51d99995a67df2723530d15ab9d4f1633eb5a744b28ce00bd16f3a1ad5e3841a | Triage™

Login
Reports

Overview

overview

7

Static

static

3

AOMEI_Back...03.rar

windows10-2004-x64

1

AOMEI_Back...03.rar

windows11-ltsc_2024-x64

1

!!!Readme_...!!.txt

windows10-2004-x64

1

!!!Readme_...!!.txt

windows11-ltsc_2024-x64

1

Activator_...v2.exe

windows10-2004-x64

7

Activator_...v2.exe

windows11-ltsc_2024-x64

7

EN-GUI.png

windows10-2004-x64

1

EN-GUI.png

windows11-ltsc_2024-x64

1

Join Telegram QR.png

windows10-2004-x64

1

Join Telegram QR.png

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
AOMEI_Backupper_v8-Activator_v2-oval2003.rar
Size 172KB
Sample260813-pr4b1syxft
SHA256 51d99995a67df2723530d15ab9d4f1633eb5a744b28ce00bd16f3a1ad5e3841a
MD5 101f038ddd9813dfc5576055b7545733
SHA1 726c53fbe8c8db839133042bfaea76e92ade23a0
SHA512 b5ab190fb4f392850dcf83e20a1c5ccc7d4363ce0fc9b704c9e09310a51971b63d7b2a51a7dd6e499c68e418a40c30823a9ebf35e4626d8cb0c3566d89888c7d
SSDEEP 3072:0g7OYILHZJwhbJmslKNC5p2CuGgFEWNkGmNPVVySaox63/NXpYq1:0rY7Nl0C6KT6KdVydoYPNXWs
TLSH
T1AC04127EC33D33B6B2FBCF8D99129613505896A0D89EE1E5272DB700CCE169ACC0195E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution link qr

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

AOMEI_Backupper_v8-Activator_v2-oval2003.rar

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

AOMEI_Backupper_v8-Activator_v2-oval2003.rar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

!!!Readme_first!!!!.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

!!!Readme_first!!!!.txt

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Activator_AOMEI_Backupper_v2.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

discovery execution

Behavioral task

behavioral6

Sample

Activator_AOMEI_Backupper_v2.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

discovery execution

Behavioral task

behavioral7

Sample

EN-GUI.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

EN-GUI.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Join Telegram QR.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

Join Telegram QR.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  AOMEI_Backupper_v8-Activator_v2-oval2003.rar
- Size 172KB
- SHA256 51d99995a67df2723530d15ab9d4f1633eb5a744b28ce00bd16f3a1ad5e3841a
- MD5 101f038ddd9813dfc5576055b7545733
- SHA1 726c53fbe8c8db839133042bfaea76e92ade23a0
- SHA512 b5ab190fb4f392850dcf83e20a1c5ccc7d4363ce0fc9b704c9e09310a51971b63d7b2a51a7dd6e499c68e418a40c30823a9ebf35e4626d8cb0c3566d89888c7d
- SSDEEP 3072:0g7OYILHZJwhbJmslKNC5p2CuGgFEWNkGmNPVVySaox63/NXpYq1:0rY7Nl0C6KT6KdVydoYPNXWs
- TLSH
  T1AC04127EC33D33B6B2FBCF8D99129613505896A0D89EE1E5272DB700CCE169ACC0195E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  !!!Readme_first!!!!.txt
- Size 2KB
- SHA256 585d745a92366bd99ee553ac5ded92daf3f6bc6d1f03f5fe3acc0eafd4ebb4cb
- MD5 38ec00eb82fef2fa997ad6318f735802
- SHA1 dc3530d25939d0a7b92c5607ff6aa59fd6878b6e
- SHA512 5dd3aca284867e516a04e2b36947ef562013cdb1fa82f8e5fb833124e575ce7bcc112e92d96f4527afabe1de3f03d3d97e299cb813202d5151d7622adf2257ff
- TLSH
  T12C41FA027EED1D027DE13E865A3DD0B10EAA26D050388FE62779344881DEF74AB97B52
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Activator_AOMEI_Backupper_v2.exe
- Size 225KB
- SHA256 2018276745591a2cfa364436a39280a6efb393b879da12db86e302be1bd75d33
- MD5 10efc4cbc878e81e60ce25f9aa32510e
- SHA1 1b8ab9483860db335ca71a69ba211abf34d23512
- SHA512 16ecf24963d11f0ff41df8d4b70f7bbbde8231bd4551418936f6bd9a241c9821144b61ff7281ffa67d4fe647921fab476171c643a07e1cd428fce0252373b38e
- SSDEEP 6144:Q5VP9Ge3+hoAvdeJBbLncZ8JA5mNOBS7yvxeu6L:Q5393whFOBbrJA5me/xeTL
- TLSH
  T12A34BE613BE144F6C783BA308580B36535EAEA7C0B2601C7479027AA7D355CB963DDEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral5 behavioral6
- Target
  EN-GUI.png
- Size 9KB
- SHA256 b77ac4a22d7960532e756ded17cc222c4728eaa3fdd132c2fdce2f8f3ebd6a3f
- MD5 e3ffaad69d63c28cb329d39b86adc1b7
- SHA1 61c89323f8ee140ca9300e99827805c23c3aec70
- SHA512 36d706a5b145b1a19e4414c8b102789e5711e019727e5e7be5f7e2b76fc84973ac72a47d8024c8e23009f7e4f279d0f7eccf1f9d75a7b9e382ed3cd406a73370
- SSDEEP 192:YjSM/3pbike+o2kSWJWAxCw4iX1mLojcKBTDnF9q0ImPVgADy7x:YjX/3pekVcRxCNiXgyDu0I4gMwx
- TLSH
  T18212AFBA703D8480EB0416AA089CEB4BC694B58AE3015D9B18BF59679F8F3DF0D5B901
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Join Telegram QR.png
- Size 12KB
- SHA256 6410f1b81043eafddad750345986726c2ac6313d38aa7290ccfeeab93992c87f
- MD5 484407264e37be1ee4266bad02a7474c
- SHA1 da9b0076594a74ab9e1fdd602f6eee06f5b3202d
- SHA512 3b5e84a53359f777e66259acfe188a1c68b63f667e45f31bcbfc2af70ebbf715bba811090d647c92466aab407c2fddcb03704c776ca150bdc18675d59ef4e5ec
- SSDEEP 192:mSoD9woyOCALC2ZdgxP9ztSMaNc9tRIcXgs/x/dLqT8iKvhD+6XnhfU2QZLN:JityTaC0Kl+iKW1RdeT8iKpainMN
- TLSH
  T11642C1E1952D80AB4FE8950F90094CE031AF7FB4E18B3D7817C4277B6A64384567EC64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

discoveryexecution

behavioral6

discoveryexecution

behavioral7

behavioral8

behavioral9

behavioral10

© 2018-2026

Terms | Privacy