bc6f7ad6453efb0f0f0680f3b813050a46ae0a7865f36899f047a7ed4fc91df7 | Triage™

Login
Reports

Overview

overview

7

Static

static

1

Déesse UI v1.3.9.zip

windows10-2004-x64

1

Déesse UI v1.3.9.zip

windows11-ltsc_2024-x64

1

Changelog.txt

windows10-2004-x64

1

Changelog.txt

windows11-ltsc_2024-x64

1

Credits.txt

windows10-2004-x64

1

Credits.txt

windows11-ltsc_2024-x64

1

Nazuna_Hiwatashi.jpg

windows10-2004-x64

1

Nazuna_Hiwatashi.jpg

windows11-ltsc_2024-x64

1

manifest.json

windows10-2004-x64

3

manifest.json

windows11-ltsc_2024-x64

3

materials/ui.material

windows10-2004-x64

3

materials/ui.material

windows11-ltsc_2024-x64

3

pack_banner.jpg

windows10-2004-x64

1

pack_banner.jpg

windows11-ltsc_2024-x64

1

pack_icon.jpg

windows10-2004-x64

1

pack_icon.jpg

windows11-ltsc_2024-x64

1

sounds/ran...se.ogg

windows10-2004-x64

7

sounds/ran...se.ogg

windows11-ltsc_2024-x64

1

sounds/sou...s.json

windows10-2004-x64

3

sounds/sou...s.json

windows11-ltsc_2024-x64

3

subpacks/f...s.json

windows10-2004-x64

3

subpacks/f...s.json

windows11-ltsc_2024-x64

3

subpacks/p...s.json

windows10-2004-x64

3

subpacks/p...s.json

windows11-ltsc_2024-x64

3

texts/en_US.lang

windows10-2004-x64

3

texts/en_US.lang

windows11-ltsc_2024-x64

3

texts/es_ES.lang

windows10-2004-x64

3

texts/es_ES.lang

windows11-ltsc_2024-x64

3

texts/id_ID.lang

windows10-2004-x64

3

texts/id_ID.lang

windows11-ltsc_2024-x64

3

texts/ko_KR.lang

windows10-2004-x64

3

texts/ko_KR.lang

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Déesse UI v1.3.9.mcpack
Size 2.4MB
Sample260815-b9vwpsdc48
SHA256 bc6f7ad6453efb0f0f0680f3b813050a46ae0a7865f36899f047a7ed4fc91df7
MD5 e2a98f6bf80e2f4f6edc771a1373a85d
SHA1 aa2fbb43af42ef3e86a15ec7f50bf4f5b02d2813
SHA512 4740e2d10a03445bcef2cd220c1fbcfe3640fb6868748778a58fe1ca2a1fa86b7607eabcdd8706ef34f66379b41498babfcc815ab9560ed3f7068b82cfebe248
SSDEEP 49152:8yOCw01BVzY0gdeLb6++0lGutWUnN3pFVQpUtctYJgGzdmtQQrh:vbdZOeh5AoWUnHwRt9GzdmW+h
TLSH
T1A8C512786AFB84A8FDEF9238770141F3A116C79D9819E397483E21C457DC5B89AC31CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution ransomware

Static task

static1

Behavioral task

behavioral1

Sample

Déesse UI v1.3.9.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Déesse UI v1.3.9.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Changelog.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Changelog.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Credits.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Credits.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Nazuna_Hiwatashi.jpg

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

Nazuna_Hiwatashi.jpg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

manifest.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

manifest.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

materials/ui.material

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

materials/ui.material

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

pack_banner.jpg

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

pack_banner.jpg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

pack_icon.jpg

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

pack_icon.jpg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

sounds/random/release.ogg

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral18

Sample

sounds/random/release.ogg

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

sounds/sound_definitions.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

sounds/sound_definitions.json

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

subpacks/full_feature/ui/déesse_ui/_defs.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

subpacks/full_feature/ui/déesse_ui/_defs.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

subpacks/performance/ui/déesse_ui/_defs.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

subpacks/performance/ui/déesse_ui/_defs.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

texts/en_US.lang

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

texts/en_US.lang

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

texts/es_ES.lang

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

texts/es_ES.lang

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

texts/id_ID.lang

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

texts/id_ID.lang

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

texts/ko_KR.lang

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

texts/ko_KR.lang

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  Déesse UI v1.3.9.mcpack
- Size 2.4MB
- SHA256 bc6f7ad6453efb0f0f0680f3b813050a46ae0a7865f36899f047a7ed4fc91df7
- MD5 e2a98f6bf80e2f4f6edc771a1373a85d
- SHA1 aa2fbb43af42ef3e86a15ec7f50bf4f5b02d2813
- SHA512 4740e2d10a03445bcef2cd220c1fbcfe3640fb6868748778a58fe1ca2a1fa86b7607eabcdd8706ef34f66379b41498babfcc815ab9560ed3f7068b82cfebe248
- SSDEEP 49152:8yOCw01BVzY0gdeLb6++0lGutWUnN3pFVQpUtctYJgGzdmtQQrh:vbdZOeh5AoWUnHwRt9GzdmW+h
- TLSH
  T1A8C512786AFB84A8FDEF9238770141F3A116C79D9819E397483E21C457DC5B89AC31CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Changelog.txt
- Size 25KB
- SHA256 62df74e9c37e7239d77ae1f2afda35dacbc9a399373e36936a22e72a6c02824f
- MD5 4d05ea6f9fb6fdeb4967e7aa77b90496
- SHA1 ccee91a011a24cffa6e1f3adb6b2e94d2bd32d7b
- SHA512 fb5280e67ba1503dfd7f65c38d30ce35ea816fd4ebb1af907b9a1cfa0a32aeb8f04d33e68ad6f9ebe280c5fee40910de1fd1d9ee8ce418f1f1c079f77311b2e8
- SSDEEP 384:oJAJ2Zs4VvOGtT2RRXKsxStuLQaOQCA0la8b:/J2ZhdkHAtuLQ9A0la8b
- TLSH
  T1ECC232E79117327B42D2105793967032BF7801FDD799663720ACC0AC328DA7EA2BF5A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  Credits.txt
- Size 526B
- SHA256 c5a34c6bac2bc2f8d4a361176918c63aa96b56bbcfaca47931360c59af2bdf62
- MD5 ad192093ab485e8cceea3e94faf1a149
- SHA1 032ad27c7351b49f9f51b2acb388a6c10d70c442
- SHA512 1a6ec14f7b9226414a0f052cd921264eb5d5c7185c1b6ccfd268768f6683423400233eb1503da38576da2ee3ed6e199414859fc1154405cfd33547da3fb2f7ba
- TLSH
  T16FF0C0F7BE0102099B3BC1E32092320DE773EA79DDC1E5A4DCC40080B3DE5B58014634
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral5 behavioral6
- Target
  Nazuna_Hiwatashi.png
- Size 34KB
- SHA256 36106f5754847782c4243eae3fcaaf387cc747239ac894ff924454cad6ae8e75
- MD5 816fe2e429f64a0de9433d895566a4a9
- SHA1 234311740f46908ca3a9b0a358acd2af776116d2
- SHA512 d87c4ef019cc685b79d3e5f266eabc5119f1768220124695f58bda8315f7b0b2af78a0892ea734e951e4411068e37127fffc8b292fb2361f9fd817115ac6b4f7
- SSDEEP 768:P1o6MYLZHTDcZqACd3fL4XmSumHlmGUsRcH68Hej:26ZdHaHlEGUsRc1ej
- TLSH
  T15DF2F137BB7B719EE354E9BA077136A7617D161201D80E4D71AE8B40E329A84FF501CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  manifest.json
- Size 1KB
- SHA256 97f722c32f59e79692360d19c148b7deead8fabb1df9eeecfbf3fae78c8de949
- MD5 62d94cb15ac25193a2d5aa2e609a49f4
- SHA1 2c2ba792d334e4df6262831a060eb5a7407ca087
- SHA512 f4026d7fc38d27b2262815ddda8ef87231589e70c05b49e9b8a130d63fb8a99efc6c6ed59eef8dd2671fb7820e2144fb03a09fd496367a6b6a395ae8a85a4add
- TLSH
  T11C117B1AD920DC232E9E076824E74903A7B4028749547D8C7B5C180E1F9E5FE15B63CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  materials/ui.material
- Size 110B
- SHA256 b7083dea61c3a539d62a7d262b59f916d803651e8667fc3a819d4f4771875d29
- MD5 4854a18d09a30cf2b848ba17350b5c45
- SHA1 e5bae2fb0c01db0e4946bbabe139a97c4244ca40
- SHA512 a6a9629c0f6071b75e8ff51d5061ae0398eab8b8040fede95644860442b8368b6bf31c9f4f8346ce5eba1c6ff30de940b0a12f035fc6f500fedf65a1bebfddbc
- TLSH
  T13FB01252027A398F24DA8AF988F45C5215361B0F00851487C481B04C43EA28CF10B70C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  pack_banner.png
- Size 63KB
- SHA256 b259b3713cedce3b65c6d3e565395072e6bbc9334805e9bfe369633d38836081
- MD5 9b72f137bf828bf56c3f124af5a3f61d
- SHA1 d9abf85829007db612a124395b3cc9f6214ea456
- SHA512 a5d24f0832a20a0eddd1950a7362af4e65e8defbb720574ca6b7a2c2bac3aa101af45a9ba89574b45e310f0ddcebbc56c2c66cfa07d5bc62266b7b2ddfe7f7f2
- SSDEEP 1536:xAXBsnNsmEvO92DGPyi1aW3ETtbxfM0iwblYrYt:CXBO92OuKotbx9bl6Yt
- TLSH
  T1BF53021F6C3A80A7E4C3217064195B8052063D7D4E3F6BD8C6C5C468EE2FA55CB96BDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  pack_icon.png
- Size 39KB
- SHA256 57cf0a4162081fd1bfebd057d43f41dca829738aba45356cb2c5b0fd4c7cf3da
- MD5 a30b8f804a31489655ecdad5d5b69b84
- SHA1 08b997936c6e2c572e178fd9ff0df2636b8f29cd
- SHA512 617492172bedef050c013d773706d714af42f160126f3a26368337fe8d1a4800c290bea23d599e271f37f259c8c791799dfa07ee5a396ade528cc19903db87f3
- SSDEEP 768:DTfo0XgThPPc0u0Zayzc2rFo0fmaHuqZXTk4RXyozblRowchT:DTfo0XIPy0Zxto05uwXTkmXyozbLm
- TLSH
  T140039C5328188BA2951D92E47D178C486F560B0CEAE575AF00130EDFFE98BBA1DDD42F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  sounds/random/release.ogg
- Size 22KB
- SHA256 14a6a5119f0222e1679c8bb1fe34dfeb40f09d25957d04be1dfeff1890a7f281
- MD5 4756c61c16bdc43d1df88591910a98b7
- SHA1 d7bf6d914397cfd8f492c5fb8fe7446ea8c83805
- SHA512 7d5c92657f272bc9ced62bfe5c28b46c8ce40eea5537b44e88b406e1edda1b0cca19627d07671793a483ffa2d751d19b9318655c2c4f976da6e223e1b2b8f06e
- SSDEEP 384:VotDZ/Sz1A50v2+iPxxK6TA2Lcvlt95eA8OBfVYQfHURdWkr1zAqc:Vof/ui5h+AE6DFA8AVL9K1Tc
- TLSH
  T170A2D0EA6978E469E80B80F1B3372E0657F5BE984491E2DED36870458AFBE035C141DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  sounds/sound_definitions.json
- Size 11KB
- SHA256 18ab77572033b8beff3c8ed75a3d8bf904346ec323740775655de04c7febe7ac
- MD5 755ee17c46ab8adc8fceffc19b4698d0
- SHA1 b57651245c76d65104d4e7153dd3c51fe1accbdc
- SHA512 8ff77614852ae07fa79223478116653f16ae7cab1ea2ba34ac361168d20359b8b69bfc026f8ca0f579a9b0822e8b44ffcca222c8e7acc1773cf20a8ee1f87f38
- SSDEEP 48:YEcLQ938a6E4AJ4rOyguM6wTL52UfKpUhFAu5Q6+sCgxPdz/5dDVQAVG1aVOZMXq:Dz6EAEpV3Hx/X2TmCatIEdxaZ3mg
- TLSH
  T19742E5DF093DE8FD50E684F1E0AD3BC9B9A4081B52082DC4A1DCEF9AAA7758F8055D06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  subpacks/full_feature/ui/déesse_ui/_defs.json
- Size 182B
- SHA256 fb7e8e10ab6b1561f8c9581455470a49067c41e2f81749f5dd821e0397880189
- MD5 e715b3e069ebac3ca837127bd5f71cec
- SHA1 75bfb41980f5662d139c735f8de4307ab7469a47
- SHA512 1720dbcca55aac3960c3b0e519b1c0e1dd4937000117f4dfa299c6e6177ad98318592a44dadc23e97fd56a3ca49d890760e8213dce9fad5d1d4c0cc1842382ae
- TLSH
  T1DCC01234D0B45DE724A9403A29ED52426CD8574648081E77E596504D07DCD2A61977EC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  subpacks/performance/ui/déesse_ui/_defs.json
- Size 172B
- SHA256 71028369a7a95d6083ffa97d0557b5351491e6c94776d7a698ab926112227e06
- MD5 20a4443704ea9d796883acb9bfd6fa6d
- SHA1 0299656f934aaeb85d4d9fc36f9544a3c35ddfcc
- SHA512 75334b1c5fafe5092dbb35650d539d8f6ba3ea4a4b2f9363ae46862ec77699a6c8c34b06c565fb55447ab0851631dd16f777881117c7c97a754510f24b1555ba
- TLSH
  T161C08C7AC1B95CFB10A9806EABDD92C265EC278414080D7B58AA500C42C8C3812C36EC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  texts/en_US.lang
- Size 65KB
- SHA256 97e386d281809d3e944f7b12e8d05557cd8ea0218e9133575b311694fdc59c16
- MD5 c0e9d4667ac50344a027c7fb55524cad
- SHA1 9807ea336dbd8ef9a9f55b78afa5f496da5d6367
- SHA512 f47c1612c4d53e886d133ac8db05f009fb94db7c21f3dea4fa66bb01127f382ee3e3adf618d5489163e3856359f9bfc698e9c6399c0efe6afb5a6afd8e2c31a2
- SSDEEP 768:GJEhLD15rbDuzxw7qXnpKL0RAyv5cVVr55L9wcVVnuYGdoJi+F:LHkQqZGeAyh4B55L9nVVR5L
- TLSH
  T19B6321EEC56F25272382712762C570A27BFC47F8E364ED22311D90BC278463956EF8A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  texts/es_ES.lang
- Size 130B
- SHA256 d14e6cf72c140f7960d6353ed6d7153e989aa96976ed9d8001caed8923066819
- MD5 c538ab53c738746e06f2d03b2d18bcc3
- SHA1 0c37164ce952e08d6cd73770962c1ded71a5d9c9
- SHA512 cbb55de9369bfeba2139b7f67b1ae6b6881651bb302eb558e434b588b0f4ee9398b263999c25463883d189af4ae63902b6de5426a3c6b637da5525945b024c58
- TLSH
  T1B0C02B0E0ED81033815AC38F3E201E403AB0500F7C83F85D45DF043E04B7F211B20454
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  texts/id_ID.lang
- Size 31B
- SHA256 35a9f7b124faa92bc5de5618fba237f8482371c77d69648cef3b19674781056a
- MD5 2bbf3d3f509aa37379ce6fb3285e1b4f
- SHA1 83c865a005df080ae641d6527664adece7f2f31c
- SHA512 64d5fc8f2fff019b0fbd8e787879fc1c94adba00c8b5e9c5f11ed75ed99512df98da5fd65d710017cdab2f3d71b64a1da6fb586c4dd11f3ace48b7d397d3f786
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral29 behavioral30
- Target
  texts/ko_KR.lang
- Size 41B
- SHA256 4af22b74cc023b5d4b6c685de5b2da87237b2b228a7f7252d8f73758f26cb984
- MD5 c94757a8581bffad69dfe5c6be8a292d
- SHA1 85bac445ceb7f5de970c9dccdc7260cd9a70c6b6
- SHA512 130f3f2ab9e71b79ca5a0c88baf903ee5a37153a40eb4c2e21e1af7832c806008a14a0b8f8cf1c1b6e6f532aff2233afeb7a65eb60b30f3da08d7970dc9da4a8
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy