dde4ea4a3d9c30f0e8c88d760c6c749687216030ab333a593f92834e8192c620 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

setup_nwc2...er.exe

windows10-2004-x64

7

setup_nwc2...er.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ol.dll

windows10-2004-x64

3

$PLUGINSDI...ol.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ts.dll

windows10-2004-x64

3

$PLUGINSDI...ts.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows11-ltsc_2024-x64

3

$_5_/Arpeg...er.bat

windows10-2004-x64

3

$_5_/Arpeg...er.bat

windows11-ltsc_2024-x64

3

$_5_/BarCo...ser.js

windows10-2004-x64

3

$_5_/BarCo...ser.js

windows11-ltsc_2024-x64

3

$_5_/Brace...er.bat

windows10-2004-x64

3

$_5_/Brace...er.bat

windows11-ltsc_2024-x64

3

$_5_/Chord...er.bat

windows10-2004-x64

3

$_5_/Chord...er.bat

windows11-ltsc_2024-x64

3

$_5_/Gliss...er.bat

windows10-2004-x64

3

$_5_/Gliss...er.bat

windows11-ltsc_2024-x64

3

$_5_/Guita...er.bat

windows10-2004-x64

3

$_5_/Guita...er.bat

windows11-ltsc_2024-x64

3

$_5_/PageT...er.bat

windows10-2004-x64

3

$_5_/PageT...er.bat

windows11-ltsc_2024-x64

3

$_5_/Slur....er.bat

windows10-2004-x64

3

$_5_/Slur....er.bat

windows11-ltsc_2024-x64

3

$_5_/TabSt...er.bat

windows10-2004-x64

3

$_5_/TabSt...er.bat

windows11-ltsc_2024-x64

3

$_5_/Tremo...er.bat

windows10-2004-x64

3

$_5_/Tremo...er.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
setup_nwc275a_viewer.exe
Size 1.1MB
Sample260826-dxk7vaytft
SHA256 dde4ea4a3d9c30f0e8c88d760c6c749687216030ab333a593f92834e8192c620
MD5 7da2bca712311de828339baa2d837027
SHA1 fcf5c8d655f01cf169c3605d806a99a06745107b
SHA512 3819a779d3ab6fa97e0853d54338edbb5864177f60daef73c8800da67b64b5c4ba154688b5b33e7c5a21196cf328ef75ced4c5464b699358de84dbb9d8d6047e
SSDEEP 24576:skm4ZUbuwhjL9KoHD4OdeQxt9TfK257qh3pOMdalJwRg:yvPrhpxTp+yDJwRg
TLSH
T19A45234513E9A01BF9223A301AB7DB2AF7F89B15B1B34D1317039F6D7A787E9051908B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution installer

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

setup_nwc275a_viewer.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

setup_nwc275a_viewer.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/AccessControl.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/AccessControl.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/AddFonts.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/AddFonts.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$_5_/Arpeggio.ms.nwcuser.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

$_5_/Arpeggio.ms.nwcuser.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

$_5_/BarCounter.nw.nwcuser.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

$_5_/BarCounter.nw.nwcuser.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

$_5_/Brace.ms.nwcuser.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

$_5_/Brace.ms.nwcuser.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

$_5_/ChordPlay.nw.nwcuser.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

$_5_/ChordPlay.nw.nwcuser.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

$_5_/Glissando.ms.nwcuser.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

$_5_/Glissando.ms.nwcuser.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

$_5_/GuitarChord.ms.nwcuser.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

$_5_/GuitarChord.ms.nwcuser.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

$_5_/PageTxtMaestro.nw.nwcuser.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

$_5_/PageTxtMaestro.nw.nwcuser.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

$_5_/Slur.ms.nwcuser.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

$_5_/Slur.ms.nwcuser.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

$_5_/TabStaff.nw.nwcuser.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

$_5_/TabStaff.nw.nwcuser.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

$_5_/Tremolo.ms.nwcuser.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

$_5_/Tremolo.ms.nwcuser.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  setup_nwc275a_viewer.exe
- Size 1.1MB
- SHA256 dde4ea4a3d9c30f0e8c88d760c6c749687216030ab333a593f92834e8192c620
- MD5 7da2bca712311de828339baa2d837027
- SHA1 fcf5c8d655f01cf169c3605d806a99a06745107b
- SHA512 3819a779d3ab6fa97e0853d54338edbb5864177f60daef73c8800da67b64b5c4ba154688b5b33e7c5a21196cf328ef75ced4c5464b699358de84dbb9d8d6047e
- SSDEEP 24576:skm4ZUbuwhjL9KoHD4OdeQxt9TfK257qh3pOMdalJwRg:yvPrhpxTp+yDJwRg
- TLSH
  T19A45234513E9A01BF9223A301AB7DB2AF7F89B15B1B34D1317039F6D7A787E9051908B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AccessControl.dll
- Size 13KB
- SHA256 d52a83c2a8551cebf48ff7a8d5930be1873bce990f855ccab4d7479cfeb22e3d
- MD5 9e7d36edcc188e166dee9552017ac94f
- SHA1 0378843fe1e7fb2ad97b8432fbdcb44faa6fc48a
- SHA512 92c31355cd124ba28c0ff9aa8fa34d5db9db0b093edb8978bc3cf94e1f72d526603d5d5c1e221dcb2ac6648bc420f4df9847c2b1e71046384d827814a77d1783
- SSDEEP 192:y26NwF1FF8GqdxASZlSOnNGGPCqLXUdadWo2FfTCWWqDsYjGI5hBslft8gWNPjQo:I+8vwSZlgaJ3/4/4Q/bN
- TLSH
  T14C52B61A0F7C07FBE091163D2791263383D6C2096091971A5F924FD72C02ADB9DFD667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/AddFonts.dll
- Size 7KB
- SHA256 1aadf119af8261e4b2289c4f53e71576939265d8667ce040976dfb94bb45a74b
- MD5 fabbb0685c5120a32396b93bb9947e15
- SHA1 f724849b238e047a428be6459b4f2b9a225cc6ec
- SHA512 73d304a7281074d2078b78e4e3d899e1a10140eb86513badd4b1a500d6a7d4120aadec6ab5542ba6770545ee3e2e36e95690a74d56b86f25b697aa76915f7155
- SSDEEP 192:l9QSsnVElN0TGAtwmqVaJ4yP983iStuo9UOSOiG:lrU6swBNyRo9Uy
- TLSH
  T1A4F1F73A72C585B9E047537BA3A16B57C63F38202BF5159A9E45078E3F52ED2A038782
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 478f3d2e6e4f7acb08e915a22a3e49033bc00eb0e5139d5008ca427d2d3dee4e
- MD5 b66e186190c780830d5adf4c8097afb4
- SHA1 86128d6ebde1cd6c162ba27dcc3e4677c643d6c8
- SHA512 ccad3d538a8916d4dede9e2aa5cab57fade5b6b117c91a6db009a005d1edb84a272726c8157dacc2016a6cf9f003eadf08621c451aa9ea21256dcc5ca4e3e73d
- SSDEEP 192:A4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjnK72dwF7dBOne:5n3T5KdHCMRD/R1cOnrjn+BO
- TLSH
  T132622B55738488F3DBD2003E785237079B9A5565B4929ED2CA275FC66C7B08D7EB2303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 681382f3134de5c6272a49dd13651c8c201b89c247b471191496e7335702fa59
- MD5 2ae993a2ffec0c137eb51c8832691bcb
- SHA1 98e0b37b7c14890f8a599f35678af5e9435906e1
- SHA512 2501371eb09c01746119305ba080f3b8c41e64535ff09cee4f51322530366d0bd5322ea5290a466356598027e6cda8ab360caef62dcaf560d630742e2dd9bcd9
- SSDEEP 192:vPtkumJX7zB22kGwfy0mtVgkCPOsE1un:k702k5qpdsEQn
- TLSH
  T178325C15135046F3E1D2853C542B3AAB6FB869118AF04E43CFB36852EF386C79D79352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 77b40d42606d48f817b901f1e5abea114b4288b344b8c193bf3e3c52e469a926
- MD5 d1e37112390e6bcca8362788d61becf5
- SHA1 d97888f0f69d34de202e7c68b8ff5b2c2fec4c5f
- SHA512 04121e5241ad14890095a6cf5e698979820fa97d911918b9b77f2064a713e20f4827f72c057d5da1789bc340d63f391872fe5dfbb79e6c33d3995f82c37fa51f
- TLSH
  T1B88171BB62A40CF3C0850BBB41D72CA713B6DC702792011E98471E9A34C4AAFED2E705
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $_5_/Arpeggio.ms.nwcuser.lua
- Size 7KB
- SHA256 c0e7e705cd33f51cd179afb0f1f5b70fbfa3e44735118da62bffc64adf6136f7
- MD5 dea0d84aaf197d2411602d69b991c39e
- SHA1 f59c4e50500ff0078d21ec276dd2f23120e657e0
- SHA512 aa6825cf224d7b8cf408061d82e6aa5ccd53a6f07de6a586df021f337cc990fe52a4499bb8429ba1182ff16db323c09ab055d91d3cfe89e3bba6c62aba14682a
- SSDEEP 192:Tm2YlJSPbO78uoMbrWNgHH9Wu0U5o2eXEyWakGlsfLZnRWqH5s5N7:TIlBBWNgHX0eo2OXFxyNRWZT
- TLSH
  T150F1A45F3DAA8335A121D165CC6E0A45FB3DA5B4131BF570B0DEE2242122A6F86FE1F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  $_5_/BarCounter.nw.nwcuser.lua
- Size 4KB
- SHA256 cb2676753dea4d9a4fbd58562c942ab9a456b8737e19d27ba63ac011d6037203
- MD5 46cb2492077899decb09e2773084726f
- SHA1 8b0f6bf580c2377a5337aa2af8c776a04f1faff0
- SHA512 b7b35c426031bf049a3aeb8fbffcc539eff390239ab645550cb7a6fa7e1d2db1531bd0fc1afd63ec602bde253f5440a1f2588bdfb06e001198138d2685970e70
- SSDEEP 96:xHTf0UvlJXO6mapv/3MOe4kfiKO9hbJ0KTdB4:qQlJXln814aiK2FZTH4
- TLSH
  T1E891229E6E5F074D8253D0DEFDEA1310ED2C65BA027DB000E4D9887A5502A3FC4FE5A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  $_5_/Brace.ms.nwcuser.lua
- Size 4KB
- SHA256 5950fb0719e8723821896d94a7bdf2d39be2a2362e8faee33e5c19359e1931fe
- MD5 70ed876fd7856dd6d3af99621e87fa6c
- SHA1 38970435d9efb1f0c0baa90dee20a75a0a20d88b
- SHA512 930530c0be949509da3a77f9577a47b3d7984eaccd6f641824b0f8742091febb0c61570dbf039c5ddb6edb36c947c4ff8f688939d95f1a6a4ea8802d83d81816
- SSDEEP 96:TJSWxRJGdqoGp4xK9ko9Abp/ijqUqivdsaSojl4MCTiMhN21FFp+97p0:TUW7AdqoGpj9Z9MRijqfiiaSohTCTiM+
- TLSH
  T1CF91648F3CDE7128E003E5A7C83E1D48FF5C5AA5274EB865859D9520C011E2E46FD674
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  $_5_/ChordPlay.nw.nwcuser.lua
- Size 15KB
- SHA256 1b32118cec8c74619769ede45e9109c550143234ea8ebe95586000a188edaea6
- MD5 a8d6582fab1faca01310e902a359eb72
- SHA1 214ad16665906c4ff5aa550184e0279444668277
- SHA512 15a7e322ef964dbfb139e05ec0f6cc52b4738b022832e1755dc7879b7d4c5f043e87fe8f56d71a65e5beb37f24a37ceb30d4a87d508fa257921b71c8ba749c70
- SSDEEP 384:0isZPoWznBUPQbj3DEqz2AwMMWk2PORxCxEhUruOv+Mnvyr6ZdZ9LWjc/+5L:MZPokniP6j3NyAwXWk2PAxCxEhUruOve
- TLSH
  T18572945E3D4A82719322E0A6C81E2980FF787625115B36A2F4EF9874A54175FC0FF2F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  $_5_/Glissando.ms.nwcuser.lua
- Size 11KB
- SHA256 97da421a82a27d19eb5741fcf3c5faa3fa6f42de906d142d5f65f3193cdcaa12
- MD5 c78b9fdec7fd94e746aa987e29e44d9e
- SHA1 6ec5fb5daf24139b82e51d5e3f6a9b7483856031
- SHA512 f109e4ef82aa7f4a74d4fbeed12a982a050a53134591ed6a41d52bd5d1144706e1dbd7608d93bca071339cb54bb9ca34347ff0931b23353a78c7de69c85d28e2
- SSDEEP 192:TqQ2YF0T7R6GaVIXqZ/Hp4Al4mlMIgcs/h2QVDZLojtrrSp3CI4TRxO6Y:TqQJF0TVZaVIqBHp1l4mlMIgcChXVDKO
- TLSH
  T1B032978F2E9F526AC042E196D52F1614F77C66D4339EB1A0C1CDC8214506E2F99FEAF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  $_5_/GuitarChord.ms.nwcuser.lua
- Size 20KB
- SHA256 e8b0e75a12e01327f17a44fa8ae2711fa92ad9ba519821333fff5edb6560407d
- MD5 b8f7a08adbd9eb18368a7213d0d24de9
- SHA1 80d1e318546ddc64c160f5b88c795d7ae91447af
- SHA512 1f2329a39ae4f161f0458e49f145a99dbd60445f2ebf5b61f79f19890c02da7ac244d3a0c6f42f84d2c9519dfc20ee49cbe1252e67664294ae524febaa904d8f
- SSDEEP 384:TDAWjAatA3VP0fiiYhwjrz1IRYDoQkjfea6IlI06qvVDxI6igm89EHL3:TcQe3VP0f+iXRImDoQra6IlI0xPI6igU
- TLSH
  T1C992427E3EEE711A64039248D56F4F5CF76D767AAA3E6261F0CD9424904052FC8B51F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  $_5_/PageTxtMaestro.nw.nwcuser.lua
- Size 7KB
- SHA256 e1f1039b40e467c6bbac43dab26ab0ac203cab9a645554952da402a94be8223c
- MD5 22a088f1a97d7d6f49a91b9cee8eaf9d
- SHA1 8e9a813cbf16963202b2a95f6db77a58dc6cae68
- SHA512 983e71377a7c5d7983232d7985f4250135409771a4c73d38727802979a007c8cb2a7cb41e11c8b7bbca538f3855000be373c71c193518eebe4c16dcfd00aebce
- SSDEEP 96:eVZULdi6vJo8DQc9cmwFJZLbXs5DkgLMoJuPH1erdtKMsDDSa7DBGkZ2rHf:qmioH79ctjhE0oJuPH1ydtKMs6a7dxE7
- TLSH
  T176E1679E3C6FA325E854E6AECD3A0814FF7D34A500D9A654D5FB8630A10022FC4BFA74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  $_5_/Slur.ms.nwcuser.lua
- Size 11KB
- SHA256 f210a4844e67cbff3be075908aeaf00b3170f31de799c39133e8526fb33a781b
- MD5 5d45d6b39f235dec7ea5ce1ffe3551fe
- SHA1 cc3f9a2f6a6fabbc698707c5b4f724adba45260e
- SHA512 e920cef3e9cda8df51f25e660bccb8f03d4b2af2066eccd0fa793b6ca6b6b826da8f4cad34ee0998a98ba82996ae9c7b209cfa1618158e9f60ff0f2dfd998f06
- SSDEEP 192:TOVBhAk4ur2400XFEf/6pv+FIvniiuhaXOAMlIjrwoyZr4XCPqr+Sp7hT4Ne0:TIB2k3FEqF+FIvnjuhaXO3uYosqr+SpU
- TLSH
  T1C832968E3D5A82278643D2A2C82F0A10E77D6655935EB5A1C08DD470D816F3F46FF7B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  $_5_/TabStaff.nw.nwcuser.lua
- Size 7KB
- SHA256 70bfe7aaf30c904115619efb504cb4a31d5f382baf9e5d3958bd70231c8dfd45
- MD5 629a3f0d3e754cd28df7ec0933cca3fd
- SHA1 6c9a4ec5f2ca57291cfea6724d846823732f80bc
- SHA512 4ed0f19703dc5e118b968ba64a43225c17dabe02fe31c8f85beff9cb3560f505278897fca16568177feb7221c11689976a8b8ffaf5f2e1c5624d50db3171f59b
- SSDEEP 192:tGWHGRANTtHYwITT4Z1QDEJHkVBuKdhLh:tTHGRAdawITkADEJHkbuKdhLh
- TLSH
  T189F1855E7E2F42189816E4AACDBE0040EF7D65F4507D79B0E0CD8E34A24262E85FE6B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  $_5_/Tremolo.ms.nwcuser.lua
- Size 6KB
- SHA256 851518446df106bf6aee89b35743cfdf45ee3f1b4fd98416b93e27dd53a9733c
- MD5 4ca8424caa326b32f385ad70d349818f
- SHA1 51b256f46bf72148dc902596646d008637fcc99b
- SHA512 ef2d76a2378cae166205d49e026dc1f88b9e43cec0ba2ccb8c3064d7511c3f2c8c7f2d8c7b0f183031ebaf8f8615af99d94c5ae831f01dacade6328292234f3d
- SSDEEP 192:TFiPIb2Bme9yvfVDb8g081XAdCUmjKsh/JwV+MmgwowLxC6v:TcPIb2Bmcy1Ig081XAdgJw4NgwouCu
- TLSH
  T1DBE1821D2E8F96A78241D06DCC3A0605FB7C5962524CBA3595AFC13CB901A3E85FF6F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy