253fde0cb4d2e591fa6e2267ced1192277611c4a6c59c978bc7eae335bd1e1e8 | Triage™

Login
Reports

Overview

overview

7

Static

static

7

Thief (201...r].exe

windows10-2004-x64

7

Thief (201...r].exe

windows11-ltsc_2024-x64

7

$PLUGINSDIR/Aero.dll

windows10-2004-x64

7

$PLUGINSDIR/Aero.dll

windows11-ltsc_2024-x64

7

$PLUGINSDIR/Delay.dll

windows10-2004-x64

3

$PLUGINSDIR/Delay.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...rl.dll

windows10-2004-x64

3

$PLUGINSDI...rl.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...l.html

windows10-2004-x64

3

$PLUGINSDI...l.html

windows11-ltsc_2024-x64

3

$PLUGINSDI...d.html

windows10-2004-x64

3

$PLUGINSDI...d.html

windows11-ltsc_2024-x64

3

$PLUGINSDI...l.html

windows10-2004-x64

3

$PLUGINSDI...l.html

windows11-ltsc_2024-x64

3

$PLUGINSDI...flt.js

windows10-2004-x64

3

$PLUGINSDI...flt.js

windows11-ltsc_2024-x64

3

$PLUGINSDI...l.html

windows10-2004-x64

3

$PLUGINSDI...l.html

windows11-ltsc_2024-x64

3

$PLUGINSDI...oll.js

windows10-2004-x64

3

$PLUGINSDI...oll.js

windows11-ltsc_2024-x64

3

$PLUGINSDI...pl0.js

windows10-2004-x64

3

$PLUGINSDI...pl0.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Thief (2014) [CentralDeTraducoes.net.br].exe
Size 1.4MB
Sample260823-afcbts1ckc
SHA256 253fde0cb4d2e591fa6e2267ced1192277611c4a6c59c978bc7eae335bd1e1e8
MD5 6e2b777eadd1cf2de6eb5678f5c7f0cc
SHA1 f5c6f48e367e1c580d0d370deb4f7f8c9edfa3c3
SHA512 74a99bde65295d8c7a87bb01cae2fdf3f9b0ce6654cae1a0043aef19d93df2823b4120f8b85e947823414b29f6ef83e430e0d5051535d598cd8342fc5fcb0a6e
SSDEEP 24576:beraO8sglxtBJQrIp1K/rs7BNqTVMuZfPlwejNrCWR:gjgXNQU+TsVNqTVVJtjNrPR
TLSH
T1C465E9208EC1E55FF33A987AA5F9DE04EA4BE91C6E0A04D29F7FD5A5137876C04B2113
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution installer upx

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

Thief (2014) [CentralDeTraducoes.net.br].exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral2

Sample

Thief (2014) [CentralDeTraducoes.net.br].exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

300 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/Aero.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/Aero.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

300 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/Delay.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/Delay.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/WebCtrl.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/WebCtrl.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/newadvsplash.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/newadvsplash.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

300 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/scroll.html

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

300 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/scroll.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

300 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/tr_data/cred.html

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

300 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/tr_data/cred.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

300 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/tr_data/legal.html

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

300 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/tr_data/legal.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

300 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/tr_files/scroll.dflt.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/tr_files/scroll.dflt.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral23

Sample

$PLUGINSDIR/tr_files/scroll.html

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

300 seconds

Behavioral task

behavioral24

Sample

$PLUGINSDIR/tr_files/scroll.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

300 seconds

Behavioral task

behavioral25

Sample

$PLUGINSDIR/tr_files/scroll.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral26

Sample

$PLUGINSDIR/tr_files/scroll.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral27

Sample

$PLUGINSDIR/tr_files/scroll.tpl0.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral28

Sample

$PLUGINSDIR/tr_files/scroll.tpl0.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Malware Config

Targets

- Target
  Thief (2014) [CentralDeTraducoes.net.br].exe
- Size 1.4MB
- SHA256 253fde0cb4d2e591fa6e2267ced1192277611c4a6c59c978bc7eae335bd1e1e8
- MD5 6e2b777eadd1cf2de6eb5678f5c7f0cc
- SHA1 f5c6f48e367e1c580d0d370deb4f7f8c9edfa3c3
- SHA512 74a99bde65295d8c7a87bb01cae2fdf3f9b0ce6654cae1a0043aef19d93df2823b4120f8b85e947823414b29f6ef83e430e0d5051535d598cd8342fc5fcb0a6e
- SSDEEP 24576:beraO8sglxtBJQrIp1K/rs7BNqTVMuZfPlwejNrCWR:gjgXNQU+TsVNqTVVJtjNrPR
- TLSH
  T1C465E9208EC1E55FF33A987AA5F9DE04EA4BE91C6E0A04D29F7FD5A5137876C04B2113
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  $PLUGINSDIR/Aero.dll
- Size 6KB
- SHA256 ab864a3c247e9016414a4a8b26155942b7c3814cc99be6a59b86c456bd22c061
- MD5 5c7408c25f1076eb96908e5bba521bb5
- SHA1 46df8dfd93593360b9b6d2e4ab1892843246228d
- SHA512 9eebf8378a0eab0ab66e70f20aea185392ce0de36e63a37c07ccd93a5d1d8fe95a2ed8c428c63d6aa8c0a5b424e53e412fdeb0e5be2ee57f9eceafa19e03062c
- SSDEEP 96:+k+RX2Fg54iQrKWX09fODXCPbnV767ZJG:8X2FA4iyXNm7Ve7ZJ
- TLSH
  T1CDC1E806B7F95128E8F602379A754B06313EFC50CEBD4B9E194C2116A9B0058DA25F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  $PLUGINSDIR/Delay.dll
- Size 7KB
- SHA256 b6691bf37f13e37bfc07d45990092fd9398f7eff8cb1bbad05e528def0307c4a
- MD5 4602d9a9ed82d646522ead08a58536a9
- SHA1 b070bad90e13e85c97bd4e530ca7958c22e36a5a
- SHA512 5ebad4e83d411799a25b1e462ac3c7683dd0c973f131eed29131af7a240f92f55e6c60b78f96388bf7c4134941353794d79ef6c91476e8def7e5c803544afec9
- SSDEEP 96:fkcYhKlqWFeJ9DekCN3jPpP4DyGE3qLNf:cXKMJRC5BfGE3qLN
- TLSH
  T15EE1D63777C242E1E44F17B2279A23B35E347A10534485BBC6ABD8921E9322BCC76B47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH
  T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WebCtrl.dll
- Size 5KB
- SHA256 f7e1e03c140cc86bb7b259f1882b4b461128d70213e7f030360a9c76d6c51884
- MD5 f134448c6531c16271d776cdc930cff8
- SHA1 6fa6ae69ee46486b33b41f08719319aca5d0382f
- SHA512 c83db0d30e51d5dba4fe4abab562fde9358f9970b32aef729f326f394e744698b936b134e8718afd9a2ac970daf287278b2685b77566c50f733f58897fd0c16d
- SSDEEP 96:EPR9lrwXckwd7NLLd8e1+A39Lji7juoxiApV3ii:EPR99tZd8e133xjkuri
- TLSH
  T1FCC15273ABE189F0DA01A43E009625B7EAB5D81B47C180271E6BDD6B3D438ABF665341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/newadvsplash.dll
- Size 8KB
- SHA256 53377d0710f551182edbab4150935425948535d11b92bf08a1c2dcf989723bd7
- MD5 7ee14dff57fb6e6c644b318d16768f4c
- SHA1 9a5d5b31ab56ab01e9b0bd76c51b8b4605a8ccce
- SHA512 0565ff2bdbdf044c5f90bd45475d478b48cdbd5e19569976291b1bdd703e61355410c65f29f2c9213faf56251beb16d342c8625288dad6afc670717b9636d51f
- SSDEEP 96:qD5UDaGxZH52QhtZafDP9BTS9nPg83UniV/zRzGEl1DMl1zN6LmeYt4dO:W5UDaGxZH5T0j+9nl3BzG0IZ6LqN
- TLSH
  T1A002E839618096F3D26F15F45882AB1D4BFAE074239290324F73A1EA6DC0297FDB6347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- TLSH
  T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/scroll.html
- Size 39KB
- SHA256 97a1e3fc25939eacfa8e45cd4cbe9dde777bea2dd950ca65eb438afd4e7f9023
- MD5 c81b0d5d2e51fb5dd6980bfeb78c442d
- SHA1 aae98e57601b9c89ac46d342532e89cdf1efe4db
- SHA512 3105e84b68d19b9a3e40586fb562d3c1aa28a2b020b79f5636f9d8e5ee48902d6265c3d9f3185bbf805aa8fae2bce8ad78724f56217601c3ececec02dd420aff
- SSDEEP 192:qo78T5eH8IniRcLGPUvm1ETK5o50NSZE+D4r43YnRY5zgkkS+UGYNs9o/QzHL6SU:qo78TvXojY5OAVFiN
- TLSH
  T1C5030944F8905E577372A2DA7F20E8F05F6B9278C8090657F0E4F65A3883C69E76352B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/tr_data/cred.html
- Size 75KB
- SHA256 0e2061a796b4ae287a71684f54972441dddb5b834efd96a950de0c59e3ab12e3
- MD5 34d7379cb754644106f7d2789b6b4f10
- SHA1 18f90a245c2bde33e66d5b408d71d61f91ba9b0a
- SHA512 f1269941a16cbf3b1d0fcf7d6acc4e9afb5628bca95cfe77c290cf5f694a4378a2f2008921c629f90e5c4c878afbc9a440e5fb11ac437f53546bb6672cc0128e
- SSDEEP 1536:Zol57mtSwNOXRQpHfpwpH3QubwuyluJucuZuppudz+Du3cxau6uKuzLu2f+B+MuC:ZZ8bpycYNIp4daisxLrbG2mEd3R0WIdP
- TLSH
  T1EB73FF00E1A41D573376D2DA7E30E5F06A9652B8DC060747F0BAF2A938C7966F71326B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/tr_data/legal.html
- Size 26KB
- SHA256 228cd4bbb92734f1ee76daf0cded20902fb9b7d3ebff857f21ba60a798f3a511
- MD5 2e524a71ac033c0619db0594856ba6d5
- SHA1 450941553b685e48d6fab7b601b4d940ec73337d
- SHA512 444a7bd0d4a2e11675a7b43accda32932b16b727ff31daff56293014d37f0f081480c32034db9603999e7d3223c4407f67b05af577a66e17e3a3ee0df1c32ead
- SSDEEP 192:e78T5+KHxCHoN+TEMBSX4dOjUNOKi7KRd6ITKzLHxvXtX5GtAPCJza2Aq0Faemkd:e78TsujY5c5zJAWoJxly59V
- TLSH
  T1F2C2CF44F8944E4F737262DAAF10E8F42B5A9574C4060797F0E5F6093C93DA9EA3326E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $PLUGINSDIR/tr_files/scroll.dflt.js
- Size 171B
- SHA256 fb295cf92b819f9e7d95b62495aeb15e12cd3291add18093c946184127411984
- MD5 46903025390c7274e546ddcf50526cfa
- SHA1 c8cf17d978275fbeb42e040bb0538d212ce28654
- SHA512 94230f5826b8ce67e0b914687224387fe31187c59ecb20e6f1ad8189e6d3bea76de3c7f505b0c2373b2b5c37257e89a3db6d9c544b5b19cfd2c67995968f3ba2
- TLSH
  T10AC08CCB736D666944CAFAC09AF0CEB16908F93CC6C114AB39F0650875E049FAC76540
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  $PLUGINSDIR/tr_files/scroll.html
- Size 4KB
- SHA256 1d55105e632396f76b046513f1805f8144b8d2dc2a0d75dd78b37cb771be705c
- MD5 fa5e9eb978e1acd9cb8e6cbe2ba76510
- SHA1 a08920b5c81bd559a859757f6555863b1b0b804d
- SHA512 8a156d805f20029ce06e9a78922f21410c0a2b99ec6b9f7d8c26bbc69efefa221c8c9c3c7264a544405eaccac54c259ddeb77384b9ac826720d60ee5a3ef1757
- SSDEEP 96:QD9KskjS+e0nOJOJ3nctYcoUV1FzTOKKInCBsHSM4imf2fy:89LkjS90nmm3U3PFPOCnHmf2fy
- TLSH
  T164A196311F81557A9109F32CBE3AC14CF4749329D883B806A87C98E05BD1EB95ABED7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  $PLUGINSDIR/tr_files/scroll.js
- Size 641B
- SHA256 83c74fe20d8cd134c900bc18231311a307fe9d40508bb0a4a3c008333f4755bb
- MD5 451adb9f6bed8859cee8ffe17a356dc6
- SHA1 7606b460525934d666b19c6159167016bfa4ecfa
- SHA512 db4fde5819bef93f4c7709aaeee6ae79c87ae6d8283f408fd420847495ef618da5313b71e2da4afd6e3239b9d6e184856a8694ef201b3cc2d9de08074a6cfb2f
- TLSH
  T136F0DD46BA7C1606058E53B2F56C8515309EC3A7F622E6144E4A6E2419807FC4FE7F3A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  $PLUGINSDIR/tr_files/scroll.tpl0.js
- Size 1KB
- SHA256 d61df469c5484d3c20ad027e741321dd1921285142cc8acf73cf363d7798e310
- MD5 39133e190f144254ac4a3ba40d8863a6
- SHA1 adb69965c2f4b76b10d029761e5eaa60dee10a5f
- SHA512 1c877ed7c7d76d858f79e1058181b4e77ccede55f782118f1c189dfd9d1a45e6c610154270f026c7c83fbbcd79e3fd96d3d12a3890508e9e420475a38157f36d
- TLSH
  T17211AF77338090742748A5A55979E550FB04C0BFC62A353AB9188C7C6481F6A94FBB26
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

© 2018-2026

Terms | Privacy