048f6660a194558bf648eacc1382d32e077dff8345c7ef40d57ffebf1fe4026b | Triage™

Login
Reports

Overview

overview

6

Static

static

3

JKTool/DuiWnd.dll

windows10-2004-x64

3

JKTool/DuiWnd.dll

windows11-ltsc_2024-x64

3

JKTool/TInfo.dll

windows10-2004-x64

3

JKTool/TInfo.dll

windows11-ltsc_2024-x64

3

JKTool/Tdx...mm.dll

windows10-2004-x64

3

JKTool/Tdx...mm.dll

windows11-ltsc_2024-x64

3

JKTool/TdxPing.exe

windows10-2004-x64

3

JKTool/TdxPing.exe

windows11-ltsc_2024-x64

3

JKTool/WTCommLib.dll

windows10-2004-x64

3

JKTool/WTCommLib.dll

windows11-ltsc_2024-x64

3

JKTool/clibhlpr.dll

windows10-2004-x64

3

JKTool/clibhlpr.dll

windows11-ltsc_2024-x64

3

JKTool/jktool.exe

windows10-2004-x64

6

JKTool/jktool.exe

windows11-ltsc_2024-x64

6

JKTool/lib...32.dll

windows10-2004-x64

3

JKTool/lib...32.dll

windows11-ltsc_2024-x64

3

JKTool/lib...32.dll

windows10-2004-x64

3

JKTool/lib...32.dll

windows11-ltsc_2024-x64

3

JKTool/liteado.dll

windows10-2004-x64

3

JKTool/liteado.dll

windows11-ltsc_2024-x64

3

JKTool/mfc100.dll

windows10-2004-x64

3

JKTool/mfc100.dll

windows11-ltsc_2024-x64

3

JKTool/msvcp100.dll

windows10-2004-x64

3

JKTool/msvcp100.dll

windows11-ltsc_2024-x64

3

JKTool/msvcr100.dll

windows10-2004-x64

3

JKTool/msvcr100.dll

windows11-ltsc_2024-x64

3

JKTool/secure.dll

windows10-2004-x64

3

JKTool/secure.dll

windows11-ltsc_2024-x64

3

JKTool/taapi.dll

windows10-2004-x64

6

JKTool/taapi.dll

windows11-ltsc_2024-x64

6

JKTool/tcapi.dll

windows10-2004-x64

3

JKTool/tcapi.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
048f6660a194558bf648eacc1382d32e077dff8345c7ef40d57ffebf1fe4026b
Size 13.0MB
Sample260820-m8f7psythw
SHA256 048f6660a194558bf648eacc1382d32e077dff8345c7ef40d57ffebf1fe4026b
MD5 08aef38da0180a677befed0f7dc07c85
SHA1 b7b9f261607cb437e3327ba4a6f959282d55b17c
SHA512 dde6f9d20b6aec96495ea67b358d06d2aabbf7b947cd96d134f8f3770b022a8fa15e7a5e6fc64fa5911a16d77a799f4183670ff68a2f2433e2538202f1ecff47
SSDEEP 393216:0wQwoUfL5zN9LhwpFm24Nj9ae2Buy5JOX9SL84G1p+Qe:0RIjRNab4XXjyOX9SI4ZQe
TLSH
T187D633EBB9CE22C2C8672ED0167FB6D836026D6ED04B80165691C15FEAC3EF53C2D495
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

bootkit discovery persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

JKTool/DuiWnd.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

JKTool/DuiWnd.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

JKTool/TInfo.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

JKTool/TInfo.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

JKTool/TdxAsioComm.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

JKTool/TdxAsioComm.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

JKTool/TdxPing.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

JKTool/TdxPing.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

JKTool/WTCommLib.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

JKTool/WTCommLib.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

JKTool/clibhlpr.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

JKTool/clibhlpr.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

JKTool/jktool.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

bootkit discovery persistence

Behavioral task

behavioral14

Sample

JKTool/jktool.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

bootkit discovery persistence

Behavioral task

behavioral15

Sample

JKTool/libcrypto-1_132.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

JKTool/libcrypto-1_132.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

JKTool/libssl-1_132.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

JKTool/libssl-1_132.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

JKTool/liteado.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

JKTool/liteado.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

JKTool/mfc100.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

JKTool/mfc100.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

JKTool/msvcp100.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

JKTool/msvcp100.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

JKTool/msvcr100.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

JKTool/msvcr100.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

JKTool/secure.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral28

Sample

JKTool/secure.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

JKTool/taapi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

bootkit discovery persistence

Behavioral task

behavioral30

Sample

JKTool/taapi.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

bootkit discovery persistence

Behavioral task

behavioral31

Sample

JKTool/tcapi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

JKTool/tcapi.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  JKTool/DuiWnd.dll
- Size 554KB
- SHA256 59d8ea6485ffe7fa702fd318bcb9df596da1871f9a269844114fcba2cd8a1b70
- MD5 47b438a5db3c5e69dfe97a91b375be95
- SHA1 5221791fa7656eb4f1a1300e4531d57603d459a6
- SHA512 87af1b7048a06ae6f0215f30d9b621bfb70bdb7b80059ac3947046f4f6e43635682e0d283c9780958313d27fdc9dfe1ba558bb8dc9edff700ebbae590efb0e9d
- SSDEEP 6144:Z0HOl+mE0Mbm8MCi1ERdcNIy41CovjKS/EpKiABc3gfhA310/m0yhROfw2Rihlt:mG+306dcNIUol/EpoLy
- TLSH
  T12DC49D01FAE302F1DA4A9A36181E73B797BCDA5E832DDB83D73CDE174A611846073616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  JKTool/TInfo.dll
- Size 54KB
- SHA256 74e45da2c3d87d311541864c7a538214716e10ec5d0a47a78ea2ed16269f130a
- MD5 3ebb5975e4eac7816dc1492e8f614bf3
- SHA1 594d62f07db06cc99fcc46ff2c531783e6d0132d
- SHA512 8bcda940682093ab2ae4ca278e88743649beaea271ff9e982a48f4c84566060c47fb521d38d06a5ec75343b76b67da3db53a50171aadcd6be527e7e71e8b87e5
- SSDEEP 768:N0vqqeBnpNiYSenkmaNxKoL4ZCggiipSk:xHBnpNgYkm6xKoL4YFPV
- TLSH
  T1A2433A816A1A40DADF091830E5AAFB3E8764BEA15FC142C75B15FADF2E732C37536214
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  JKTool/TdxAsioComm.dll
- Size 765KB
- SHA256 0994388947871d05b90ed7488c9f944e49523ae2499428267c0fa90f1eea4135
- MD5 cfad74611e58a0a0656835f5af7155f3
- SHA1 d8fb31f0212cefd47bbd0e2b236bb88117f08d87
- SHA512 99c2d9e64e9744b049dbcc96e2a00359e48c722e65a235a42ef5f0a33318713d11005685e74060ea6d6378a0c24c73bdca6cb014f481175777801622e8a5b88c
- SSDEEP 12288:0JY0pTDPYVyfQI9vnMPjq6UoLhmU2WICHJG6r63UiskYd7WfU:0GPI9vnGk65HJGRki1878U
- TLSH
  T17BF44B11ABA18039F9FF22B68DBE299E503D7D80177444CB92C896DE4A3D9E17E31713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  JKTool/TdxPing.exe
- Size 138KB
- SHA256 d24f6f6e4775e7182721ab0a315bffa7ce32137d1f6e60a152735e4aa34f05d4
- MD5 daf987041333c3957da207846ec3ac59
- SHA1 7947aff51d1149a9a6bf18927324ab4797134323
- SHA512 694f54fa06d1dcd1895720adf83a5b90ea6458e9804645ed6dbf8e22e199160abca49719f244f3bdcefdc794e58290b1c0012cf69186cde80cd82b3e3cf1edd9
- SSDEEP 3072:UJ5oJ9DOqpDPGnANk9ZSBrnVd2vMJDAlM3tBLhf6ExGkjpsn6af48u:eoJ9ipnY2G3XhCEFtsbflu
- TLSH
  T1E8D35B02FB960AF1E2CD5070049DFABA9931DEB91F074AE3A37CD95638223D148375A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  JKTool/WTCommLib.dll
- Size 86KB
- SHA256 39a5aeebde6093ac053fa0f42203f175ad7338fc875e959c6cd5361f1a4f9d0b
- MD5 dda04adf87e317f29436a214bb3d0ef4
- SHA1 9614cd24003bb405315b2a47814139d390f4e977
- SHA512 5713eb1d73a4071fd77a547df188e6238a9c1e3841b9627f77ddc29883a152c7afd569a32eb7e85f1cb238df96693fc033fb5ff0e13dcde9504c7b995388f729
- SSDEEP 1536:7tD7f8TG3aE/UVzNdNLa1qlSUBRwkiVUg6g2pqkdSbDKr+pQfr0XdF0Czxhs4dVt:7tDITuaE/UTOogUBRwkiVt6g2pqkdSbR
- TLSH
  T1B9834A41BE8350F5E8CDF7312A6D6732D8E9AE67007949D36325CC63147332B3B26A62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  JKTool/clibhlpr.dll
- Size 946KB
- SHA256 069769958b7d46fdd5b536b86a6c15b4c97ff88e3fc2ce45aef0fda989478ecb
- MD5 5c15cf6be7b83e66bba141d851e66346
- SHA1 ff378432402fe569a4e647b070a0f9108d176225
- SHA512 43510b3e524ac2a975c9fc78cf6f4feffdc4e99fe50d739a7850be5529064010334a5bec8f674e09cabbeac177077484f5e728ffde25024de5fc4e438be71539
- SSDEEP 6144:kwfkd9kgIgbs5bUUM8lRJsJQMAZrKRhhX3o+QULxslpZgd1YA28+VjwZ0FmkRCA4:jfa9xiHNsJQMAZGhX4xgoY2Ih43T3PYr
- TLSH
  T17B258C50BA9AC0FACB2F66B1182EB77B4D7996884B018FCF5364ED7428772D1703B245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  JKTool/jktool.exe
- Size 2.1MB
- SHA256 20de481404b8d5d610b66e8f35a0eb5be61cf61040adbb88e49362ef35dba2bf
- MD5 89ea34361ea40f3997ce21dfcaf8f557
- SHA1 6264ea538394b96253b5da906973a8cb5b1629c2
- SHA512 77ffe6b00d4fe184df3e7f6dc6f8b90b16a5f47760d103985869568614d33699cb07195e0548cc000691b6ab92f67bc4b556636fa578557180de8ed9ca7956e3
- SSDEEP 49152:dIJdsGGGPq66k8P0DzjwLVS+lv0T+uTEqNotlT6:eGkq66k8MDw4+JYqtlT6
- TLSH
  T157A55B61EE038136FB991172D82D6B7A565C9DF2076DA4D32358FE2B28701D3B93432B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

bootkit discovery persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral13 behavioral14
- Target
  JKTool/libcrypto-1_132.dll
- Size 2.3MB
- SHA256 8dd8158367e83f453101d7b09e97408134c173aa6ef4ace84b997536f68d6a1b
- MD5 0356c48be8aab07a1df90067d28dad5b
- SHA1 5d03197f01b87f2088ae7bd6ffcdf1145cc22ddb
- SHA512 047c160abc81fa0366ed575944dd9d31b2341664fa6bfd5f9e17c29f62a5af53824086cb46871fda4b98984c29d075a24602c70c222d231875372d852e7ac744
- SSDEEP 49152:55vWVfrLpzlO05jzwEXuqJ+JpB8yS8E2E11CPwDv3uF5pxaQoZcPC:3OVfrLQE/J+58yS8211CPwDv3uF5pxa5
- TLSH
  T108B58D42A6A305B9E97F99F550FA233B4F3A67494318E7CFCAE1EC5288315C1263D385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  JKTool/libssl-1_132.dll
- Size 498KB
- SHA256 f19273cf2ed3acb5e8ddb0b6a89b6b65388f80893cebd9a12bb8726a2b53fa16
- MD5 f4d3206db4fcf9d5da2b00e222586b3c
- SHA1 1c46719ec374ad1277cb3eef9bbf5704a253c377
- SHA512 104fb4ee80ed1159fad5669e5c3379dfddc9a3ffbcb61d8cadca1417e653c1121a01dd702ec0f1cb06f4c7698b5bde43cc7af409af68cb04075cd74254dfc839
- SSDEEP 12288:y2H5ayvP5/NMjRO2XcLbh+ckbCvGeRWdkqWU+t:Pruobh+TCvGeRWdkqWU+t
- TLSH
  T1A5B45B92EA815DB6D8BB90F211AB277B0F3DA315135CDACF8FA5C8A18D211C1163D38D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  JKTool/liteado.dll
- Size 218KB
- SHA256 99565c8a3dc203dd2a223de102e902c5324439bd898cda1644757bd2f011702f
- MD5 78a716a9830e3aea643a823358cef3cf
- SHA1 b3170e1a958da34c64caddc459088f6587d617aa
- SHA512 a9c05b482d5c969ef6748a8a39d0756e3c315e565d83fee3d9a3734f33bc28612d63e6e80ba3ce280095bd8e46d1b486f9dc23ea8fb18cda0661c1e90e5cd913
- SSDEEP 1536:XKTU0jy1QHe3L6dlJGySBuf52MrEHHVfXsVtUATezt5Dy80JHsuTX3DNVpsNvIQm:XZ1BWa4TA48jyT6tpXv48gAQAK
- TLSH
  T1C4242B20B69F86BFC76F12701C781BBA69B9A9944F850BCF5395EE5E183B4C1643B10C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  JKTool/mfc100.dll
- Size 4.1MB
- SHA256 bf38dda13b938b49a4df72b6477342373ee6e151be12c25cb0c17662fcb4bcd4
- MD5 07bccdcc337d393d7db0b2f8fe200b3f
- SHA1 5a02b227cb0a22a8e7884cd138c3e8568d083d94
- SHA512 e5637727a549cf7b88f13474097a71200f0dfa511ecd55c5a42e5f53e9f86ce8b7ce763448830fd073e232876f7537bad96f2ced8d3159558778460264d07639
- SSDEEP 98304:BZP0PvxMJfTcXPSo0akd+BPSLC4IEy+XNy136jCfsqLhDIJJGN8mFLOAkGkzdnEe:BZP2iIE80qLrHFLOyomFHKnPAG
- TLSH
  T147168D217ED941B6D8C621F00A9D767DA26EECD8273116C3A1503BFBE9703C15E385AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  JKTool/msvcp100.dll
- Size 411KB
- SHA256 b2ad109c15eaa92079582787b7772ba0a2f034f7d075907ff87028df0eaea671
- MD5 bc83108b18756547013ed443b8cdb31b
- SHA1 79bcaad3714433e01c7f153b05b781f8d7cb318d
- SHA512 6e72b2d40e47567b3e506be474dafa7cacd0b53cd2c2d160c3b5384f2f461fc91bb5fdb614a351f628d4e516b3bbdabc2cc6d4cb4710970146d2938a687dd011
- SSDEEP 12288:Seb8zxr1aWPaHX7dGP5frhUgiW6QR7t5qv3Ooc8UHkC2e7wx:Seb8Fpa6aHX7dGP5Gv3Ooc8UHkC2ekx
- TLSH
  T1559428237A4649F5E1D223F46289932143F9FCA40721B3C3A2EFE1A99F583D56A33951
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  JKTool/msvcr100.dll
- Size 755KB
- SHA256 8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18
- MD5 0e37fbfa79d349d672456923ec5fbbe3
- SHA1 4e880fc7625ccf8d9ca799d5b94ce2b1e7597335
- SHA512 2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630
- SSDEEP 12288:nMmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BVoe3z:MmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV7z
- TLSH
  T1D3F49D11B692C073C1B221300629D7B25D7BB8711035946BBBD59F3E1FB47C1EA277AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  JKTool/secure.dll
- Size 90KB
- SHA256 5be5c631d1c46058a63cba1f9fa9763c56c75502634bd6c5c1ed9e38e8818c9f
- MD5 fd0914460da2e96d1c509c7b277b1664
- SHA1 4baaaa2808697eb5fbb7ba9217bbb29a7554b656
- SHA512 6941971b5ac4f8bef52d3c4de989f235f3e856505a2442b5df22252a41405fe328e7a64dca27405d94bab1b43e5122996ca7a85d441a7c076f47a48fed0c5842
- SSDEEP 1536:lFIthnlZqx86AXzB8gjeOJxm1GRTlx+UxKIxtO6piNo7KbI+j:lK/lZqx86AXzB3jeFniVxKNo2bI+j
- TLSH
  T1B9938DC1F68782F1D78B4D7E056AAB3BB73F59A14B614A439734CE508C312E15E3A24E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  JKTool/taapi.dll
- Size 4.4MB
- SHA256 4f406878c498ad9b83996ea419e7a1c859df0be3b906bd6ed13ed14144824925
- MD5 5fa80b32a3e8ea6f7a2a5d05c84ab3a6
- SHA1 90612aabb5488f19ecf3c318d413dd230500fa8d
- SHA512 16f63767c9a35644f082bf65edbc0346cd720a3a6a1720cb64431f84e9ad5398d631ba7907608f5a1cafe97942e105589211fe77b1993f2b58f32909868c2457
- SSDEEP 49152:14mzdj3zTwvL+VGTNANXLy7DVdNid4IRsaZ5T7rp/yPWWYZfZKZq7vu:lMNANXo5dNe4CvZX/WYo
- TLSH
  T1B3268E02AFD151F4DA0E653211AE733ADF3B5E861319CBDB8794EC65A872140AD3A3CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

bootkit discovery persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral29 behavioral30
- Target
  JKTool/tcapi.dll
- Size 3.2MB
- SHA256 5448def9acfd1ac67bc0e3e8525cc8c3ee1960c3b8466a2e0e1f91bb3d1656ea
- MD5 c05bca7d611868f56f775e17ecabc3bb
- SHA1 9216e998b1e2f527143e4cfaf00f537f03a29547
- SHA512 12e5648fc578be6794db4df62e76e802d0db551d51f09f70812b4c7cd1ecb42d6b31a8c7e6a67d3fc6923072b81d721405887615d035ea3a4e286fb6b3fb7ff5
- SSDEEP 49152:y95x6m6UhmXOiZZP+A49YarMS0+lQsmWTG68pdHi4JMsFq6KEk:25JwVZZP0a+lQszmHi6o
- TLSH
  T176F59D82EEC251F1D95E553120EB633B8F3A864A1225C6D3C765EDB29C33251F53E38A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

bootkitdiscoverypersistence

behavioral14

bootkitdiscoverypersistence

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

bootkitdiscoverypersistence

behavioral30

bootkitdiscoverypersistence

behavioral31

behavioral32

© 2018-2026

Terms | Privacy