a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

a59f5f34d6...14.exe

windows10-2004-x64

3

a59f5f34d6...14.exe

windows11-ltsc_2024-x64

3

$PLUGINSDI...ol.dll

windows10-2004-x64

3

$PLUGINSDI...ol.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...is.dll

windows10-2004-x64

3

$PLUGINSDI...is.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nt.rtf

windows10-2004-x64

1

$PLUGINSDI...nt.rtf

windows11-ltsc_2024-x64

1

$PLUGINSDI...60.rtf

windows10-2004-x64

1

$PLUGINSDI...60.rtf

windows11-ltsc_2024-x64

1

$PLUGINSDI...na.rtf

windows10-2004-x64

1

$PLUGINSDI...na.rtf

windows11-ltsc_2024-x64

1

$PLUGINSDI...lx.rtf

windows10-2004-x64

1

$PLUGINSDI...lx.rtf

windows11-ltsc_2024-x64

1

$PLUGINSDI...ea.rtf

windows10-2004-x64

1

$PLUGINSDI...ea.rtf

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314
Size 3.4MB
Sample260815-txem3adr5s
SHA256 a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314
MD5 7046a18b3c73184704ec994cef60e57c
SHA1 c1ad1c96cd934fa3499aaf6155ac38862abbad35
SHA512 7a87ccd4bb60189f56ba79b62746f45b17ebb74fb863432caf09458858d9c4e4133cda289fdc596d365f44355ccf6efa6736d87678c1f6cfe19db25146a3c837
SSDEEP 98304:GQQyPnsfMOPkyi2w6lzLaV9DFZu5Ms8IRR6q5Vg+ZrgohO9k:GQQyPAP3i2wczaxu52Iz6q5Vg82O
TLSH
T1E5F5238AE2D6A484CC1647761CDEC7691750FD0F2A70CAAE327C7E5BFB31AD1E990424
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/AccessControl.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/AccessControl.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/FindProcDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/FindProcDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/JxNsis.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/JxNsis.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/setupdll.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/setupdll.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/uires/rtf/agreement.rtf

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/uires/rtf/agreement.rtf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/uires/rtf/agreement360.rtf

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/uires/rtf/agreement360.rtf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/uires/rtf/agreementchina.rtf

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/uires/rtf/agreementchina.rtf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/uires/rtf/agreementlx.rtf

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/uires/rtf/agreementlx.rtf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

$PLUGINSDIR/uires/rtf/agreementoversea.rtf

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

$PLUGINSDIR/uires/rtf/agreementoversea.rtf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314
- Size 3.4MB
- SHA256 a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314
- MD5 7046a18b3c73184704ec994cef60e57c
- SHA1 c1ad1c96cd934fa3499aaf6155ac38862abbad35
- SHA512 7a87ccd4bb60189f56ba79b62746f45b17ebb74fb863432caf09458858d9c4e4133cda289fdc596d365f44355ccf6efa6736d87678c1f6cfe19db25146a3c837
- SSDEEP 98304:GQQyPnsfMOPkyi2w6lzLaV9DFZu5Ms8IRR6q5Vg+ZrgohO9k:GQQyPAP3i2wczaxu52Iz6q5Vg82O
- TLSH
  T1E5F5238AE2D6A484CC1647761CDEC7691750FD0F2A70CAAE327C7E5BFB31AD1E990424
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AccessControl.dll
- Size 24KB
- SHA256 89ae5e9ed94c71972ddb25aeb508ee6fb8c7a39e39e775182bcdba02762e6dce
- MD5 03cc5115234c4868cc8e2116ed949ca1
- SHA1 9cb86d1d2c41da77fd486a128ac43afcd6b8c129
- SHA512 57b1a63316192bd76f65168f07d1797f4d04b98b4a99d0e543ebee3ab4b65b8562ac3f83100c25a207c385956025c10c298ff68a17770bbf0e8b82c7b89d0c58
- SSDEEP 384:udGZ2ESnTqkddTm43saIvybNyb8E9VF6IYiTPxIZHMMZknCC:uMANdTHpIvy3EpYiTPxIKMC
- TLSH
  T145B22C624FB80BFEF9B21A303AF8547747B6B50125A0C18F5316C95A6D217876EB8337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/FindProcDLL.dll
- Size 292KB
- SHA256 acabf187f608858363ce88fcf64e78c09738860ce4a84952c114cf53fa81ade5
- MD5 5a177de1f2e0a85e3fe15e9821747a79
- SHA1 e339619f777fc21ecb731559799b7189c2a324c1
- SHA512 0e8456b5b480c18300515af33a1ca665c20da4c07fa66baa7ccde9dc83dfc9fdde7e4d0ea05a3fd030e67dc96e0619c236410ed59985de9bc95654eac2b36103
- SSDEEP 6144:A+WFR2dU22mRXAtS40ZxdjYHXQohL7cRJ5:Av2dmmRXAIDzxzotQRJ5
- TLSH
  T107548D117DC18432C2BB38346678E2B64DBCA8311D749A8F539C0A795F74582FB36A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/JxNsis.dll
- Size 2.6MB
- SHA256 6f29c541ae35bf08e18555cce5c5dddf2df288650c601f5242fdcc229e12cf4e
- MD5 0bee9f0f20c2b7ee78bed1d439c99e1c
- SHA1 be5e66de990f1f5a83eb4b10aced04a97407392a
- SHA512 f4293a5c65c0c8043b479cbb89daded8b6dadb9b8b3419d77ac7e553caea70264ec351068e79e36e3e8f8a310eba9c352339f6867ed86333abe7aa99428ac059
- SSDEEP 49152:tmsROkQGvPeERi+vQkHISqHQ1usr0TZ51KDwqiSJmagLEGAeDkwqJl4Mg7Za0bQD:NROpGeERi+vQkHISqHQ1usr0TZ51KDw
- TLSH
  T1F6C5BF02FF8280B2E5AF013491BB577F4D3EAA244738C9D397E519A99D301D1623E79E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 21KB
- SHA256 d4c3a23eff386c311129d582650abce1ca1e15adcef9482a303306fd3a958058
- MD5 5b11192faeb214d966ae26b4bd47cc9d
- SHA1 be5ef8b780d51b85aaac5932f1587e74ca05c705
- SHA512 714eb5c2352637bd218b889c3ed2c564227568e9c01f0046fd096b500923f5d805e372a2a7633d5662e584b5860aad3b546fddb967fb77057d3539b6d80d1d8a
- SSDEEP 384:I8PJlt70esj0Mt9vn6ay6mNyb8E9VF6IYiTPxIZHiW39bU:I+qesjRL6HEpYiTPxIL39bU
- TLSH
  T119A29E6386604CF2F9524D3430D4AA36AF79B6851FE081D3A39BC1416F943C77BF92A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsExec.dll
- Size 16KB
- SHA256 da808e1a14d72f1e38fd846f5c166647202cf2683da618aa7ebc8ce7d2505105
- MD5 b3ca8e6e1a086f41ad2d5fac8ad720c1
- SHA1 e6096a0be2d8ee23bf676e7953ee04ed27d1f217
- SHA512 bb3144b0c3ed9b1ef8edd895a06e0d289f827ad7623c3e46b9e4359c92f41d61f7c914320707658a1f216ebbfcc81586554b127f7b99f05ec759629acf42685f
- SSDEEP 384:FbogBz5N66IuGgmkNGNyb8E9VF6IYiTPxIZHYO:x9cuGLksEpYiTPxI7
- TLSH
  T12B725CB648D01C63DD4F4A7039D468375BB8F1911FA082E2531BC6954BC57C2FFA93A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/setupdll.dll
- Size 2.3MB
- SHA256 e30f2d1583462e6556fcb71112adc533f7c004262e2cecf48a6921625a6f4c10
- MD5 7e469cadf8f403fd07c0a29ec0b2a2da
- SHA1 f95ae76a7fb8cc55540be7193e5bca2f9b17ae49
- SHA512 d7ff11594a633171afe44758abe2dae229a8d88f72b1a086f28c3deb3871acf9c49bad44147ed923af00dc74c6a2595e47d1ed48bda0597666649d54201c4b6e
- SSDEEP 49152:AiY1Wf/vu0J9E7od0yMHacx967Tgp9XJ23:w1au0J9UOMPx7C
- TLSH
  T113B5BF1275E2C035C27E03305D18B28B56BEBEB409B4D76BBBAC151CAF74C819A577A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/uires/rtf/agreement.rtf
- Size 119KB
- SHA256 aa98c8c55e82a0d577c100e78af2e4e3020942cdf9db95cb27beca84aa31daff
- MD5 a9f02574b0407556b0a7dce110bac2b7
- SHA1 6ad374afc5bb79ec3be63d53e4f8717118e9471b
- SHA512 c8d3b88536a47bce6870849a05bfb27035442b63d0d4b4f4f2cc55206d271d4c0e99de1a195d3616a07e9985fa66353c8d257b4eaecc1dafad1135546d810e8a
- SSDEEP 384:HEq8ncNW3gt8/olzVP2zYuIpTF60S8/EAiL/9jQHpKSCO8qx9BVBsy/CUZ+fzCUB:HicNWE5/UjSMqhwB
- TLSH
  T19BC33703682F9B4D0F465A3A9B748D8A7969D502D5FA3058AF6E42EF9C1CE2CC1733D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  $PLUGINSDIR/uires/rtf/agreement360.rtf
- Size 121KB
- SHA256 2e89852513018270f283a83c2123fa5879c563614f25a3d3acb0cb73e52b659f
- MD5 293651ffe82df39fd56d7f15e7ba8901
- SHA1 958bb1c8a63bc564243cd75d13f8135389793576
- SHA512 ad60804052a28fecc7848ead5d5599891ccf87c0ea8d8648313680745f5c95628f9c55bf2b2f685e9fbfccd050e950432d24b30229efcc107ee04ba55bce40fe
- SSDEEP 384:HwO8ncNWr1/QET7/dgqVP2zYnXES2w3cJSZKEF6lCY2mZ+5OKQ/tjbJ2W6TlLh1X:HacNW01/o9RjS7QB
- TLSH
  T109C32503683F9B4D0E465A3A9B748D8A7969D502D5FA3058AF6E42EF9C1CE2CC1733D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  $PLUGINSDIR/uires/rtf/agreementchina.rtf
- Size 119KB
- SHA256 aa98c8c55e82a0d577c100e78af2e4e3020942cdf9db95cb27beca84aa31daff
- MD5 a9f02574b0407556b0a7dce110bac2b7
- SHA1 6ad374afc5bb79ec3be63d53e4f8717118e9471b
- SHA512 c8d3b88536a47bce6870849a05bfb27035442b63d0d4b4f4f2cc55206d271d4c0e99de1a195d3616a07e9985fa66353c8d257b4eaecc1dafad1135546d810e8a
- SSDEEP 384:HEq8ncNW3gt8/olzVP2zYuIpTF60S8/EAiL/9jQHpKSCO8qx9BVBsy/CUZ+fzCUB:HicNWE5/UjSMqhwB
- TLSH
  T19BC33703682F9B4D0F465A3A9B748D8A7969D502D5FA3058AF6E42EF9C1CE2CC1733D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  $PLUGINSDIR/uires/rtf/agreementlx.rtf
- Size 119KB
- SHA256 29ae3165b7d8b9f4ec4a443d5ae6a4a1fe0a6874a561be3f506e52e99bf49627
- MD5 1ac893da089fcd1b919bc8d936bea87a
- SHA1 ad7107601f62aad4674797b8af20d604583a5c43
- SHA512 0f22996c833ca63e887677ee1f164e419f2a5f432a880f3e205894123085036e1483cfbbee68c104cd35c5bfd47efeb367af685a67c39f0294cd63f0b9aa4da2
- SSDEEP 384:1lB8ncNWq1/q7mVP2zYtJjpBkQAG5+kOLL9jQHaKIgOsnPYrXHEUebH5Gf15UW8Z:1gcNWQp5+wIKnm2R
- TLSH
  T103C33803682F9B4D0F46563A9B748D8A7969D502D5FA3058AFAE42EF9C1CD2CC2733D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  $PLUGINSDIR/uires/rtf/agreementoversea.rtf
- Size 51KB
- SHA256 f81dbbdd855990a771a115d6d0c02c9f1f5dc3c44247f2b3839f7e97904cdafb
- MD5 28cc6d6c44b35f4b883f3c9041450b47
- SHA1 79234d2e6b1771a7f37ea1e4360ab76b8fa0d248
- SHA512 11a44dea9bc9b9eb6e75136b8d4669ada49a8cbacf9287bf0f2f6a585174196a9a94a5ea42da332acec5eb1fede0609a0df34cad606283bec14924e258998cee
- SSDEEP 192:HWVe0845cNW7NJDMn77H1jU9z8D/VESiz8M7K4k7LT8:H2t8OcNW5S/VGzz76LT8
- TLSH
  T1AF337956918B574C1B0796EDEF34D9853A2ED500E2B170ACB2DF82ECA85D9ECC1B3391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy