ede40cab538b277d0f11178fc3ec3d19e4ab192955545bf6085418e2d1f44fe2

Resubmissions

03/09/2026, 11:20

260903-nfpttagj3s

03/09/2026, 11:18

260903-nerxsawbqd3

Sharing

Copy URL Twitter E-mail

General

Target
free_token_gen_v2.7z
Size 24KB
Sample260903-nerxsawbqd
SHA256 ede40cab538b277d0f11178fc3ec3d19e4ab192955545bf6085418e2d1f44fe2
MD5 2464e8b7192863986eff460bd677426f
SHA1 bbf88626080e510a1f48f712685653ee7236b440
SHA512 030ee275da5a167311f49ae734b5fb8c48c10778036af26cf0ad64de3c9970f4ce569c2f7f92860572138ed9df91f37b5e986d5931e8c3885bb6e80f879d9a4b
SSDEEP 384:MqbsyFxtGmU0OEcfmb1PrVHXasedKgS/V14ZoixwgaKTKuIg3b77itYUpzgf:MqRgvXaasedX0RixwgaKTKuX3b2vpzgf
TLSH
T1E8B2F1DF44433BB5E3DA70D4372B2A8F61A4BD7FB78A948B208840C2249DB43E059E53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Malware Config

Targets

- Target
  free_token_gen_v2.7z
- Size 24KB
- SHA256 ede40cab538b277d0f11178fc3ec3d19e4ab192955545bf6085418e2d1f44fe2
- MD5 2464e8b7192863986eff460bd677426f
- SHA1 bbf88626080e510a1f48f712685653ee7236b440
- SHA512 030ee275da5a167311f49ae734b5fb8c48c10778036af26cf0ad64de3c9970f4ce569c2f7f92860572138ed9df91f37b5e986d5931e8c3885bb6e80f879d9a4b
- SSDEEP 384:MqbsyFxtGmU0OEcfmb1PrVHXasedKgS/V14ZoixwgaKTKuIg3b77itYUpzgf:MqRgvXaasedX0RixwgaKTKuX3b2vpzgf
- TLSH
  T1E8B2F1DF44433BB5E3DA70D4372B2A8F61A4BD7FB78A948B208840C2249DB43E059E53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  free_token_gen_v2/Start.bat
- Size 16B
- SHA256 91f6d3310b0dcd9b3c801f74f5f1a0187c51788cf6961f51db5f6eed767c620b
- MD5 66f3e91f999bb62c7032e5b3d7b33b3b
- SHA1 ed412a05c979f4c89e1e407b9ebda7e9e9b32b8b
- SHA512 6110ad600715ea9be6e5df3fa9ed5c0238008b1907dd8daed4e0369408812166b5b42764860acfe322bf46fa19d083b84ef69d111ea4bd7554746d9d332cbf31
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral2
- Target
  free_token_gen_v2/config/config.json
- Size 786B
- SHA256 304d57f432a036a143de05e5ab2a2e1f69738715f43ca08ed4016fab38fe364d
- MD5 887a33272197b8c30e1b1b4945e39b9f
- SHA1 8cdcdd3b0b04efe933e049b673094ac0f884eac0
- SHA512 63649f95fdf6a20748fa207671332c45d19b211c4b7d1ff74c7058e9997855d8697f31e2c995737f1f6ceed9f999703b5b71eb3ea1f3633609819195c0c3c99d
- TLSH
  T1E3019908D5750CE706ED9864ECBF22039E66C6B30E442D38359C168C5F1FB3E526AAED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  free_token_gen_v2/config/حقوق.txt
- Size 220B
- SHA256 159a77199496630310ea11bd03bc98e01ab2ae520ae5570737c0509ea2b29403
- MD5 1d015d4628bf48205872a5ae749c5d18
- SHA1 a4bfb764a27ea0425c861def2f0d1e2d6c68beff
- SHA512 6eada8c085688a18189c9534dc6639e76dc01314f3aee85ce9bcdba40886c30b2d82fd440b7315576ca96512bebda5a7cf988902ce92fed5e9cd76d9bc77176c
- TLSH
  T1A6D005BF0C1C0C2A03D410FC23AFA2ACEB16008D4A9A44938002999CB52B2327E21CA3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral4
- Target
  free_token_gen_v2/data/bios.txt
- Size 33KB
- SHA256 bc51df2d352087b92fe342be07f1c17ad8d3d37dbffce154c4338df0ff18ac43
- MD5 c0e93bcd76fc0b2aefe6683fdcf5a711
- SHA1 375e782f9f93902fb97cf28f6cf60638669ba1b3
- SHA512 f3333b069979b9bacedd892cae091ce6e8ff9ff317144414fc235ab5c812d200ff5d413e731df3e61a8a16b651e07bcadc1428a795b2c23b9abc461edc5749a5
- SSDEEP 384:5p5WtBbRvlS1klPHq07PG0gDAwPyBqWHPfP2/vsWaElVRNuPV7IQWjKPAJPxPP18:6
- TLSH
  T1CBF2896B5EF402FE50E1F2AB63167E471796C2D61B080F8C640B953D3F929F89A752C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral5
- Target
  free_token_gen_v2/data/names.txt
- Size 926B
- SHA256 65ddf1bfbcd8988ba8cd6f471b76c0b219dc5566932e263d0ab0c7ed307d2b73
- MD5 9f57bada0351701de25712b64da9dbbe
- SHA1 1096c3a6428517e0f0787554c7b8b982d82c6080
- SHA512 9b78526d39fee8e2a2c8237c09d3c41fbae0c8e391726d51f8455142b1ce236dba42c7cea49b5e9094972ec0da5fd7b239401caf2723b50f975fa387e23dea22
- TLSH
  T1591108F21D3918F011830B1F8156782ADD766CF26FB2BE3D84123FD972137918048939
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral6
- Target
  free_token_gen_v2/data/pronouns.txt
- Size 11KB
- SHA256 0047645119addb615cf7a2ecade4ebe34343979da5972c9a39119fdd0fc9ba40
- MD5 e149bf2c25cdf4814f302a2556d8106b
- SHA1 b9c69fb93d2de80a2ef37cf3211d4c493d503801
- SHA512 d2c3b50af9d4038942148baf11fe6f5cb83b243f1af890f4aa74e7846f716f0d75a827f455a43f88f0c2cb9a2ea6ab506cc49736ffcab42c095d0be832d74e64
- SSDEEP 24:0asiSkFkGYkIEsAeHs72D7PVk2kDYkEFkkFkC6Kkjk5VD76kkP+kZ+s48pXFGEYr:e
- TLSH
  T1A23209F86223C0020B00FADC02ECB092D128C0CC8F2FC231B1CC2803FA1080E0C98BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral7
- Target
  free_token_gen_v2/data/حقوق.txt
- Size 220B
- SHA256 159a77199496630310ea11bd03bc98e01ab2ae520ae5570737c0509ea2b29403
- MD5 1d015d4628bf48205872a5ae749c5d18
- SHA1 a4bfb764a27ea0425c861def2f0d1e2d6c68beff
- SHA512 6eada8c085688a18189c9534dc6639e76dc01314f3aee85ce9bcdba40886c30b2d82fd440b7315576ca96512bebda5a7cf988902ce92fed5e9cd76d9bc77176c
- TLSH
  T1A6D005BF0C1C0C2A03D410FC23AFA2ACEB16008D4A9A44938002999CB52B2327E21CA3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral8
- Target
  free_token_gen_v2/huminzer.py
- Size 48KB
- SHA256 6b4bdd8392c44f552c18e1165b2b1b713f6fbbc59243a44d3b35b09d20805b29
- MD5 43fafd7bca714f002d8f269076ff9ecd
- SHA1 5c20fd26b99d684fda453ffd1df90b1203dfe6b2
- SHA512 2fb5766da4579d193be6e964ee8ed4348a3d12309a9c7c4e6f54522a7707dc7cb76bc0ab1078a6fc752cba2e45cde9139488c6332f6e4f2044c00dc26e813bbe
- SSDEEP 768:WF71c1otbUOBymHpH/mTgMc9bpft3Yq0MOUrguzKQXgYy+V4wmIv:GxSQgmHp0c9zlHV4tIv
- TLSH
  T12923D691D8053853C77BAC6D8CA2F60277687C0786081474FDAC029D6F596EAD9F4EEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  free_token_gen_v2/input/حقوق.txt
- Size 220B
- SHA256 159a77199496630310ea11bd03bc98e01ab2ae520ae5570737c0509ea2b29403
- MD5 1d015d4628bf48205872a5ae749c5d18
- SHA1 a4bfb764a27ea0425c861def2f0d1e2d6c68beff
- SHA512 6eada8c085688a18189c9534dc6639e76dc01314f3aee85ce9bcdba40886c30b2d82fd440b7315576ca96512bebda5a7cf988902ce92fed5e9cd76d9bc77176c
- TLSH
  T1A6D005BF0C1C0C2A03D410FC23AFA2ACEB16008D4A9A44938002999CB52B2327E21CA3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10
- Target
  free_token_gen_v2/io/حقوق.txt
- Size 220B
- SHA256 159a77199496630310ea11bd03bc98e01ab2ae520ae5570737c0509ea2b29403
- MD5 1d015d4628bf48205872a5ae749c5d18
- SHA1 a4bfb764a27ea0425c861def2f0d1e2d6c68beff
- SHA512 6eada8c085688a18189c9534dc6639e76dc01314f3aee85ce9bcdba40886c30b2d82fd440b7315576ca96512bebda5a7cf988902ce92fed5e9cd76d9bc77176c
- TLSH
  T1A6D005BF0C1C0C2A03D410FC23AFA2ACEB16008D4A9A44938002999CB52B2327E21CA3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11
- Target
  free_token_gen_v2/main.py
- Size 49KB
- SHA256 400459e4e4590dc505fafe63fc1b4c9d5e5789da81b1e4419ab3f78b2881d327
- MD5 d1493dcac2048459d8bdcdb378a56c62
- SHA1 31f4f3e4cc48365f5897e3d1557c6c52f7224349
- SHA512 0e63312d369353c6c1608e40e2d0c856911ffb5315752ece847b2591a59cb9b006dfeed6e0e8485a8775df49bb1f1da09f41dd4949a9296704979d827886aa0b
- SSDEEP 1536:ZVL7UVNjaic0UmJrT68P9V2bvKB3eisEh2VLBnepW:ZVnUVNjhUO/2biB3ZsEQLBnf
- TLSH
  T17733956048576433CB63D52D88A7A1117326BC2719095838FEEC83846F9D873D7F9EEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  free_token_gen_v2/setup.bat
- Size 21B
- SHA256 17c442663ecdad9f1919a13c9c909b0ce0092a88389c91de7d7e0986088c61f4
- MD5 21c4abc2251cb14c7539ca4cd758e259
- SHA1 6e8ff457d8384f8ee8bc2074f49b247e816cce84
- SHA512 dea4d33c4754bf15f1841581e2db158709fbc003f31d11047dc878c789013f49a73078c69ef594e8732bf60fe605d5ff05bbf35cb8845738b9f05726776505df
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral13
- Target
  free_token_gen_v2/starthumnizer.bat
- Size 18B
- SHA256 2c884b09aac4469854f2df05c0d49b610ee74265860a3409a65d17ef5ade9cf4
- MD5 c7c75ae2ce02770a0c16963db2316b78
- SHA1 4653dff54d2ac5036af20116e99f266265748b0b
- SHA512 7ace5fafdef6131c31526846e409e57ffde411d1a74d494d0de2e62f471ca1ae7143355fbe2af35be081a8b43ffce4a5451e5d23e720f20b8305ffb521c34b0f
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral14
- Target
  free_token_gen_v2/حقوق.txt
- Size 220B
- SHA256 159a77199496630310ea11bd03bc98e01ab2ae520ae5570737c0509ea2b29403
- MD5 1d015d4628bf48205872a5ae749c5d18
- SHA1 a4bfb764a27ea0425c861def2f0d1e2d6c68beff
- SHA512 6eada8c085688a18189c9534dc6639e76dc01314f3aee85ce9bcdba40886c30b2d82fd440b7315576ca96512bebda5a7cf988902ce92fed5e9cd76d9bc77176c
- TLSH
  T1A6D005BF0C1C0C2A03D410FC23AFA2ACEB16008D4A9A44938002999CB52B2327E21CA3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15