860b8c81fea1e8cbb182a7de35aefadba36dadf44ef4eec55190ea1453839f1d | Triage™

Login
Reports

Overview

overview

3

Static

static

1

Ransom/Ran...ypt.py

windows10-2004-x64

3

Ransom/Ran...ypt.py

windows11-ltsc_2024-x64

3

Ransom/Ran...ypt.py

windows10-2004-x64

3

Ransom/Ran...ypt.py

windows11-ltsc_2024-x64

3

Ransom/Ran...ain.py

windows10-2004-x64

3

Ransom/Ran...ain.py

windows11-ltsc_2024-x64

3

Ransom/Ran...ey.pem

windows10-2004-x64

3

Ransom/Ran...ey.pem

windows11-ltsc_2024-x64

3

Ransom/Ran...ey.pem

windows10-2004-x64

3

Ransom/Ran...ey.pem

windows11-ltsc_2024-x64

3

Ransom/Ran...per.py

windows10-2004-x64

3

Ransom/Ran...per.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Ransomware.zip
Size 8KB
Sample260811-nk3apsysey
SHA256 860b8c81fea1e8cbb182a7de35aefadba36dadf44ef4eec55190ea1453839f1d
MD5 290cc5b57646eaa66fcd95688957a7a6
SHA1 f602b92fb7ea32f1eaf542cc2d2c1bb0066aeed2
SHA512 73a59dbc2de8775602d7284da2fd06722c9f26349c6014ce9bba0c87392bedf38abbe35d2af3d6aa46fdc0de5932c75f8881e3a59c93560f6c9e355d4bd40aaf
SSDEEP 192:hyj8lTaSbhmNLQS5LscKMqyrXf6Ce0jAkLxzHRn3ZfR5n8L1fBwdQ+OHeB:88lTxbMNLQSODy76ClVHx3ZfRaLHwS+L
TLSH
T126126D65F460783FEDCDB4307B46570BC482BE45C8202B422EC8CA42705AE7FB5E5686
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

Ransom/Ransom/ransomware/decrypt.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Ransom/Ransom/ransomware/decrypt.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

Ransom/Ransom/ransomware/encrypt.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

Ransom/Ransom/ransomware/encrypt.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

Ransom/Ransom/ransomware/main.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

Ransom/Ransom/ransomware/main.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Ransom/Ransom/ransomware/private_key.pem

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Ransom/Ransom/ransomware/private_key.pem

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Ransom/Ransom/ransomware/public_key.pem

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

Ransom/Ransom/ransomware/public_key.pem

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

Ransom/Ransom/ransomware/wallpaper.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Ransom/Ransom/ransomware/wallpaper.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  Ransom/Ransom/ransomware/decrypt.py
- Size 1KB
- SHA256 140a49299c7fa0d19294f4bd26d300bd7dcb83b09435001e757fd8f79637f179
- MD5 95e78286837e04e0f5a78f47e27c3a90
- SHA1 bb9d0867ef08bd95ba221d74d890135f0f576533
- SHA512 fe1451c101b6401a990c90d9ce75c228e8804aa817d5d11f8c8e48e55d34b3be40901930d5060364c078b6ea21f637f822a6e28e4f35244b352de168f9150f08
- TLSH
  T1B941D0459C5E444042F3EBC9DF3BC580EB10621B6B202616FBECAD41DF794A882959BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Ransom/Ransom/ransomware/encrypt.py
- Size 2KB
- SHA256 aaa5a8170189648c49e06ffb7893dbd4c6a5ca29657c466909d45bc1be05b514
- MD5 bd4750f045cf13c3b4ff4766fb6442b7
- SHA1 66e0f3d5cbc693acd24fa0e8c44382ffce3195b8
- SHA512 d638febc2c3aea82b7214a2af44be1964e1be3c459e269202868b1b577c801f683a219f509503806c770ae9929924e9b1330402955507abc8a0a713467d3eaba
- TLSH
  T18151CD80ADBA089043F2E6DC8F22C1C1D711A62BAF305B56BBBC5940DF798D563949BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Ransom/Ransom/ransomware/main.py
- Size 11KB
- SHA256 ebdcbf985d400b95998e29128c5226a47f6029cc1e657219be236028f0285e6b
- MD5 bfc4aad98e6567fe07b884883b4a98cb
- SHA1 fabaede00e0b287d6ed5cb800afccea38761656f
- SHA512 010112d6065af07594acb604e971965726ef4181f497aecd4e2e13f4ded566db95ccdad395ab1b40cc3ae0bd5d215be70003762bf927bdee7bb8590194217f73
- SSDEEP 192:47FZ/SdCsZo1bA623SYvKtm7o02JBXU7rQCX8yWL086dIQ41on5KPG:gFZ6dCsZo66Wv2JJU7rQCX8yWH6dIR4Z
- TLSH
  T17F32941B8D0B04AAF670EF9DA621034EE309A30B3D62AB5BB97DA5542F7811151B1BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Ransom/Ransom/ransomware/private_key.pem
- Size 1KB
- SHA256 194a463e4071f33bb85dbfba373155b650f6d58209fce17a4fdc1edb3683bcde
- MD5 c8577aa05154d1665bb423236ff4669c
- SHA1 565df0b73b64cdcbe94ad06de49442efc2564b2b
- SHA512 e597bf2a6188261beba38ef094ea271969648f44975eee024561f8b0b301fd9202e1c33422a944ce64217673ae7c5d6497a0638041d53753ff2ac4924ed652a7
- TLSH
  T19F31D651C94A39925BE58D7809632F1E672BD319209ACCC019600DD3FBF690FB6BED68
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Ransom/Ransom/ransomware/public_key.pem
- Size 451B
- SHA256 824f2be4e52ed6a58bc7d073663032836b7d0be4bb317b5e7ef875190c53807e
- MD5 872e24f377f889444803c4f43cf695ad
- SHA1 1da80f1bca1fe76dc620bdd82c7840f5bfa707fa
- SHA512 a5b3e9f11f9881c310b8502906074b56b58845183730c2aa2484f150290b15e76a545a9a899fee8b2e43b67d606d9dc05519d0f23764a07671d992a6a7e98fdf
- TLSH
  T1A7F0234F8F451EE45AE0E55C0C122889C779B2EF42E0B444854C5C8768D2E1AF90DC42
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Ransom/Ransom/ransomware/wallpaper.py
- Size 436B
- SHA256 a176b43e32402ce2be5df959c9d7ef867647e60dcaeaefbaa690c4e70ddf48aa
- MD5 4faec24662f72428d6201623abd023cf
- SHA1 e80cfb9560b8040b02d8cec3079b8b9e6695f1dc
- SHA512 5d097bb993480c06d04b7614701c6116f9b963342c8d347b9a5ea62866c263d049cc191ff234f3c3c269f9812929be284cc0dc8b8d5c84cf7502f6b923089244
- TLSH
  T14BE0DC57C082D10B72D04630A7063EA89E2904697C739F04799132B4A3185B4023E229
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

© 2018-2026

Terms | Privacy