9f57bf75e9c328454a06a75c5a955ea88bf7b61ea8e6809f028d28eb157042d1 | Triage™

Login
Reports

Overview

overview

6

Static

static

3

Client/Kni...ne.exe

windows10-2004-x64

6

Client/Kni...ne.exe

windows11-ltsc_2024-x64

6

Client/Snd...st.ps1

windows10-2004-x64

3

Client/Snd...st.ps1

windows11-ltsc_2024-x64

3

Client/Snd...32.dll

windows10-2004-x64

3

Client/Snd...32.dll

windows11-ltsc_2024-x64

3

Client/Snd...3d.dll

windows10-2004-x64

3

Client/Snd...3d.dll

windows11-ltsc_2024-x64

3

Client/Snd...3d.dll

windows10-2004-x64

3

Client/Snd...3d.dll

windows11-ltsc_2024-x64

3

Client/Snd...sp.dll

windows10-2004-x64

3

Client/Snd...sp.dll

windows11-ltsc_2024-x64

3

Client/Snd...x7.dll

windows10-2004-x64

3

Client/Snd...x7.dll

windows11-ltsc_2024-x64

3

Client/Snd...ax.dll

windows10-2004-x64

3

Client/Snd...ax.dll

windows11-ltsc_2024-x64

3

Client/Snd...p3.dll

windows10-2004-x64

3

Client/Snd...p3.dll

windows11-ltsc_2024-x64

3

Client/Snd...sx.dll

windows10-2004-x64

3

Client/Snd...sx.dll

windows11-ltsc_2024-x64

3

Client/Snd...ft.dll

windows10-2004-x64

3

Client/Snd...ft.dll

windows11-ltsc_2024-x64

3

Client/Snd...ce.dll

windows10-2004-x64

3

Client/Snd...ce.dll

windows11-ltsc_2024-x64

3

Client/mss32.dll

windows10-2004-x64

3

Client/mss32.dll

windows11-ltsc_2024-x64

3

Resubmissions

08/08/2026, 21:51

260808-1qfecayzgy6

08/08/2026, 20:27

260808-y8xp8sysdw6

Sharing

Copy URL Twitter E-mail

General

Target
Client.rar
Size 300.1MB
Sample260808-y8xp8sysdw
SHA256 9f57bf75e9c328454a06a75c5a955ea88bf7b61ea8e6809f028d28eb157042d1
MD5 e49e3d2862a9bc577df93e9022bfdb55
SHA1 24f2f76c1b4c34dade8cbf7a3449f7a5a10d05c1
SHA512 4d8065444b39f98102ac5c85a64ef85e17b4d411605ae3cc1a6670fb65fd29325449f2a4496bffac36bbb45a5bf2e55ee03c1ebf25c17899a0054cd01bf1c334
SSDEEP 6291456:8gTxbk8I5yMUsAEMjQBg/rRXhVoR1vux2thUx35EE7GpBX:8g9bk8IEMUNE0z27fsxJr7iX
TLSH
T11DE8331537DDBEFA9C28E7E0EC44CA549889A54CC2E7D6406F3858EF246438B072D66F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Client/KnightOnLine.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

Client/KnightOnLine.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

Client/Snd/captain_abcast.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

Client/Snd/captain_abcast.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

Client/Snd/redist/mss32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Client/Snd/redist/mss32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Client/Snd/redist/mssa3d.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

Client/Snd/redist/mssa3d.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

Client/Snd/redist/mssds3d.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

Client/Snd/redist/mssds3d.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

Client/Snd/redist/mssdsp.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

Client/Snd/redist/mssdsp.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

Client/Snd/redist/mssdx7.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

Client/Snd/redist/mssdx7.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral15

Sample

Client/Snd/redist/msseax.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

Client/Snd/redist/msseax.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

Client/Snd/redist/mssmp3.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

Client/Snd/redist/mssmp3.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

Client/Snd/redist/mssrsx.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

Client/Snd/redist/mssrsx.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

Client/Snd/redist/msssoft.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

Client/Snd/redist/msssoft.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

Client/Snd/redist/mssvoice.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

Client/Snd/redist/mssvoice.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

Client/mss32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

Client/mss32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  Client/KnightOnLine.exe
- Size 2.9MB
- SHA256 828ab0db5679da4705d3822e5f53870f70504a73756c869a8f734300e643a5e5
- MD5 cb27f35cd11fcf25fe0a08eb09d244f9
- SHA1 3093db9644b6bf8376cabb44f8e7fe00cda6e372
- SHA512 c3b07049d991e1b4dc02de13c32e2c3273f0eaf2d4190ff9eb0ae3d591fbac7c0cabb126380b08542c2f9f6dd2e2bb8778ef85eb5a53a007a81f3e14c923cd6b
- SSDEEP 49152:hCx8P23rI7vulDl4dhuxc8UJ1UTBreKhs8F9iA7x4XWu1I2ftS6CqyaiK:hCx13r+ulh4Duxc8UJ1UTBreus8riA7U
- TLSH
  T120E56C12F6E600F5DB47257404ABBB3A5A314BE50B180BC3E77DFD5A9532AD2A03712B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral1 behavioral2
- Target
  Client/Snd/captain_abcast.wav
- Size 110KB
- SHA256 d0fac5b494fc326fedd1205d40ce194063da24cbdaa73cd774453363b52c2a5f
- MD5 79e015c8700d4f439b2b49bc5c034179
- SHA1 23de543cb30bb915f4905d17ea3baf68f2e7c09e
- SHA512 e50edcf107ae932649ce282e0dc0083a142b4778ce49e16f37fcb1551946ca00ae7ce3cbb013448b4835f02c79c94d8e0afbb78db14e074ead80f7e02b9b86ac
- SSDEEP 3072:nJY7zxLvQGtjzAV4S5BEmZCZ5zIKKLqL8uwVw+Hx8u3k:nJwzxLvQGxUV4SYmwgHwhw+4a
- TLSH
  T150B302A3A4D3980C3D1FC7F37251ECD410E225ADE46D4BAE169BEAE1B410740AB3F55A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Client/Snd/redist/mss32.dll
- Size 362KB
- SHA256 7855b8fbae917cb8449f2d4361ab61b5ecec4df0a11130d797cb0aa99b4260ea
- MD5 299be9656aec687795e429a7000facc9
- SHA1 1b4c0c4faddcdae5b7239cc861a9389d55f38a4e
- SHA512 a6c3a366760baaa321bf69ed4646f012cfbfb39ac49e2307cd06baa1f10fa1b7500e5441e8f03af4e47daa5aa479637dce7c3fa7e0adfbda9287acaa1adaada6
- SSDEEP 6144:jSaFOjOkDR+SHiQd0e0xig4p+ZFAQHJ4aHrmtcNAOKTubfwZ:jSA41R+SCQd0zEg4pMFXqaHrmtcNHfw
- TLSH
  T124746A4175D045F2CCCA3E32A56B333A283BF729465A8627A785D8C0DD53E40FB8A677
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Client/Snd/redist/mssa3d.m3d
- Size 96KB
- SHA256 6b5d0e461f119a9e95e10de24aada3306407acf1c2e1841b26c4c1a5f950224c
- MD5 5dfda618d9dc11ac3a36264100b40e74
- SHA1 f1161745b3460c7faa321c52805b0df541c8f553
- SHA512 bc3657fcd76206defcda297a3fff5ec14dd1dd86f3181f83c20800ad4e431249aad3f74012918915007c36fcdd5da0dee3025776d26a344fa1ab344d8e1ca419
- SSDEEP 1536:Y5nj8G4DXVZJOOsz9AJ1+2U5G92/vtmgMbFuYRZDHcvlJf:w8G4DF7OOQgSAg0FuWHcNJ
- TLSH
  T1E5A36C2137D3C1F5DD6F0574142D2BBEAA3A190540798CBB9FE2EEAD4F15E40A13E292
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Client/Snd/redist/mssds3d.m3d
- Size 79KB
- SHA256 3443fc45bafc64331dff5c212bfe8e67c1b1d6ed5b7d547e2dbff7aeab8987d4
- MD5 3756b51b8ba9672e9a623287bbe36aec
- SHA1 7630f22a282845c16894b3454471d727b0b573eb
- SHA512 9ad6b69c39a05f3abe51dabdb5cd6f3f0d76cb8e2e3d936ad3c600a44ce0d275853043bd990eec383e4dc71fa9daf887d37680543538e5438587367efb74961d
- SSDEEP 1536:N95InR3bDYt9lBIG2If25vtmgMbFuG8qcv:j5c3bs9efAg0Fugc
- TLSH
  T108837D373FE3C0F2EDBA1174045E3B3BA536580941B985BB8FF4DB8A4D66680953A253
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Client/Snd/redist/mssdsp.flt
- Size 112KB
- SHA256 9e526ca5a85503774c5cb272984207884614bd718e66d894c2bfa43817a65b4f
- MD5 b88bf9c506cd612fc37b47ad2e1c84b6
- SHA1 3eafcf7179bd5940f841f88181e9dc60b1d70640
- SHA512 80634a2e198bcb37dad763e48280707012d293060c2485eb5b5c3f09ac29e3fe76aa232245f1a6b1ceb84f476c30436419ed258a8832150419d2b3a8d8a9f0ef
- SSDEEP 1536:eBjMHORfNcrNHTNfZO7rDkCSiBP30/7/r0sVD52kvtmgMbFupFvcf1RHoRX:eiOnwHFmZWD/1rAg0FuPcf1RIR
- TLSH
  T154B35C60F2E380B5F5A704780514BF3B51309E098039CA37DFF9EFA75B62750A16A66B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Client/Snd/redist/mssdx7.m3d
- Size 88KB
- SHA256 15c64ec72a82dee96cefba33d5b7f0d658c6e008d0bf43cdeeac928990c32d51
- MD5 337044c2c84b7929f96176e0910f9245
- SHA1 27effdfffe0742805dd8bf597b2ef947ffeee108
- SHA512 878aa07688a8474164758b1d619031050eb8a81ca6e53b427492cec65bfa406eb2c7f0e17c678fbe13ba023db49c43aa25daa40e3da6b420610b42c419a69510
- SSDEEP 1536:rpiTiyfuYryPQGi/d+a1AlfpMp2sOKCNyvtmgMbFu58qcv/G:rpiDl/dHQpMAsAg0FuPc
- TLSH
  T1D5935A3277E380F6CC7A21B8149D7B7A79326E090039D5BBDFB0DB9E0D196A0E46E151
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Client/Snd/redist/msseax.m3d
- Size 113KB
- SHA256 37faa064ea1e5ae4909ab97f96a43f1d8fc5e40380c0d30ee78e61560daed264
- MD5 b24028b6511fa3cb96bcbf1ef2838696
- SHA1 b007a44ab65b52581ad4b3764b04b01150e6d3ce
- SHA512 3771335f15a8ad862940342543fd1d912246fae8bf10cde0ca0174248a98175ec9fff6c7c7a3b60e6c7891287b7bf3485a32c7680d081544e8c2db198485ab48
- SSDEEP 1536:h9MwFTgw/AfFmQVLMY+aErTASmWf6B0lH200JgRU3RP2k9OOUvtmgMbFulZbcvSk:h9Mw1nMxmTxNf6MWsRU3RLQAg0Fu/c2
- TLSH
  T138B37E222F92C0F1DF6A1538245E3B7AA9368E18023B51FBDFB2DF5A5924710793F518
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Client/Snd/redist/mssmp3.asi
- Size 134KB
- SHA256 93b4322c8266ed4c05e5abbfcdba81537e557072ad6c752d899178952bcf5c29
- MD5 43bfc9015cf90c161567fb0c0acaf714
- SHA1 3e8d08c23574215c59e52aa4ac1e28e11524a89f
- SHA512 35c56e23e15754a263aac6dfa3b9906ed468be717ed3532db330fd2e83ba9e3da7fb30b143fdf656dcb890a3cdeeb79a536d05191f1f89138f458277b4e729d4
- SSDEEP 3072:t/12HDpGFpbUIBAgAUAiHDfrAg0Fu2c+fh4v:td2jpGFpYjjibrAOUfh4v
- TLSH
  T170D337B3FE824071CCAFC63550CDBE0E696A35C781D288A797FD059A8E60FC88D16675
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  Client/Snd/redist/mssrsx.m3d
- Size 361KB
- SHA256 43da4d7c40db81a7bc19214d4bddf38910fe5ded8722a6b0bcf53280b1f43d8c
- MD5 75600ef1750ae9a49540c1f6c9a89e29
- SHA1 9b5ae0a8fdcdb463e936867a775a312a2954ef15
- SHA512 cf58176faa0429a40dc641609eeb297665752c226cf7d1dd58120365964727ba827be9771698e2137df555c99c6ea72b3d4a190ac0082afe383aec20f309a6b1
- SSDEEP 6144:nWc4QZeiYnRXSGR3PUoAYyYLgS/z9JjXX1v0Apc/FB2AOq/yGbK:n/HeznMo3oYzX1vBpcL2g5K
- TLSH
  T13C74D043F1D340F4CC0235765C1A3337AA327B098D2AD9636B64DFB56D236A5A63E31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  Client/Snd/redist/msssoft.m3d
- Size 76KB
- SHA256 62233bebccb6aeb97370a8499c577e2982f46924e3a1bc55c53fa1f8a2404252
- MD5 3e9029826d8cb962874584ab795a9d31
- SHA1 93c97838aa3dccf8ad33341f94d9d1303166cee7
- SHA512 949ce71af730262719ba6c442df07e3074ee512a2c55560ce5d09de9d5de179c08fba485317a508ea887b7ecc9278b1b1fd4a1cf728cfb7a2ff3f602660406c2
- SSDEEP 1536:Ks4jt/rC6vB3ZNdYZeBX+bzzc2EmGaKvtmgMbFuNQcvg7:GpC6vjNdKKObHUAg0FuWc
- TLSH
  T147739FF276E3C3B6CCBA017224997BBA61356506007CC57B4FF0D5DB9E60B50A86B392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  Client/Snd/redist/mssvoice.asi
- Size 208KB
- SHA256 bcafbc0806f63c9cc7f07ca9690e993f2347e67ead1da0852df7268ef8cab198
- MD5 272eaa2b1eb6d5f5c4c69bd7ec11ff8a
- SHA1 49130b79d46c245750afd947f50ce15ea01bd1b8
- SHA512 cafca8fae0b0a189d369be2a3432208e54d157f6d5a1347b5bd7a6691c9b1ffffca337a90a7c79b2f40b854bc562a9a02fa190be6d0391b2ecb524c5a22baa90
- SSDEEP 6144:YG5P8Y5LcRD3whh7pdxLgSs0cI6atE/aAO:tcRD6K0cI6atma
- TLSH
  T16224AE02F352E17AD4F301F601AB5B7E96786A21164001FBEFE55DF39F682E1B52212B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  Client/mss32.dll
- Size 362KB
- SHA256 7855b8fbae917cb8449f2d4361ab61b5ecec4df0a11130d797cb0aa99b4260ea
- MD5 299be9656aec687795e429a7000facc9
- SHA1 1b4c0c4faddcdae5b7239cc861a9389d55f38a4e
- SHA512 a6c3a366760baaa321bf69ed4646f012cfbfb39ac49e2307cd06baa1f10fa1b7500e5441e8f03af4e47daa5aa479637dce7c3fa7e0adfbda9287acaa1adaada6
- SSDEEP 6144:jSaFOjOkDR+SHiQd0e0xig4p+ZFAQHJ4aHrmtcNAOKTubfwZ:jSA41R+SCQd0zEg4pMFXqaHrmtcNHfw
- TLSH
  T124746A4175D045F2CCCA3E32A56B333A283BF729465A8627A785D8C0DD53E40FB8A677
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy