ccff9d6c46e4d4eaec9f3e47d0ff16a8eea2303b860261c3258dec0b79cf1450 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

99%/connect/README.md

windows10-2004-x64

3

99%/connect/README.md

windows11-ltsc_2024-x64

3

99%/connec...13.pyc

windows10-2004-x64

3

99%/connec...13.pyc

windows11-ltsc_2024-x64

3

99%/connec...14.pyc

windows10-2004-x64

3

99%/connec...14.pyc

windows11-ltsc_2024-x64

3

99%/connec...s.json

windows10-2004-x64

3

99%/connec...s.json

windows11-ltsc_2024-x64

3

99%/connec...g.json

windows10-2004-x64

3

99%/connec...g.json

windows11-ltsc_2024-x64

3

99%/connec...g.json

windows10-2004-x64

3

99%/connec...g.json

windows11-ltsc_2024-x64

3

99%/connect/panel.py

windows10-2004-x64

3

99%/connect/panel.py

windows11-ltsc_2024-x64

3

99%/connect/patch.py

ubuntu-18.04-amd64

1

99%/connect/patch.py

debian-9-armhf

1

99%/connect/patch.py

debian-9-mips

1

99%/connect/patch.py

debian-9-mipsel

1

99%/connec...ug.log

windows10-2004-x64

1

99%/connec...ug.log

windows11-ltsc_2024-x64

1

99%/connec...ole.js

windows10-2004-x64

3

99%/connec...ole.js

windows11-ltsc_2024-x64

3

99%/connec...e.json

windows10-2004-x64

3

99%/connec...e.json

windows11-ltsc_2024-x64

3

99%/connec...tch.py

ubuntu-18.04-amd64

1

99%/connec...tch.py

debian-9-armhf

1

99%/connec...tch.py

debian-9-mips

1

99%/connec...tch.py

debian-9-mipsel

1

Sharing

Copy URL Twitter E-mail

General

Target
trezor connect.zip
Size 26.1MB
Sample260826-bjfzvsfp81
SHA256 ccff9d6c46e4d4eaec9f3e47d0ff16a8eea2303b860261c3258dec0b79cf1450
MD5 f0a0fda5961c476eba403166656199b8
SHA1 aa61ff167ca62723c1d0bd2a83fb01b49a935364
SHA512 2aee16e6e40c99422e1ae6f9826fe1bd893ed7e986b2a6c9048d5cc90919eb360b31bc431477dd41ba0f92527cd913270e9710849e85e5eda9f3ba3c549468a4
SSDEEP 786432:GCekhEO66mjqtc5oxuGK6BOFft6tUfOET7TvtbRdNwT:GHO6Vyxu+BCfo4pPTHTs
TLSH
T16B5733DC59634F2B10BDCE9C2DE2FDC9256348907499CCB042F496C9526CBD09CEBE6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Static task

static1

Behavioral task

behavioral1

Sample

99%/connect/README.md

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

99%/connect/README.md

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

99%/connect/__pycache__/panel.cpython-313.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

99%/connect/__pycache__/panel.cpython-313.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

99%/connect/__pycache__/trezorconnect.cpython-314.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

99%/connect/__pycache__/trezorconnect.cpython-314.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

99%/connect/active_simulations.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

99%/connect/active_simulations.json

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

99%/connect/config.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

99%/connect/config.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

99%/connect/eth_pending.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

99%/connect/eth_pending.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

99%/connect/panel.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

99%/connect/panel.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

99%/connect/patch.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

99%/connect/patch.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

99%/connect/patch.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

99%/connect/patch.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

99%/connect/simulator_debug.log

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

99%/connect/simulator_debug.log

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

99%/connect/trezor_console.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

99%/connect/trezor_console.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

99%/connect/trezor_state.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

99%/connect/trezor_state.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

99%/connect/unpatch.py

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

99%/connect/unpatch.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

99%/connect/unpatch.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

99%/connect/unpatch.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  99%/connect/README.md
- Size 1KB
- SHA256 de9176f3f21fe22b74f4fc24565861a4a72c2bc82312aa9f131612a1ef7b5263
- MD5 30382253d22a945c5df584122e4515b2
- SHA1 6f0fd209a020c05db3c28e93db6d22c916cfd039
- SHA512 54a012da10e25fdd1cd5e1dda3d02db21f2c16dad7fb4d76d12521c723512003f6206e8301de2c62958700bbc0c2dfe1907ba8b319d9a45dae651557f8008c27
- TLSH
  T1E011DD407CABA2300BA5C0ADCACB7A00F4429884E3465C66606EF47801A1BE9C26F9C7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  99%/connect/__pycache__/panel.cpython-313.pyc
- Size 242KB
- SHA256 93b1d2ebda1fe0a90d20474fd3e344660c2fd81f3ea1208d9e28e907f93ae5ee
- MD5 abd4e72b401c2dc55954fd741862df31
- SHA1 327b78b367d533f2de8e6e8ac32170cf57f5cd3f
- SHA512 aadede8bc98b24e6e2c29f9a9335dfdecf14eab5bcd3366740bf40151a8f4bfe780b2cbe11de46ed5d22ab951a32ece0af1e63469d3e9128ec8759e042b9a6d3
- SSDEEP 3072:7hMs810qWOi7evbI5VcDwiDBlHyjs38PUXvkC1naNprDEilkFu+xAM:72s810Ai7WbJwTs35Xt1naNpc2W1xAM
- TLSH
  T11E34D54AE6306953EF64F07540EA4904F3AEAE86B250C777211F42346EDBBBACD6534C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  99%/connect/__pycache__/trezorconnect.cpython-314.pyc
- Size 204KB
- SHA256 590c93db366edf9b11ddadb7bd32d19dbdaa9c9d0e61eb32f42e02370cb9abca
- MD5 62fc26023274879540341f4cfdf14e71
- SHA1 dc2c400a8e9245e7c0fdb02351b5a84609897526
- SHA512 5bac23f09067bced2141af2d6c96c8c7b6d579b3c3c961bb1d18ddb27765d974a22f3a9226e1dfe8e3a2fac519a41ef2bb127552639a21427386644b07d3fde3
- SSDEEP 3072:5CvvZo8isrOrASO+OQ/PkylXEyzB7fO89yTNHTV6b:qAsqkiZrUSB7T29Tkb
- TLSH
  T1A324E8789A64A96BEDC8F17831D29CC4E722C2857210DB47E038DCB9BDCD755AE9031E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  99%/connect/active_simulations.json
- Size 1KB
- SHA256 b0e93535baa28eb5f48f9073cc04341caebbf36594ca65bb656542cf17066cad
- MD5 a56704c8f03a028c22202b4f7aac4019
- SHA1 e683d3174dc9c1f6953be8e8d8aeba0bba5501eb
- SHA512 d28a1a408bfd0c7c24a48f24049a9ea53337222e558a15a21ec69f8837190a5e0bf882a48fafcf02ad25330fced85d819437d29e5cb92e847f89c82789957190
- TLSH
  T1EF21D265FE25BD3312DE67211C3207451D3641CB903D1D2E9D0A6B31E6982BFE99BD18
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  99%/connect/config.json
- Size 140B
- SHA256 21d60ad77013fab8c97d4c54e6f14c64b5156b50946d88ebe90539ba0a4c84f4
- MD5 0adffa148711c284780aaf5000f65b50
- SHA1 3604741650c8c9268b2b95b3258128d3f3cd1222
- SHA512 970d6970250cfbc6bda60f1be880ccc600584e1d7459d9ed6363eefac51dd5cfeeed3ff7a0e8a3fe6855ce6ea731e4f5534d1ddc1f4b7526e14449e57c0ac5d8
- TLSH
  T16DC02B00C8300EE3E0F9F0CEBC053AC042124B4230F00C07377F0E15064F9014413714
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  99%/connect/eth_pending.json
- Size 378B
- SHA256 06c552b2538b4d172342bcf0e4af8eac8c777239b93dfb7e5a8916ac04f18314
- MD5 b689d4b639874ec0db47f53796b222e2
- SHA1 f7a24337990be02f40c4f9f9448ec997f45f9d32
- SHA512 7b50dae3eacf50a99185211bc8c08778ad6419055fd3b3b9f4eb73880e7b86ca2c55732768a63d5d2ea4d8ce410c8fccbf54f7f6533a8754edd96875060d6772
- TLSH
  T155E0D81879150067508BF7795FB20E632665FE5C50805913A1C0EE45269ED64CAD30DA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  99%/connect/panel.py
- Size 191KB
- SHA256 aa8c895c654ce709d66daf735a85bcd41f28eb1420bad43872355f68c700a03f
- MD5 360d001fbfec593fe29d955adad2a526
- SHA1 9fb5a5f83426127b242f2e256a650fe4f17bc93a
- SHA512 7faa032d489f441e760e82a70e642d6130013d6199270473238f7b0970b58ec61ec674429662ece3cef62eb6af986cfe7234affb9d1371da33c7b1794687f2df
- SSDEEP 1536:hdM4yLUm6kS8rpvhJnmsaj1xVECzo4HphAXFQrNcT1FMH3h:9yLUm+cnvafD46h
- TLSH
  T19514A426EC1E7402C272C11C4C5BC161F36657C792161693BDFCC2A8AFB4AA2D2F57AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  99%/connect/patch.py
- Size 6KB
- SHA256 316ccb3eebf29a13e5baed7a2c1a2a599a42b7bd9734d896882f3a93497beb1b
- MD5 99f4de34622cf5e443ee686b2f9e9682
- SHA1 9d55a713f3ba902d00aee8f9b4ef7f64e05e0b80
- SHA512 feda3348c5e391ab702b7841d70816aeddda94599b97489000fc3865e5ff4dcb76bbdecfd0f6e92c3be07822fabb29159d71734117394faa55e61319b1da70b8
- SSDEEP 96:tG3K+V3g8t7ZH7Q7OXPyo0L/wgMM+q5AwdzphSGiZw1k5JOCDeyA:tIKQQ4dH0hoc44dLSdZw1k5JO8eyA
- TLSH
  T163D176829CD7682293C3C5EC5D9280D5F605BD17055A7C38FD8C94A42FA92A9C3795FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  99%/connect/simulator_debug.log
- Size 461.9MB
- SHA256 d11988adaff1ff4e5e6aa69d0b22b243a3f734342b53eaac6f544df4bede508f
- MD5 8ca993e2941bbff5d0943b6f1dc37eac
- SHA1 abbfd65fc5fac1ccf3375787abd98c906e9322d5
- SHA512 f3aa25c379757b64bb6a1cf228b7c1c02d300c9b96333c5f8b9be3be388ee5348dfaf6395db48614df45a809c4d7ee58a5a4b199e8e54453bcca1678fa6f05bc
- SSDEEP 49152:mO2OkOFOFOFOFOiOiOiOiOiOmOVOKOkOkOVOkOkOLOqOcOWOWONOWOcOym:J
- TLSH
  T187391FE2613E7633AAE60391E5359D9C6CD3B3A21A000D987B50451F7E6CB0BDBDF984
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  99%/connect/trezor_console.js
- Size 384KB
- SHA256 3ed7a55a68862e0f65135a6813862d8ad284f11a20f7bbd32e1b2741b60f5a96
- MD5 6e39c89c5b3e5c017cede4a7633860c3
- SHA1 c7b88ae4afa77e54237ce4f1af16cf17e9d67b6b
- SHA512 9ebf830b25aa0fde717d38f23cdbf9bae81a64632a0a182a27fb070f221cf76c1ab183aa9fddca53ded8e643b183129593c3a04133ba92a2895a48470e3e14fb
- SSDEEP 3072:VS0th90JQoFcKmbn5mCp/mYqH5hkLAXF3MQfwvuyoMbTx6l6vhL82ubZSMMue33E:Vlh90JQoOcV4aV
- TLSH
  T17484E66AA8E7303A492361FE4BAF1159727A8097850BCD243DACD3686FD0C7057B5EF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  99%/connect/trezor_state.json
- Size 12KB
- SHA256 f35c1ef638f98645be92ebbc57a67f8fd352b8985ab90e74c063a538aa9c038a
- MD5 883802cc675cdf7980f137a0ef9de01e
- SHA1 5d01895017be491b4b44fc7a8c94750adcccbc49
- SHA512 9085a89e8928f470c397217161a4c4492d5dd7364b613a167b4278ffd10225dbe4698bfd30b3ddfb0f9d85371dd573352fcd261a1417821a52e740a483babb94
- SSDEEP 192:uiNwkxlzUwLZh/0Hyq4Sz3n4VOwuhY2AkIQ0/BHAo5wceamRWI0K9YM:CkxlzXHwz3nWu2lZ9BwZam4I0PM
- TLSH
  T106424A27D96FADD9DDF00AA96919CA16F46763AF07240C8F32BDA8AD0F72012D08147D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  99%/connect/unpatch.py
- Size 6KB
- SHA256 5fcf2a4203d1f4029eb80a38807d7eddc11d4142917c8f2843be14bb60f44ab2
- MD5 a7706123c2a72cb2f09b2b4759d51ef8
- SHA1 0e89abd02e01f7ae507978f059ae023ef5e39bfc
- SHA512 ba4673ceb8ee79a3b5a22bb683798fa819e22b26f93a1af84814eaac54ba6f94688f6037cf489bfa28dc41c9d172081b15454b2c612a93e34fd2826903157833
- SSDEEP 192:j1G4dH0hoc4E9Khgx95EQxjO4ump99leF/dJ3pA:j1zx0iA8Q
- TLSH
  T144E18781CCCAA412C7D390ECAD938051BB0D7E17061A7C24FEDC94E41F691AED3785AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

© 2018-2026

Terms | Privacy