dbbc2c2b941e256942abe52ac22e725b5ee141ee4b88c9bab1c36a8015a4236c | Triage™

Login
Reports

Overview

overview

5

Static

static

1

debian/epg2taste.sh

windows10-2004-x64

3

debian/epg2taste.sh

windows11-ltsc_2024-x64

3

debian/get...hot.sh

windows10-2004-x64

3

debian/get...hot.sh

windows11-ltsc_2024-x64

3

debian/pat...te.bat

windows10-2004-x64

3

debian/pat...te.bat

windows11-ltsc_2024-x64

3

debian/postinst.vbs

windows10-2004-x64

5

debian/postinst.vbs

windows11-ltsc_2024-x64

5

debian/postrm.vbs

windows10-2004-x64

5

debian/postrm.vbs

windows11-ltsc_2024-x64

5

debian/rem...ent.sh

windows10-2004-x64

3

debian/rem...ent.sh

windows11-ltsc_2024-x64

3

debian/rules

ubuntu-18.04-amd64

1

debian/rules

debian-9-armhf

1

debian/rules

debian-9-mips

1

debian/rules

debian-9-mipsel

1

Sharing

Copy URL Twitter E-mail

General

Target
vdr-plugin-epgsearch_2.2.0+git20170817-1.debian.tar.xz
Size 10KB
Sample260822-vs87js1zev
SHA256 dbbc2c2b941e256942abe52ac22e725b5ee141ee4b88c9bab1c36a8015a4236c
MD5 915240d639eb7387f2d2c1340ccaa0fe
SHA1 3d34e6def7b3eddb872684e37918d3666726f878
SHA512 dc36eb7d004a46feb3884d0d825c2b4a89255e58d2c46fde947793c932ed9b94d79212dc136bfe7b1db0da193fa855ada380e7bdae357632981ca332870b07f6
SSDEEP 192:vSYy2FykixgBwv7R7umE84aTWJ6xCFzLDMlfg9knG1tsZBizHZTmxoaXAvrA:62yvmwv7VumE1ssfodg9kn+hH1tymA
TLSH
T1F722B024C4234307FE64999D8132207EEC93DBDAF31D47A625BBF5EB51B8056C68A01E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution linux

Static task

static1

Behavioral task

behavioral1

Sample

debian/epg2taste.sh

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

debian/epg2taste.sh

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

debian/get-vcs-snapshot.sh

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

debian/get-vcs-snapshot.sh

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

debian/patches/02_disable_po_update.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

debian/patches/02_disable_po_update.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

debian/postinst.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

debian/postinst.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

debian/postrm.vbs

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

debian/postrm.vbs

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

debian/rememberevent.sh

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

debian/rememberevent.sh

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

debian/rules

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

debian/rules

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

debian/rules

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

debian/rules

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  debian/epg2taste.sh
- Size 619B
- SHA256 b27f31f883c1aa43590dce22d2c02b5b81001bb7b7096c85060dff0995335249
- MD5 7b60fc5cd709c244fe79e649e5c50862
- SHA1 6fd960109862b1e235d90bcb380804c83953a1ff
- SHA512 80aa758e72c0c2d747e6c6507a403fdca2d5fa838f531bd5bfe9cde0294dc302264dd18c5fb6b3f9ce18b231b1a3a4439f33d5b34740c34928d4f108af3fd72c
- TLSH
  T15DF0D8E153EF3568E82763217318A61D30421AA87958AC287A39A9FDA069A01032F9B4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  debian/get-vcs-snapshot.sh
- Size 716B
- SHA256 b1d0df3eecc41e7e058182527ced6de43cddb95bf13d0dad6f334f5823a46d93
- MD5 5516ed62f9798723ba219815be89df62
- SHA1 af3124efe4b5b829b146a00736229e7a53600f76
- SHA512 4e815503e0a0b401ad5e06dc52032ba6f095c6fc4637b1ca1c596e90082bb67b8788a6629612bb6bf11f1085068bc7096e0d55c79026faf6ee26b74a7d32332f
- TLSH
  T1C7011B33812544B3118607D336EAE6223B974F810347C82ACC4C642EF2E2F85022E332
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  debian/patches/02_disable_po_update.patch
- Size 572B
- SHA256 5665fb32955befd97aa4343b2a7911926f27437ef9ae75f154660dbbf9ada07d
- MD5 4e3de7d91a878037bdf749769318a06f
- SHA1 5baf6c3857bf864ea5e66d44db8c02aa3069ba9d
- SHA512 b8166c17e2f685df2f8be95a266fc6db974ed4fa117a1b8ccd44e913ff832b6a2db691aee9ca55e57db49eb67498e025d76fabd3af1bc8783417032440be62ae
- TLSH
  T1B1F0AC62600231FD4682BE137D7EADF0F02B3A2B48140B6A58939B608DCB179DAD6410
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  debian/postinst
- Size 193B
- SHA256 0c56db760a3cc2a847f49cf416cec77598960f16451f0404fca54d1091524aed
- MD5 5ac441993475b1b961968d3bbe11adcd
- SHA1 603329a36c523d03006befe601044897bc0bfd47
- SHA512 af261381efbb5a97ecbe006264c7f2a54057e8b49162c53c1436b393d93a9970cbb9441261d0e0f8fdf860ed5e9503abd6f0fea2fd8a02c47354a1b0e6d1b89c
- TLSH
  T123C0222BA8CD5C1E3DF108644301B41619A903CE0308683E6230F1A4DA00E2201EC638
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  debian/postrm
- Size 150B
- SHA256 7c5fa63444966a53f832ab17808d0b505a49ecee65b34abc99d0b99c889f642f
- MD5 b2cfd39845f7e150e79f2a78771ce0d5
- SHA1 2b1ed2010fd91235415690b9a46095a33a086edf
- SHA512 a39efc15bdbbf8e908663cbe3fb29924caacff5d87ec29a27652082da2675441f38264a44752ff8385d8c1e25c6d75ab43a3d91bf4a12a66fc952c6e50df1caa
- TLSH
  T182C08C0B48CF0D822AF1180B26C2F16E20A907D813096C2DA03130E8B800522209211D
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9
- Target
  debian/rememberevent.sh
- Size 1KB
- SHA256 0a3f5a02cf9ff2f80b6806f96edcfb21dfe37c33ed78331417ae0fe50e39d26a
- MD5 fd9bc294515e6fffa083a7b6f7318093
- SHA1 49e9466969dd65bf558ea7ea2a3b155552934245
- SHA512 66a92c5ab7704317d13bb68f7ebfcbdd708bab5877385735010b49cea3a8e0b9f7d7ffe350d7fa59e614c225a164649bedeb8517ec576d4c3ef83824c31df862
- TLSH
  T1D9313351211C8260DC5414373BC2E34F2AC441AFE05CEC64786EFCA5CBB0ADD516D392
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  debian/rules
- Size 161B
- SHA256 39adcb13701f774adc4329563b268a4d4d21b6579ad08ee3e7b00da5ee2bb6ec
- MD5 60cae16c6dac0fd35b62a5a523347018
- SHA1 76c772fb2abaaf723cde06e28163ee28ba34fb35
- SHA512 f710074b3fbe0b6e74afadbef1a447f948b527eae85580618d33ca02cad7972521a99322eb40473d0333c9d4197e6cefdbff998a5b59d8539584c653132b376b
- TLSH
  T172C0228888C80B0008A020030E80828002A8ABBB2AA8F2A228A002088B8CB32200002E
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy