dd93f8166e21dfe275a2059424b1256a07da1e89a5d8c0871bf0ae4fcc8fad52 | Triage™

Login
Reports

Overview

overview

6

Static

static

6

ctf-crypto...rs.pdf

windows10-2004-x64

3

ctf-crypto...rs.pdf

windows11-ltsc_2024-x64

3

ctf-crypto...rs.pdf

windows10-2004-x64

3

ctf-crypto...rs.pdf

windows11-ltsc_2024-x64

3

ctf-forens...LL.pdf

windows10-2004-x64

3

ctf-forens...LL.pdf

windows11-ltsc_2024-x64

3

ctf-forens...ed.pdf

windows10-2004-x64

3

ctf-forens...ed.pdf

windows11-ltsc_2024-x64

3

ctf-forens...ry.pdf

windows10-2004-x64

3

ctf-forens...ry.pdf

windows11-ltsc_2024-x64

3

ctf-forens...ws.ps1

windows10-2004-x64

3

ctf-forens...ws.ps1

windows11-ltsc_2024-x64

3

ctf-malware\SKILL.js

windows10-2004-x64

3

ctf-malware\SKILL.js

windows11-ltsc_2024-x64

3

ctf-malwar...net.js

windows10-2004-x64

3

ctf-malwar...net.js

windows11-ltsc_2024-x64

3

ctf-malwar...on.ps1

windows10-2004-x64

3

ctf-malwar...on.ps1

windows11-ltsc_2024-x64

3

ctf-misc\dns.js

windows10-2004-x64

3

ctf-misc\dns.js

windows11-ltsc_2024-x64

3

ctf-misc\g...s-3.js

windows10-2004-x64

3

ctf-misc\g...s-3.js

windows11-ltsc_2024-x64

3

ctf-misc\g...s-4.js

windows10-2004-x64

3

ctf-misc\g...s-4.js

windows11-ltsc_2024-x64

3

ctf-misc\pyjails.js

windows10-2004-x64

3

ctf-misc\pyjails.js

windows11-ltsc_2024-x64

3

ctf-pwn\ad...s-2.js

windows10-2004-x64

3

ctf-pwn\ad...s-2.js

windows11-ltsc_2024-x64

3

ctf-pwn\heap-fsop.vbs

windows10-2004-x64

5

ctf-pwn\heap-fsop.vbs

windows11-ltsc_2024-x64

5

ctf-pwn\ke...es.vbs

windows10-2004-x64

5

ctf-pwn\ke...es.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
dd93f8166e21dfe275a2059424b1256a07da1e89a5d8c0871bf0ae4fcc8fad52
Size 969KB
Sample260815-w22z9ssvbw
SHA256 dd93f8166e21dfe275a2059424b1256a07da1e89a5d8c0871bf0ae4fcc8fad52
MD5 57f5ad335290daae864558ade127557c
SHA1 c6f63d29e68a9d3715dd0fa6bc7d86aadef1e195
SHA512 25050c52e3bc3784d5ab37a8e949176fa90354cfd0db0519d87a6c08a92e86cb67909a29939e5b0ed99a0e623e7e0f2b573fbb7c8af5f5b041eafe563381ca3a
SSDEEP 24576:tRL0u0Ry7FXnMfmuzgqG0ocR5kfLV2coSJrNt0H5gR/KPFU09:D0QFXJL3HLwcoSx4ZPFUM
TLSH
T1C325237A83ED0052C3D7D3BF027A0E17025E9DAB2C99DB466A0150CBDE9BD97172391B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

adware discovery evasion execution pdf spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ctf-crypto\classic-ciphers.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral2

Sample

ctf-crypto\classic-ciphers.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral3

Sample

ctf-crypto\modern-ciphers.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral4

Sample

ctf-crypto\modern-ciphers.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral5

Sample

ctf-forensics\SKILL.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral6

Sample

ctf-forensics\SKILL.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral7

Sample

ctf-forensics\disk-advanced.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

ctf-forensics\disk-advanced.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral9

Sample

ctf-forensics\disk-and-memory.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral10

Sample

ctf-forensics\disk-and-memory.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral11

Sample

ctf-forensics\windows.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

ctf-forensics\windows.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

ctf-malware\SKILL.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

ctf-malware\SKILL.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

ctf-malware\pe-and-dotnet.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

ctf-malware\pe-and-dotnet.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

ctf-malware\scripts-and-obfuscation.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

ctf-malware\scripts-and-obfuscation.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

ctf-misc\dns.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

ctf-misc\dns.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

ctf-misc\games-and-vms-3.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

ctf-misc\games-and-vms-3.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

ctf-misc\games-and-vms-4.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

ctf-misc\games-and-vms-4.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

ctf-misc\pyjails.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

ctf-misc\pyjails.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

ctf-pwn\advanced-exploits-2.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

ctf-pwn\advanced-exploits-2.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

ctf-pwn\heap-fsop.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

ctf-pwn\heap-fsop.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

ctf-pwn\kernel-techniques.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

ctf-pwn\kernel-techniques.vbs

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  ctf-crypto\classic-ciphers.md
- Size 29KB
- SHA256 a3343f7e299e74554c5298025254afaec14b0f79ced27f1badd54c79a2cb2e82
- MD5 3e2b9f497638d5a046f904d1f0ef3139
- SHA1 69b4db5cb5b951fdadb0e68ccf70ca2559586848
- SHA512 f7f9a1a3f06f344089e09db95b25b93b3b8d3858db7842ec6676526d4d899b6aa3b986c1599a853db290516a6c8df2b5d3e725f8f9bd789bc31b1cdd4aae0817
- SSDEEP 384:edL+lD6+utwL39NO5zcxraSgWocCP1AD64dKoFEOc7TJ9X08Apv2U9A6JaHa8cJ:cLqre5zOXgWocCMdKoFEOkJ1ApvDJTN
- TLSH
  T146D23B935D03A9A443B3809F3599A301F33AE1975A16B21674AC8B2C9FE1C64837F5ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  ctf-crypto\modern-ciphers.md
- Size 32KB
- SHA256 7b3fa5af62796f37f5a9123c6e8eb8900f8f7306523c8d763a74acb14c8d3b0b
- MD5 69e1cf26acfd239cb928155836f1fcb1
- SHA1 1366b36cab098483871a78671103c39b0861b5ae
- SHA512 b5b4cf3ada73dd2c02fee4a643b3ae0074dd9a862ec7646c3f4bc03a24b9dec4a5556f3262873f3720f4d8826e51937cd8c41b125b7cf1c2688177f785c5bb55
- SSDEEP 768:gjsuA3ks4C0DPQmpRE65NS5ojnMLdyes7R4uYkweg:gjEiDImpRp5O7JWeR
- TLSH
  T1AEE23C435D118AA882FB40DF649AD341F72BE05627915268F8AEC71C2FA9075C32EDDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  ctf-forensics\SKILL.md
- Size 35KB
- SHA256 a1b5fbaae7c8deee7b9e034cf2972763cd07c0c3f116ea14050fa721069c58d8
- MD5 a172dc9c45cee5ed1d12f049960759cc
- SHA1 87b5c71875acfd7a02578de7db044fdb87d0b149
- SHA512 41e224d2d66aa52873e43a1b203419b4ac648e7809b5aa92d664fa6035ed3fd1e1d5834f7ad17e88aeef5016ee0255d3dff0d6d3b7769fce6ead72143a69d54b
- SSDEEP 768:DcnhkpR8kOzlbAycmaDBj9RVdCFHA0AwdAqZ:oh+8kOJbrcmaLAIYZ
- TLSH
  T1AAF21A023915D46E0E73018677ABB632B31DE51993676CDCBC8F87C926086F5826DBF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  ctf-forensics\disk-advanced.md
- Size 21KB
- SHA256 3d5750601ea5d5bee367c8186eee20512393316cf56af0887e3bfc2479a0540d
- MD5 00e17f471577183bd3edc52c8ac3eefa
- SHA1 ff19e4ef12e2e12d87bfe6eebfb4ae2417e68a7a
- SHA512 523ba35091bdca46b9d58549a731761834fb110ec00144f12540cf93fe08c6812fbb6339f60fa63908b70b805d57cc594a51989a4ca6c914b62078134b79f553
- SSDEEP 384:O+rBS/RlBwjwH3vrKYwEQRt5qgy+xeYhCE2IH9RUa/8ThM7lHTLTBTzjQC/Ue:O+rQ/RlBwcXvrKvZzPy+gYhYs9Rrn7Rp
- TLSH
  T1B8A22912BD16907D01F782C7755DC220F726B12997167929BC4E83682FB98E8837BB7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  ctf-forensics\disk-and-memory.md
- Size 20KB
- SHA256 8ad627153d7cd8127ce971141a53a13b02164998fb3f598eeba1229e50a110be
- MD5 9c71c2e79b183ae37c386cd30d51588e
- SHA1 80d3d384b736b67d3f23ab343971a6ad6f2000dd
- SHA512 018e6c5c60d9e0fba06d5f391d516027af3678ce18674316bddb2aedf1a0d516d673a8715bd2fa781b179e6f68380fed0b16c6473d52adca908a12f6ebe8de35
- SSDEEP 384:CuwCSHFy9JQ0PlFRPL2hvBdowNxcvaKwmZKb8e/7xZe:PFRzYOwNivtwmQb8e/FZe
- TLSH
  T197922A152916D8AD13B3418FF60E5325F31BB22C53275614B89DA38C3B489E9E37A6FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  ctf-forensics\windows.md
- Size 22KB
- SHA256 bd22d26db9740876508e80794a9f3c77a49a93c9302cb9f4b36453ee2740468f
- MD5 31f16192ec1cebf067798fa35c8621f7
- SHA1 44596d8eacb042705ea0d8cf74a7bacaaee9c02e
- SHA512 8bad0e8101b2dbdb201851844a77deed20218dd4b3162e301e1559fc373a3b0d3eb67057ef12e0086c6986847ada5de88541a42ef9b92b94b59601a99f806d5d
- SSDEEP 384:rXfujla72s+9FFI3u5R4A4LmFhd8sh0UCAQAESKyaxCwn:el3r/e3u5ubLmFhysh0UCAQAESSn
- TLSH
  T199A21B022C5BD03A06B382CBB5066365E30B715F6A5322153CEDCE5CAF74989937EA6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ctf-malware\SKILL.md
- Size 7KB
- SHA256 879de55e72b2733cd94721a5236a91e3b29725c4b5115c30c6baf4637883083f
- MD5 67d338b2ec01318c3a93c92cfa4df847
- SHA1 558014f514466947e80d8d2a9977496c59c34196
- SHA512 32857d0c6dcde718a8084f187a0ac84acb775b90184bce2e6834bccfab49fe6775d04f73881c4d928508aa9a1d9efbf63847eaf65d40147856a5e70f3b1446cc
- SSDEEP 192:RxNLEdmPspA8yA7WXHG7TsU3j832vty6pjpU03b3lXkZl:bZEdIsqA7WXHG742DEYbol
- TLSH
  T16EF1D8427D26C12D4AA1490B02A9C2B5D33FD30CB2E8D9A8789FE6447A1CFD5C35F12E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ctf-malware\pe-and-dotnet.md
- Size 3KB
- SHA256 56c365bf25c9373e3d915677e67d1b9b6eb0f3a20f624773157b97977db4598f
- MD5 9bccf338efdff619bcf139d2b7a34c6c
- SHA1 8aa91b68ac53ef516d392dab4488dfec463dc0f6
- SHA512 3c63a8b01d178be80b22a906c4e3c3be86b2ec0aa082d5d7c2c05ec52c4d20d23b0c9fe1eb58a62d218fd6c7249b0cc620f3ffcf4f64b9580843fd09667f85e5
- TLSH
  T18B51A7163D93E03FD1B7828F850BD164C33EB79A551A08157D6ECB182B341A4C35B11D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  ctf-malware\scripts-and-obfuscation.md
- Size 15KB
- SHA256 dd9e3ce37ac50189ff49718f62546b4546aefe5698f1d66a88f9b821a7101e46
- MD5 4dae9df005865b13dd8f945d807ebcc7
- SHA1 a1f9f3df9f67732cc4bda92faf0ef4835e78f31f
- SHA512 26ea90e2e7bae081252d53133564c3daccc20d270885e506a29f315183b5b16eebd871c799140385f668a5357860c23ac69a23d26e9d44a012632768acdaae4f
- SSDEEP 384:3IPbFDc7GSxuNI5tsHeYYuZPpkiGW3JnlYEa2:YVFcANYutpbZlN
- TLSH
  T1E4720A13796EB32C4AF1800F5207E266E31FA26E69661D64759D8B181F240F5C37E3BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  ctf-misc\dns.md
- Size 9KB
- SHA256 6ecd2eb3f31fe93af1e6db4197dfb5e209c3f408972e6fb17a4c7ba3ab17bfa5
- MD5 ef5b1f58f5bd84c1916c8688c42545aa
- SHA1 ce1005709df0e85f8a02149ac05e54ef2fd5dfda
- SHA512 a8d32e166d003d1cde824949fba94c860734763884f627082a19cdc259316c8c108e3984fca0f2b67496cdb0c51400845e9a63f8ab6ae671a3a95747a82a8647
- SSDEEP 192:iDHoUCZCLNpYlZBgr5dQefdi39WI4xiNZoktanf+sxFtE:iDHHCZoWBO5Oef+bcf+46
- TLSH
  T17B221A64788B502D41B2027E66059291F337F23E672A2059B0FD43BC2F729F4F27599E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  ctf-misc\games-and-vms-3.md
- Size 32KB
- SHA256 98098c1326e45e380262c41002965393862bbc281e970ea9a9ccd1ebc5d6fa56
- MD5 174358b582673f3bdef1e7dba4564cb8
- SHA1 5c2de6b999bc2991f17038653e1fba482f285abe
- SHA512 874b14b1b068b9d079bea99cc808636682dbf6956ee3454f7aef8fbd905380a54c06cd7e601f919a88469863c0cc9a0cd455f01e21bf805a9556e8d015ba8f73
- SSDEEP 768:FvayJA7g0yfdGifLxvCP261p4TiBDdPpR6H:NJ9fgi61p4mhhQ
- TLSH
  T18CE24B016A63A27E95B3009B256F5252E33F90182398745638AD822D1F6B5ECC37FFDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  ctf-misc\games-and-vms-4.md
- Size 11KB
- SHA256 03b801791c9fe7232241eab248d370431554d8f2d3a52df7671cdd37fcdaeb91
- MD5 331f4fdda00e47e91e444c566d285943
- SHA1 62c26c6228c58ee4e834a6c292181927ad1fb9cb
- SHA512 63c1d5850b83b2a2ce1b60be3a6621d4aa6184e66c2c2a9fd57c89590a591cdc2166676b7bd479e93b5b32426d0428fb9f75eed58a68b06bfc361fd13b15a7f1
- SSDEEP 192:kU/gI1Kp3/wnj3a/NZvRpGnZ75IPrCtP04j8omzvLL0cUxjuh2PREvUQr7:kUp1sojqVtvXoP04j8om3MRuhMEvr7
- TLSH
  T1F932190260826A7E1231000B1596A3D1EB3651752BFD255AB43E8B7C1F66CE8E33DFED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  ctf-misc\pyjails.md
- Size 24KB
- SHA256 4dc88e4593f20968e632df20b9b9a1b2d5f8571dd0f36112ed63382c4768b91c
- MD5 7deb535da77d4feb1adacb7a0fcf895c
- SHA1 a11e4d3917672100198b49586b1e58fb910b4b5d
- SHA512 28fb0b8322d74cb692683647b725c02bbf1f98a28ebca30a09eee3436b09b9c9acb6a7d69260c3f90ef4ff5a85c10a0902a79564d6f0bb15abc63f5ea4a1b40c
- SSDEEP 384:7Ocom1+5qbv3WW/O+kNljkp1aD1DkkQmF9z/bWk:qO/N/mnb
- TLSH
  T13BB20A125C03E57E04B750AE811B8150E72A416BD7662825B8FC926C7F66E3CC37DBAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  ctf-pwn\advanced-exploits-2.md
- Size 30KB
- SHA256 2fc80b1e912ac52909311e5e70ccd56d1f66fd3f8d6846b19002926fece0f4d0
- MD5 5ad748765ac345aba017d74e9549b8f7
- SHA1 cdbb5ef285b2785041acf7e4cd927805a376568a
- SHA512 bad3ba220f8f46f9a933c373b8dd4de7ca28dbcd94fe1ec9d0637cfefc2b4633243c7886a80f650f4cf78ae5da8e85e2e2045f9aaaaa1f06fd4948817ee27c51
- SSDEEP 768:UzKT9ek7bOju9BmjcoDCrjYGRc3ToCNeIMkmY8VGlu6:UY7bejco2r8Kq2kkW
- TLSH
  T1EED219421533A76D16B3425A311BD163D36BE02C83F65129B4AEC26C7BA147CC37BBAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  ctf-pwn\heap-fsop.md
- Size 15KB
- SHA256 bc8bc268a1363ca44c1c2d075aee7d77afc23a323e17ed35534b1f2878276ce3
- MD5 c30a61d35295a707ecb46822d1c2071d
- SHA1 6870625a055ec20ea0d51f9b10718cb292c3cd2a
- SHA512 c5ca546a82164cfed799af57063bc661086b97b953e045b20666049b19e7764100415253b2cab3c7190c51901486f37f3d73206325ea3b2dc26b42f948fe720e
- SSDEEP 192:sE8lDMhOUb4Seq81WM4ptQzL9B+IzzzXE9hngIMU/MDZ1aZTPLClguNPCFedT:sRlAh5b4kMuiX9/CnZhYZg4lgWuel
- TLSH
  T147620A12322272B466F1519B794AC2A3E712D179D77E6638744E853C238787CC33B79B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral29 behavioral30
- Target
  ctf-pwn\kernel-techniques.md
- Size 18KB
- SHA256 891c9e7b5566ee8f7e596f5a50c86bf3f4c02b7c719e12c751ef3b108fa8f5e0
- MD5 4a0081782146705336c0f786645193d0
- SHA1 f359e4a5df5b148f0ed7329e334fb092be3d812c
- SHA512 9561205ef763c3559d95587024b99131aa86f0cd6ee517be8804ad62a9602a4699ae0f4f04302756f1a13f0765b7ec580fd11addcb04f377d48e2a9f79bc1bd7
- SSDEEP 384:P8KZ1pjEzHdme/nzBxn8DH4GI5mXGRUD2KzwnBm:EKrEoKUHZIMXhD2Owng
- TLSH
  T1C2920B1312AA637569B3805BA60B9162FA26A01CE3597634705CC37C371E4ECC777AEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspyware

behavioral2

adwarediscoveryspyware

behavioral3

adwarediscoveryspyware

behavioral4

adwarediscoveryspyware

behavioral5

adwarediscoveryspyware

behavioral6

adwarediscoveryspyware

behavioral7

adwarediscoveryspyware

behavioral8

adwarediscoveryspyware

behavioral9

adwarediscoveryspyware

behavioral10

adwarediscoveryspyware

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy