06ae48fed6339cf5730e2411010e2bf9785df5c102e7f7c788ad559730cbf390

Sharing

Copy URL Twitter E-mail

General

Target
[TakeMetal.org] Hulder - Verbolgen (2026).zip
Size 111.2MB
Sample260822-pd732stfpb
SHA256 06ae48fed6339cf5730e2411010e2bf9785df5c102e7f7c788ad559730cbf390
MD5 68a4b34919240152fb0f6cc92035518e
SHA1 40ab76406b88364ed64fb2a0f177e024be9e32fb
SHA512 4ba4ddb264a438d1c4aa7c580920bbf04220f6111767e1ea1ecea9c0134a28e788efd7a5849cd0efab4d7b1a0cfb75db5f6f242f2a46b49dded3fef8af1edbd6
SSDEEP 3145728:JAPB2dDRkDJ8QhxhgyAknRsy1wXOLNIV59:OIiDy0jgFknafOLiX9
TLSH
T1A648333668C7531AEE0F83EC256327462D067389F9DF62D2D95530C366AAB242733CD9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  [TakeMetal.org] Hulder - Verbolgen (2026).zip
- Size 111.2MB
- SHA256 06ae48fed6339cf5730e2411010e2bf9785df5c102e7f7c788ad559730cbf390
- MD5 68a4b34919240152fb0f6cc92035518e
- SHA1 40ab76406b88364ed64fb2a0f177e024be9e32fb
- SHA512 4ba4ddb264a438d1c4aa7c580920bbf04220f6111767e1ea1ecea9c0134a28e788efd7a5849cd0efab4d7b1a0cfb75db5f6f242f2a46b49dded3fef8af1edbd6
- SSDEEP 3145728:JAPB2dDRkDJ8QhxhgyAknRsy1wXOLNIV59:OIiDy0jgFknafOLiX9
- TLSH
  T1A648333668C7531AEE0F83EC256327462D067389F9DF62D2D95530C366AAB242733CD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\01. Drie Raven (Intro).mp3
- Size 5.3MB
- SHA256 00a445e2e0d0cbe25be3f8f1656a013d2b63c8dc4797afc59cc6019a4f243ebf
- MD5 b87aeaf44da8cb6fdef3b2112c771c94
- SHA1 8abe173a91f8d473fdadc1fd6756391b0ddc4eed
- SHA512 02b44aa2928823aa91c21ae21432999b1174e46160a1720b73bdc0a693084977e0d60d779ce0933f9e854b4c15f6731590c274cee20e4ed7388898aa2273d516
- SSDEEP 98304:Ux539GedZhXPkThHx9/QIO8rck+C+jhOyAaKNoUftOLQ9PJqujl0O:O5399rXcBvQItvBo6t2QHBjlB
- TLSH
  T1E8463392EB70B638FF680B399DFB6030FB6B9E6538111AD499E4760006F76916F06D43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\02. The Crowning.mp3
- Size 14.9MB
- SHA256 a09d80cf3624bb1de413172931f582335f81f92ad9b9771a3a03977d250e8a57
- MD5 f85a063708b23e1eba9c9e747cd064af
- SHA1 6c1249f5b105a4b282e38ff813aaa78d6c6b40e8
- SHA512 2f9a998ba397b6cd036716fcca6c66047c86b88aa0bbcc583100f5df1fc1c5868a29c4e9476ccc926000aef086ea7faddd70ee77ccbd61afe9fc2fafc2779711
- SSDEEP 393216:HWPwp1wyVh7py3uwdweexDcNxSup4h5YGZ3h3:HCw3wyxPMwL2S75Y2N
- TLSH
  T1A5F63382E3A1F672E7DD0737DCFB1220F6039994582207C1A692B735527FA40DF66E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\03. Thy Binding Oath.mp3
- Size 13.0MB
- SHA256 befc6593bcb82465ccd070b9744070bab1ed7e590d78ccc9b86eb144b9d5a0b1
- MD5 ff0607ca1c5c03cb04aa76161f67af2d
- SHA1 5485b714d07fb4dc4f0901c135eae7834ec4b571
- SHA512 0e9594395422857f2a41d6e574492d2c75e20554435ecc2cf74e215163a7f16c306945017d48479c61bdfb622f790afe428322dff9ad4e6100903f9f82f0876a
- SSDEEP 393216:ufq3VEX+0kfka16DZM0bsw4iWBKciLWkv:FoeR1Msw4/Ec/kv
- TLSH
  T152D633D6E660F6B4FBF903B6ECBB2254FE2388595D090B807389737048136969FB1917
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\04. Verbolgen.mp3
- Size 9.3MB
- SHA256 c0b206276490a869448a0696bb0ba5d7767def9baa5eac9d825bfb2aeb9d6431
- MD5 9cba4477794340c780552c5845aaa020
- SHA1 f91ddfa4299cc109497598453d487e82c0cd644d
- SHA512 1bdd344b92827ecbd7409271e85706281cb9e17d21405b1276604b172eff39b21cb7febb815d0e0c57bf7de5ea0aca5ff084f7ab95adea1d2ac05cfbdbeda564
- SSDEEP 196608:pPOCtpP1damxS+ct0xpRsEUsVP/oatdK9A6sPtD+7h:JNdamwFU/o3iZ+V
- TLSH
  T1A0A633A5D3D1767DE6DD13302CB64261FA138C6D9A8A33C53201B731685FB919FBA80E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\05. ...And We Shall Sing.mp3
- Size 13.8MB
- SHA256 50b22ce2d1091fbeb6befccf2c6a7e5b9704a82c30125c2612c400e0700d7c97
- MD5 6f79d12f6d224baad474c508cf061f42
- SHA1 f1a2bde42fe30c97ed3b80ea4a6d7bc5204138c5
- SHA512 8af21af4fe2462b7400998fdebb0591e2510a389b2a8fff9ad6aa8ef56ecbe99ea7a3e24eb71df7e4a219500f352f86dff3401344a21ea081b06f5f125143d45
- SSDEEP 196608:6BghiK39aTPmUU8LISnXRnA6/TWYnfFCgh2OM8apca14L+p:6mhiK39aTPmJQz5N70pc64L+p
- TLSH
  T1C1E6339AF3A5B536F1F81BB9DD76A640F30388BC6C6D138196847B308A9B705CF65C06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\06. In Blood and in Earth.mp3
- Size 16.4MB
- SHA256 a176af058b3f6fcdb934bf5d84cc7c50b79fd9c5bb7afec83115f52d89b02ea5
- MD5 656614fee71b41f6437a74f343b254e7
- SHA1 9961e26bc4ee93b32ae6ca4a707156a98e3546f1
- SHA512 f1a946cf4a36e547d46c8c6bf3d51ed6fee01ab8c55b270f9994fb2e1fc793bbb4ccad4d000e5fdc9580dbb2bac3a28710dc031f634a90a2da2b22fcc9d6fa28
- SSDEEP 393216:AQmZ7a+zcVPPlkYjNyedA7+uOZgGskwCF6tiIiAU:lEaLlWIgGskbF6zi
- TLSH
  T1E70733CAC331B9B9E7EF0B326CFB3250B64389ED3C1153C5AE55B370556AA541E26C0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\07. Den Nacht Zijn Lied.mp3
- Size 15.5MB
- SHA256 93480da8074020cab87021e61b2d85de98f8817148e5ad70ce291a7f2996ad2a
- MD5 410444525b56fc249a67508dbc7a7838
- SHA1 45c507f26ca61d3893c6ffb37f0d209e8c525706
- SHA512 076119876cf710326337bfdd562c1c2022a2b0193f7ec959e9c7d9b2c0cefbfe45f4f3dc900e85366fe47b7376f71c0a2a1a4525ef2a9ecebd661f189ae1436e
- SSDEEP 196608:YG6nM5R8S8R0qDVkF+kZWj5Ymm2w6qejAUufk6RcaVHrFnrHH+HdY3SrbxCd+ZSV:Y5ni8Tm+lGLKAUufy4rHeHdYCrbMQSV
- TLSH
  T12FF63396D366FB7BD2AEA3726E774540BE030DAC99A113C02790F334C875A84CF65C1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral15 behavioral16
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\08. View From Nemeton.mp3
- Size 12.4MB
- SHA256 ce83edf57f07212df907f0f16ae920f4f20f032a4110ab4f34c375cd6253a2ba
- MD5 94b09338d7c2899b3d2e860027efe1e1
- SHA1 a46cd575a36ac713253c2785d2b97efac9bd9406
- SHA512 a985656d84fd94f70132f0723867b5e8eca8d02fc13420d4ad6a0f2db19ae6acd6a6139348b91930059fd25ace6b9b3746937c2fd9226b0e5de4eb7d0e1461a4
- SSDEEP 196608:iL+ZcsyU4rYx6vfJvGz2a2Nbilc8yv2w7XwMRRpeCii3GrkNbS5:s+Z8YMvftGz2avoOw/pWRk5+
- TLSH
  T1C1D633DBFB21BD72EADE47718DFB7260360BCD79B84953C4B580B37009712889E6581A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\09. The Glow of Dawn.mp3
- Size 11.1MB
- SHA256 03d59529692ec2db459369086285173e71eafb0797966a1a6234aa776fa61f36
- MD5 efd3edce7cfe745a04eaba249af0e5f6
- SHA1 1f20f14d9000f79593a5df8bb0e6427d02ccd300
- SHA512 4e9fad255e2125e29345a16a8202378d582ba65d280d805fae7ccd4b7ffcd2703be11000156f267a3efdad753d4311b8e84457d9486a5a43f1b3902ae5fb41c8
- SSDEEP 196608:bC8T5TVv64C2hCR9qj1cWsDSbas3d6h8G0upYb84:fFBv51tj1xnb5hBu2
- TLSH
  T1CAC633A2E2247235E7B126B76CB73000FA230D6D6C711BE47511B2714AABB54AFF7907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\cover.jpg
- Size 402KB
- SHA256 e9b9d6baa8c7952cc4b87a24356cac7b5bfe62e17c9a19237c6788fdc3944fd6
- MD5 90ca2f2eff60fc0361a82cc32434e33b
- SHA1 4ae268f16e18ae1088a24469cfe7d40ddf797749
- SHA512 64ff6250672af8b159cc1bcccbbf5d2b84104f5ddd382bbc554bcbb0f8811c351867c261444ff7de486b5d54aabdf384b5a44e06674e948d9cbf84aa5002cc56
- SSDEEP 12288:8W/Tac5KsHYU73UtBevqmECPmi6Rd4dDpr90:pec5tHYUIfe+CPpDD0
- TLSH
  T1CD942335DA7145C60BC8EAEC6677DB3F822791A172FC6670049BDF807339DA8853468E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\★ READ ME - TakeMetal.org.txt
- Size 470B
- SHA256 35cd8ae4857934c2f66270d8ef951c5f82c3dc90155641fb1e946ee584cce142
- MD5 935e5394033693d3429d1af5b76be37b
- SHA1 43f8827c9faeeceb88820d3dbc859ccc1eba4484
- SHA512 c933792c3689e3663b6c74d1a8231c96ae6feec1d71ded59172654ab5404f1c5c2edfc45540027a530b4a33b70002d3d94e9daae413f28cb46d2dd5b69d66c8b
- TLSH
  T11FF0A77FC16050119050871582AD10EF6F15A507B5A1C8833CEC0FD123533DE914800E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  [TakeMetal.org] Hulder - Verbolgen (2026)\★ Visit TakeMetal.org for More Albums.url
- Size 95B
- SHA256 06e30b890eb1b4fd373d7bc05fe1e8480a9bc2376424c24519d0287181f5879d
- MD5 2c308717548d4140504f3c746cf47f52
- SHA1 7656e899e5818306fe3853387014db374834061d
- SHA512 cd61a2bb00d826fdb0496a707993d554463f054760da78138fcf7ff60615597299158e7d53b617067bf273e9a1940aa120aa945e82f693e9eb9aabb0fdc914bc
- TLSH
  T1B0B012B34F1D80B0C2530408457C8CACDD513094FC6DC80596C14EC88C8605506CC500
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

Drops desktop.ini file(s)

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26