Overview
overview
5Static
static
5Python314/...te.bat
windows10-2004-x64
3Python314/...te.bat
windows11-ltsc_2024-x64
3Python314/...te.bat
windows10-2004-x64
3Python314/...te.bat
windows11-ltsc_2024-x64
3Python314/...er.exe
windows10-2004-x64
1Python314/...er.exe
windows11-ltsc_2024-x64
1Python314/...er.exe
windows10-2004-x64
1Python314/...er.exe
windows11-ltsc_2024-x64
1Python314/...te.vbs
windows10-2004-x64
5Python314/...te.vbs
windows11-ltsc_2024-x64
5Python314/...ngs.py
windows10-2004-x64
3Python314/...ngs.py
windows11-ltsc_2024-x64
3Python314/Lib/wave.py
windows10-2004-x64
3Python314/Lib/wave.py
windows11-ltsc_2024-x64
3Python314/...ref.py
windows10-2004-x64
3Python314/...ref.py
windows11-ltsc_2024-x64
3Python314/...ser.py
windows10-2004-x64
3Python314/...ser.py
windows11-ltsc_2024-x64
3Python314/...t__.py
windows10-2004-x64
3Python314/...t__.py
windows11-ltsc_2024-x64
3Python314/...ers.py
windows10-2004-x64
3Python314/...ers.py
windows11-ltsc_2024-x64
3Python314/...ers.py
windows10-2004-x64
3Python314/...ers.py
windows11-ltsc_2024-x64
3Python314/...ver.py
windows10-2004-x64
3Python314/...ver.py
windows11-ltsc_2024-x64
3Python314/...pes.py
windows10-2004-x64
3Python314/...pes.py
windows11-ltsc_2024-x64
3Python314/...til.py
windows10-2004-x64
3Python314/...til.py
windows11-ltsc_2024-x64
3Python314/...ate.py
windows10-2004-x64
3Python314/...ate.py
windows11-ltsc_2024-x64
3General
- Target desktop_multi_window_plugin.zip
- Size 71.6MB
- Sample260831-qms6xssfrc
- SHA256 ced18427b4c740cbb4ca7ccfaaa877ee74773387b2bb4e3daa13637ef759a29a
- MD5 ea930cfbd63d268253bed85b33e1c921
- SHA1 6f68912fe7e114ab91ab1ad2b6e17ba7a989aeec
- SHA512 43610c4470fd08e01a4569b4cfcf72e6b1a2dfc000e88d8500b80750d0684dc9aded0e28f285952be4eb3327afe4a9816fd15ee6d0bb1c9f90cb919c5d90c48d
- SSDEEP 1572864:MF2hWJTy2g5XT8Qv2nDjskynq75P98/SlvWgeEkJHWxO:/YsenUM1c43eEkcE
- TLSH T12CF73386A7AF1666C04277BC74985723F60EE5892F6D730F0D791190AA430CB2FE7279
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Python314/Lib/venv/scripts/nt/activate.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Python314/Lib/venv/scripts/nt/activate.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Python314/Lib/venv/scripts/nt/deactivate.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Python314/Lib/venv/scripts/nt/deactivate.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Python314/Lib/venv/scripts/nt/venvlauncher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Python314/Lib/venv/scripts/nt/venvlauncher.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Python314/Lib/venv/scripts/nt/venvwlauncher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Python314/Lib/venv/scripts/nt/venvwlauncher.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Python314/Lib/venv/scripts/posix/activate.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Python314/Lib/venv/scripts/posix/activate.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Python314/Lib/warnings.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Python314/Lib/warnings.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Python314/Lib/wave.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Python314/Lib/wave.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Python314/Lib/weakref.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Python314/Lib/weakref.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Python314/Lib/webbrowser.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Python314/Lib/webbrowser.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Python314/Lib/wsgiref/__init__.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Python314/Lib/wsgiref/__init__.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Python314/Lib/wsgiref/handlers.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Python314/Lib/wsgiref/handlers.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Python314/Lib/wsgiref/headers.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Python314/Lib/wsgiref/headers.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Python314/Lib/wsgiref/simple_server.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Python314/Lib/wsgiref/simple_server.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Python314/Lib/wsgiref/types.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Python314/Lib/wsgiref/types.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Python314/Lib/wsgiref/util.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Python314/Lib/wsgiref/util.py
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
Python314/Lib/wsgiref/validate.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Python314/Lib/wsgiref/validate.py
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Python314/Lib/venv/scripts/nt/activate.bat
- Size 1020B
- SHA256 55e379f69c114f9645999ea7aeb0124a797f230e8340d01df83b3388fd72de28
- MD5 94938aab87ed435c89729859471c651f
- SHA1 0a25d8779e8ceb786fb51a705a0da58698997bbb
- SHA512 9db0a9d29b81a7a695dbcb1efdb63a8d007d6714c49c7bae0d5ce9759b6e3f879d3496e0882c6c830a69d7a2c729667599bf90f209661cc67d4330a53611c01d
- TLSH T11C113BA564D7DB9472AB0370BD0D630F860FA08303A6E19CF0E5CB6DA6564E7C8B047C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Python314/Lib/venv/scripts/nt/deactivate.bat
- Size 393B
- SHA256 fb53ed45866fee40f01c907c1f67555a399f98361722d89120d05a2580e9e563
- MD5 cd761ddd8683f623c5a4b142142b4323
- SHA1 84f7a952a5acbd6c454f7f208e2b9a06c2afa32e
- SHA512 adc7b18d801cf2b6e11e0e67c19890d09883aab5c5d01c5fa6b688fdd730b98681446c51d5010f28c4356dfacdf64cb0ed265ffa9a9bf3fcd1f32ce14e30b01a
- TLSH T156E0C29014E7A2D036670332790D730F8A0B99C216EBC19CB0A4CB096B5B0EB88D113C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Python314/Lib/venv/scripts/nt/venvlauncher.exe
- Size 249KB
- SHA256 199ce15a9f0d4f9522edba59338e4879d28cf61f88e377b8164bcb716275ed22
- MD5 871fc5ed1e4c5aa1f83551392715bed9
- SHA1 77cf4b8f262d632551976d4df285e3096337d622
- SHA512 bfaeefba388acb67542ea53da6f6ba5b22462f6d7f1bfb234e07898d51cd5334c6aeddcb74fb2afbde50ed6925cf387613c4a52b3dbfcde48370f1cd1de2ddac
- SSDEEP 3072:97UuNfXxhrauZnBzNuy5pCkTZcpPSUy0OyA2cuRbuAs0FNmhMn+IhNd/s36fi7:9JfxhWuHtQUZcpHlH0YlK7
- TLSH T1A2443947729A51E5D0728134877347E2AB3D7D215791CA8F12D07B66AE3E2C0FD2AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Python314/Lib/venv/scripts/nt/venvwlauncher.exe
- Size 245KB
- SHA256 ce4225a2096e6242b76c03fb667cc55ad13e6eeb440ebf471e9fec19d24a0259
- MD5 365fec2cf037d62efe9974159195f642
- SHA1 38322dff589123b2efed6e000bfc33ea4d071fd1
- SHA512 189cd0839f7960120c200fc6c35324130e7852398cd6b7d87fa6cb28dde2d012c254c0988bf4991c9790fcf56fe03129358f1767437581f3b8bc5bf7d85876d5
- SSDEEP 3072:vl7o+erV9wbIDLci6jf+0aF7HqKJg7OqxO1BwMpdCq/IM8uIGfy/s362M:uHrvwbI4b+0aNZ1BwMd7wvci
- TLSH T196344A02B2AC7DEDE066C134897185A2AB31FC311750969F53E57B652E332D3BD2AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Python314/Lib/venv/scripts/posix/activate.csh
- Size 937B
- SHA256 b6fe3df9dbec251d6367ae2cdeffd43f3faa88e011fad9a67e6bfd9399eb51f1
- MD5 20ae1cb2a7846d618e37844c5e7ec4a3
- SHA1 f4a4a7b3798933db8799a83d5760b932586e327b
- SHA512 98e99a572e9e74a53fa945a0be54f4934a3a17f9f43dd2663d9b713f1a4e183313d7cc49fdb3a4ad6ea7c857f40df7fe43cc38807943d920245eeb413946f7f2
- TLSH T177119B5490FEB260274B835539AC7307D842919503D8E98CF0A8DE8A610F4FB28A81B9
- MD5 SHA1 SHA512 TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target Python314/Lib/warnings.py
- Size 2KB
- SHA256 ac8acfa4cacdbc548c5029fc7dbde4dca4d4d76868dd4b6e86c172e333c54a4e
- MD5 9760bb80981557047f19b28299015bd7
- SHA1 983d6515240a8c5d90ae4aec79967d3791679e8b
- SHA512 069433e217ae0b13f07751a2c061ae55dd3bb3785dcabb0a16bbf44d692697f2f31d1dbe041b300234f7ecef452fcdfe0ab3d991cc632643eb1e9faa575e5690
- TLSH T13E419E3B9C62E801597181DEEA529037DBFA174B0503905739FCD758CFB9450E7A5338
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Python314/Lib/wave.py
- Size 23KB
- SHA256 c54c10d5925f723a2f2f6fc7e341e0b4185525bcf7efa9c5edd267ea69c0b4bb
- MD5 306131837d3db3a408cadf50751d8db0
- SHA1 08a7b2587621f7493a45a42a2f478f6210664d71
- SHA512 87d6dda595f1fc4d3b9706635354927f75bacaa29185ae804337900118112f9bccaaa6cfa4445acf7f646260fc08bb47b4f5e18017f9edf4a37c304da3921e80
- SSDEEP 384:lRM8ycySCvhe0Iul19ILSe7aYhTRhbFss0X966S:/MnPvhe0Iul1G37fFhbSF4p
- TLSH T1D0B20EE39E47AE215073DD2D5996F417E70A5223652E172339BC8224BF34821DAF4FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Python314/Lib/weakref.py
- Size 17KB
- SHA256 02aeb820a71d78e65d602500368549905e25f273b896f65c61c716d74171a7e1
- MD5 f2ed48c0d5998cd750909f940037e6e9
- SHA1 8d724f8aa4e2520a40c65820bf7443b60ebc5910
- SHA512 866feaac2ddfca21d3862db2be87fb52e649444a36dc2a83157192410aee74582ab674930917880aa6ec8b76ef4e492c5f2995953830b6aabac2509256ef8e47
- SSDEEP 384:gIp8HzCbjAPMHP9hEmCamPTBhTib2cXWj69VwHA0Jn9ynJRn4H3Mytco5OLnQesb:jYa8bXGJmcO9Jn7OQPjJnRKs
- TLSH T187826267AE07E5528137E82D9E5BF04BE3095B67552D22177CBCA1642F30920C2F8DED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Python314/Lib/webbrowser.py
- Size 26KB
- SHA256 3b32bb18212b4558aa123a632526753e52605f1f03ac69e7aaac580d234821e6
- MD5 dbdcde7afdb5b59d5414203584e142b2
- SHA1 4228de39aac089888b791dfd54d1f27afe692143
- SHA512 e4eeb94cb8b8ac2165b66dd017e3a3103248b5a97796961107d463cb96ab8f9de0e04e9c0ad134ce35792a0e413defad272cf232b3add90ea1f867c43b6e0065
- SSDEEP 384:SwAx+rvLNMTd8WcOQ5C79e5vckeMXWjsCt:SwhOdZcnC7eXWoCt
- TLSH T186C29546ED0FB5238A72949D4953D028F31A021769E9522B7DAFC2902F38475C3FEADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Python314/Lib/wsgiref/__init__.py
- Size 682B
- SHA256 978228ae9db30bd59e31ab960bfca45d15411267f0c5bfc449bfea84284da118
- MD5 752762a137474f10062d2b4dd6eb0666
- SHA1 c6912436b710f3acf4c06faf81c52d167a4ae229
- SHA512 99bbb4720b0a682b768d33a7f63487e291e2896397a8fa70b99ba0d8ede1879e0a9e8de49ba46bed73114a8f6a9d8161d3053cc48088f08aa753f9b3e215b8fb
- TLSH T11B01FE2F087331A21ABD61ACF3D7F62E23D6833813A54C6933B6C98E509104D636A34E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Python314/Lib/wsgiref/handlers.py
- Size 21KB
- SHA256 d294e290785bae12f9951b4ff6a3cd2d806bbb515494d949309c4e1ae2c39e7b
- MD5 5e716dc1714a7fb49683797bd5c52215
- SHA1 67212bc732368204b459f80165c63d85183d728f
- SHA512 bbea4f3a008f9bf4a48008b4b6b78c8833f501deb34a7a3d5f3051ffc5ded5f1c346bf21221b813ed376c52dd012977fc307b6cc0adfeaeeeb0ba957cdb7561f
- SSDEEP 384:JbIEd11/napFUzQ6UZgiFJO1IO5JS2YPUiBbKzEbqm:JbldrnC2QLZgGJk3SXfFKQR
- TLSH T125A2A507DE0BA96A12738569CD05F82BF30E8217566E656778BD814C2FB4058C2F9EFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Python314/Lib/wsgiref/headers.py
- Size 7KB
- SHA256 affa89c7c2bb716adbb3d4c507ad5643c76c912dab25a48914345c08b9dd08c9
- MD5 e64edfaea52aaf038ba946f534e0c2c4
- SHA1 945fc507bce7ad425db455dc7afab5eda387e8a1
- SHA512 c17619555404ac44c338d15c367e408212f73ba3d9066a7c6c68c1ef5372ca4286966e27b87150d415bc4988bc55ad3571fe66082d5239aa13f4ea565827e128
- SSDEEP 96:XXzJQooeCtDqI4p4JWK63EjZw9nUHmjV7u9RJ17oAkm8Cug:Hax4j4JjZunFJ7WoAZug
- TLSH T101F1FE96FD4B6E124132853AD81BED42EB0F822755280AD7BCFC105E3FB1859C1B5BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Python314/Lib/wsgiref/simple_server.py
- Size 5KB
- SHA256 2b008e31c89b4ea3d27ffea8a65314b78d87e621a8e3a4cfab11b2382f5a581c
- MD5 1b7b187cbac600982865c58258f3b16c
- SHA1 e99c072e3855251b2ffb339ee7671687a7479426
- SHA512 604e949d513d174206bbf20b61abd94907f5d3a3dd52eb4c49088261e3c73152344ce657de9e44aae0bd1cce978ac2c7f41b6167bc97ebb807162f7d78f4b626
- SSDEEP 96:aYWTBCDGpP5GMbUYYQoa3M190e5+ULK4kM1jS3k5/wVR:aNMSbUHaeGe5+OkM18YwVR
- TLSH T14AB10B478C0BA0A963B3861ED816F413F30A5213765C19B77A3C92592FF0509D2F9EEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Python314/Lib/wsgiref/types.py
- Size 1KB
- SHA256 f56851d14f5008804bb8220a23b5963d55ba08139f9ea4f22ba2773ade85a34b
- MD5 4afab88d4a1cd84f053aa85b1f04d326
- SHA1 702c2a494f78a27e6618fb358d0199f9185c8e43
- SHA512 053406531ca7fb8b4f4cd9809e5bd4066cd9d68e604db436024a942517c95c97f8bd2c90cda7e0ad038c6ed6462e90339093894259528187ff0029211691cefd
- TLSH T1F031C067CE7BE39243B495FB40440BA1E209C35B4F2C65727478E45C5F76418EAD454D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Python314/Lib/wsgiref/util.py
- Size 5KB
- SHA256 d2072a32016c974f2ccdfa9b2461c93a57adafc599cdc60744e0cf80d8a7f446
- MD5 9a6cf0643a1101135ebe31628c270935
- SHA1 4243caff8e90b94371cb9fee8fe46fe02d3da617
- SHA512 7048ac8a8120e754a85c30a8281e95070c2e4cde1aaeae9ddca951b8bbb397314c7f846bb013d323e56a71c6f9a908dd4ae3c9913d9b8fb05a1ad720185b7264
- SSDEEP 96:rW34CNDEbyh7ryLMdzNCzlGS5NipQY/LKQYItQDmATxGH1pqZQRt:rNx2h5wlGgNipQY/eQYyQaEm1poQRt
- TLSH T11CC15363AC43A11353B5E16EC9258809E304D56B2AB075B279EC81D92FF5411D3F89BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Python314/Lib/wsgiref/validate.py
- Size 15KB
- SHA256 72cf19f76f8abefc07e3ea3e1401cd643b883ad461ae1090dff869ed35cdb66a
- MD5 1d512856cb07dea1158f55049506aafd
- SHA1 473f16c7c518a31b849eaa8d6d47a8b5d32cde92
- SHA512 ce7dad40e89405c05f4d177679e821526cc88a7f8f6b6d01acc11f77cd40a917685b5846737549173e203ca7ac5dcb588e955bac422e783eec9649d6fa8d2b77
- SSDEEP 192:Z4laBfuth+3sZiMWsXo8vtFVccc6oBWS/PWZhNq/v3wza/uPFJuG6ZthKpCcGWKh:Z3cM3m+sf5OrHCH5CcGXnQu
- TLSH T15E62A416CC4A9A110BB5547DD94AE449EB16871782FA87A375FCC00CBFBD40883B79BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10