c81bc8207ecd6978a53aeac75c40afdca20fe5ff2b55209bf325b
- MD5 be97ebc143bc830d68a21004cb0dd727
- SHA1 2e53b99025e81593b1a8372f502615a990017cb4
- SHA512 39ca91f7492206a04be991c2f614dd9b0f419e15b06788cca153b8c5cb9323dad0f5493470b16e49917c6a49a28e1068fdd79a7537fe96db2929a3f2d8f57f18
- TLSH
  T1FF014E43AAFF796472BEC5F7AD531154C225A053267924007B9C2E188F711C8B7B0C59
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ui/modModules/repoManager/icons/create-pack.png
- Size 682KB
- SHA256 6f74c34edd4cbe4badee7d7ba820efcceb30e62d244b16b1d88a3b35955641a5
- MD5 7c9ab19a5d3f5972010acfad8c4b5709
- SHA1 32dc585bcb70ba52421bc20c8c23a7a031fcd9d1
- SHA512 8024dd0d624b92d3000941dc5b193ea9bd52b24d3bc8ba3ca83ee095a8b391a3a89524361204ac940879755f54d5d9f4627e9487b7308bc8812351cfbe722b4c
- SSDEEP 12288:0nLTtHhbqAX9/WhW+IaKUWIhy6rF/PdubMGPyafBEf:I/jqAtW9Ic62BPvGti
- TLSH
  T16FE423A3A05B4AA1DF08114EB078136F4FBE20E0BED7DCE473A5B8D719595197E8212F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  ui/modModules/repoManager/icons/default-mod-icon.png
- Size 410KB
- SHA256 c1de4170a8ffbece2a30e02905374f14db4a203f201334b3bf6ceae93a2c2112
- MD5 556f69fe2411b7a21b531c819ede804d
- SHA1 8ed84288d638cb63b90dc650327606c4b38b699a
- SHA512 74649c480b37c03cdbe08680c1677ecdaec69cbaf3106037956ffe93db71ddd72878719f928613c5ad694b0bb12db13c44f550ce2ab97e07cd789f9b5cd2de24
- SSDEEP 12288:Wh4squ0qkJivwe2RuiGVBWO7srwLLx5yFmyl5/e/e1t:Wlqu0q1wFSV3vLLx5EmG5/wwt
- TLSH
  T173942381C7680770E1674B459603E28DF791BFBD3A3C3F2520D8B5A8B75EE56A60F604
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  ui/modModules/repoManager/icons/default-pack.png
- Size 442KB
- SHA256 9551c908bc8b6f9daf232ad47e7e0dbbe35f999f877f81c47567c4b48c6448a5
- MD5 81a6355fee61e5b4df26cfb3d491ed60
- SHA1 48d83334840370b08b3a8b7e5c05ccaca91abb18
- SHA512 c7f17ee2223fd7ae49bf52a4fb7dc1af976d33bd95abd012a260241da7660e5d9f0f680d215e269a5d2856cabda06656ae8d976b5842b3a4ca43e55eb64e9e14
- SSDEEP 12288:j9V908S+bSoI3TYnVV2tm7Le6Llc2jQL4:jz9TSwSo2TYnytm7LblD
- TLSH
  T1FBA4239C2728A140FAE516F7841E295E4313B6D385CC367A1768F4BCC7A79B083BD91D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  ui/modModules/repoManager/icons/repoManagerIcon.png
- Size 316KB
- SHA256 53b697aa68d1e2d3ff3770e9779a91f64e3c877ea14d73f9ad4e22ffe9cce03b
- MD5 0d2ffb9e784751fe06d6bc6ffa8e7594
- SHA1 d26d1751f43f280e6cdd3e584ca4b9f04f74d472
- SHA512 0393dfb4b8f5b88b489bad8e151457673f7c738fd57e0fcb47c97e9649ca77b37293ac69d4c202df70fe4f3c228c5211e0dd183bc22b70bcd925a743faf6439b
- SSDEEP 6144:BILzO929/YfCamyCgJFAdkEGlXJ8cYAuCowRTef8pG1a94i9Niw:yLik/Yqamyt7E8X5YtCVRTel1a94i73
- TLSH
  T12864238DB15BE4D298F791B28AF3E11D05A566BD8BD37C680F8017F07E7A1F0D62A108
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  ui/modModules/repoManager/repoManager.css
- Size 68KB
- SHA256 4af2f66c2c6f815fe3a04c28fb20b332c56ccf3976867bc13ec201b51eba0875
- MD5 38b8a0b59e957c7ac53cb9f5ff3ed576
- SHA1 75c85395bdb374cac6d6fb382342ea0bed2ed24d
- SHA512 849dcfb48bf33c0b8469e036147842d783a03def321c15abce6028bcca4122922f52fc6274973c8995902c338d3484d40cf0cfa8a0e3d7e2de1f826123c331b2
- SSDEEP 384:kq2dD7jjSGr+zQezVG18Tva2hl8VESqujzqrBZmqqDy:k9d7jVC37hUzjkBZR
- TLSH
  T16663649DA61551017737DAE4BBA38B7AA7948414CA0A43BD7FF1201DB3C81BC9632F9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  ui/modModules/repoManager/repoManager.html
- Size 48KB
- SHA256 b8e107072e6ea3d1ff36ea362b54019af1e6df1c260494c9020c1d05e9cf5d2f
- MD5 1e25f6279d5fc30436b93f58a413aaf3
- SHA1 b9020ccc24c76a94d402c630579bf49d96749d0b
- SHA512 4b55b015005a02cfe257229f4bcf1932ea1d464cdb265d6aab59ce37e803d59da37b190484d61faaf077bc8b9213c78a35eeeb189e87cec29fdc8ebdbd50c889
- SSDEEP 384:0xFLBKxlxmxjxUxCVMdT5CdvyK2sa3rvMIyeNpaL9UhkSI+hxZ0BRZmZlRfseKZk:0bY/gpuEofhNX2beKZ0qV6
- TLSH
  T1B4230DB450E0A83292B781E769725B97FEFA8547C54A564031FC2B8B6FF3C81EC07856
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  ui/modModules/repoManager/repoManager.js
- Size 81KB
- SHA256 f032cd63fe7b87075edd4bb2b4f74e910761bf02835ce53c79b22f94def374e7
- MD5 68cee87501c24f437b17ff2743547cb2
- SHA1 1aa629c4a88ea073c44198b0f75a427716a81e67
- SHA512 16c55a6665a06cf4cf2f880a9330d2ab18020419fbfb6abc81d747d40502f0a91ce98e41a4119c94483f8d04d2bb986a3edc1952ad2bbe5fb1f366645f2cd426
- SSDEEP 1536:iN1H7ca3fAcCXhZU2ZD75edwh/QKaCkJJW9cNNvO7lWu0uQ:iNV7ca3fAcCXhZU2ZD1eSpaCkJJWjE
- TLSH
  T1C883E7AC757B323584327BBF9A9B4009F77E3027304246057F9C0B982FB5494A5ADEB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

executionransomware

behavioral18

executionransomware

behavioral19

behavioral20

behavioral21

behavioral22

© 2018-2026

Terms | Privacy