Overview
overview
3Static
static
3fragment/b...14.pyc
windows10-2004-x64
3fragment/b...14.pyc
windows11-ltsc_2024-x64
3fragment/b...314.js
windows10-2004-x64
3fragment/b...314.js
windows11-ltsc_2024-x64
3fragment/bot/main.py
windows10-2004-x64
3fragment/bot/main.py
windows11-ltsc_2024-x64
3fragment/bot/sql.py
windows10-2004-x64
3fragment/bot/sql.py
windows11-ltsc_2024-x64
3web/_tmp_aes.js
windows10-2004-x64
3web/_tmp_aes.js
windows11-ltsc_2024-x64
3web/check.js
windows10-2004-x64
3web/check.js
windows11-ltsc_2024-x64
3web/dashboard.js
windows10-2004-x64
3web/dashboard.js
windows11-ltsc_2024-x64
3web/dashboard.html
windows10-2004-x64
3web/dashboard.html
windows11-ltsc_2024-x64
3web/resell...te.ps1
windows10-2004-x64
3web/resell...te.ps1
windows11-ltsc_2024-x64
3fragment/b...aes.js
windows10-2004-x64
3fragment/b...aes.js
windows11-ltsc_2024-x64
3fragment/b...eck.js
windows10-2004-x64
3fragment/b...eck.js
windows11-ltsc_2024-x64
3fragment/b...ard.js
windows10-2004-x64
3fragment/b...ard.js
windows11-ltsc_2024-x64
3fragment/b...d.html
windows10-2004-x64
3fragment/b...d.html
windows11-ltsc_2024-x64
3fragment/b...te.ps1
windows10-2004-x64
3fragment/b...te.ps1
windows11-ltsc_2024-x64
3fragment/b...nt.exe
windows10-2004-x64
1fragment/b...nt.exe
windows11-ltsc_2024-x64
1fragment/b...64.dll
windows10-2004-x64
1fragment/b...64.dll
windows11-ltsc_2024-x64
1General
- Target fragment.rar
- Size 74.3MB
- Sample260905-aq13yatbme
- SHA256 c1bc9c1c8d103656f3a91a74dab0e5f10c7894da4a0ba98f091c83e34e383f2a
- MD5 5872c30a72b692868ab6eef9112afd89
- SHA1 971ba089bba4f03cab42eb4843223562fccd579a
- SHA512 714eff6531210d6af5f798a0783274242c1eeec085715ea6825612ce6c8f84bcbd45da8340344fe861755e1643406b5ff84b8078700aa3b8cbc4e390c1dee141
- SSDEEP 1572864:/KofGMJltt6jhSAzmtgCjAqrXWWCpLgQcCfxQ/3P3GTIUzP7ICzXfrjKF:n+MvfIcAzdqGZJfxI3OTD4CLKF
- TLSH T1E10833D6E8D66DD17049A7D90FCD2A72758DE048205C448DA3CDDB63AAC3CB663CCA36
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
fragment/bot/__pycache__/main.cpython-314.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
fragment/bot/__pycache__/main.cpython-314.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
fragment/bot/__pycache__/sql.cpython-314.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
fragment/bot/__pycache__/sql.cpython-314.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
fragment/bot/main.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
fragment/bot/main.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
fragment/bot/sql.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
fragment/bot/sql.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
web/_tmp_aes.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
web/_tmp_aes.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
web/check.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
web/check.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
web/dashboard.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
web/dashboard.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
web/dashboard.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
web/dashboard.html
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
web/reseller_validate.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
web/reseller_validate.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
fragment/bot/web/_tmp_aes.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
fragment/bot/web/_tmp_aes.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
fragment/bot/web/check.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
fragment/bot/web/check.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
fragment/bot/web/dashboard.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
fragment/bot/web/dashboard.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
fragment/bot/web/dashboard.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
fragment/bot/web/dashboard.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
fragment/bot/web/reseller_validate.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
fragment/bot/web/reseller_validate.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
fragment/build/fragment.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
fragment/build/fragment.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
fragment/build/lua53-64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
fragment/build/lua53-64.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target fragment/bot/__pycache__/main.cpython-314.pyc
- Size 32KB
- SHA256 2c5884c978466e2d479ef1773feac80f3ff9f5bd34dd827793756009a2fffa00
- MD5 1f8cd83b5319d5fd77a2ff45b1d16a3a
- SHA1 59fea4f34aacddf9691321f0b525181f48e0c854
- SHA512 482d6bc03ff0fb1901b4dd50e2187cce77cd2b047bd67f393773e2642808e3640a0e17b124c0ddd6c75c044cb101fb556621819b8ce0c3aef495a7ed4a46a29b
- SSDEEP 384:LE7X2IfaeN8q4RzlHxjaAEzAbT5nPEcbqACrK5G0+fC9J3vGq11xVu1l620a6:Ly2IfBO7F9E45nPE6qAMK5GPfck1g24
- TLSH T199E219FAAA548823FEC4F13830C2DEAAB732C0427504D75BD6252CFA5DDDB0259E562D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/__pycache__/sql.cpython-314.pyc
- Size 93KB
- SHA256 ddf639a8bf42db3ac6ee47508c96c4ba0460966184bd96089f87fbe9b23ee522
- MD5 0be01f8d1a3a6558101268f64f14fe84
- SHA1 6f65d53bd15edb7345676101a484a3120d9b895f
- SHA512 48488598d608f893f29b303f44cdcb79c47f2caae64eae28eaff096624335a55608f86b8c9b364e1bc462f0275597b331037ce5b46f21a66c47299a2429c6467
- SSDEEP 768:Cyr+0Shc4LbMA1/44UNdlJPdsIsHOd93duBQBk/3Odmt4Pe5b+SJoWteCimqZR8+:CyrFShbsAkX9NuBQBG4GbimqMias
- TLSH T1C493E5A9AAA04813FDD4F13830C7EE45B722C041A704C757F23C1CFA7FE9662A8A595C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/main.py
- Size 17KB
- SHA256 64d9c70b367bff43c6704f059bb1bab05654ea845de37fd5043a6e8aea59f6bc
- MD5 7a84ad20695f38648fabd3f88b84a298
- SHA1 1b678a25ae29be04ec0cb8bc2bc90fee8f272c0a
- SHA512 8c428675f5a1c5ffe5cdf3f71c5775e37bd57c9647f15b89e1c64689433f93da005649066b0e4509fe052c10b8b12f7346b470da13b54b07b5e5d30a66b7c49f
- SSDEEP 384:SIJ2caE3g5tVaVYiv5vaJVT7Ew7lidFqRtpZlH:SIF6iveidFqRfH
- TLSH T1BE828352A9673C33A7C795559CA6E1423725B807494D30E27CFC122C4FADE3AA0F2ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/sql.py
- Size 53KB
- SHA256 2cab1b80ae30d5d8435a5a7a6e4e22557685e33c89f135e4890e51c524d57c14
- MD5 eda9fc64dd2b2da7324a54c4845ec7be
- SHA1 00a772f84e88f07bb4c9ef4b7f2cfda6b3d6f129
- SHA512 61b01181ecfa26a2c9562bf50cc707eaa3c1e5a228bccb0533ba858265b5c0c6646e47781601849410e35a20a4f7f8e2072e03896036b7cbdf0e861f3dd6c575
- SSDEEP 768:kIqNWwOKVAQCYlywWDNixFWyiaiOvWyD6j+F1Dc6FvU:kIqNWwOKVCXJDsxFWyANyQ
- TLSH T16B33B653D9A73C32A7D794659C96E1823318B807490D24E5BDBC94684FCE93BE0F6ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web/_tmp_aes.js
- Size 13KB
- SHA256 d9f7578eb92e72692d4ff21876deebbde478adc4a7db1ecaab269e2374729773
- MD5 6feec52c651bbf1cac2887175da96f88
- SHA1 8c09590d0e79a69b68c98b2abbf096a626614097
- SHA512 1cc2f4bf06209f2362077030af96c36398a5a678a2ad735f8e9a600848fe779a20227626386e9ddebc897ad047b90798d1fb4d24b45f053571a693db43f4aeb0
- SSDEEP 192:4hsoEj776Bn/tnHcgaollys/6+EgH3JLg7oLu0MyMVv:i50/3xoGs/jE839g2FBM
- TLSH T1F55200C203894A7CF2C92ED68C2F605620F3E54A3D251249EFB399DBBC77D895075A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web/check.php
- Size 2KB
- SHA256 b57fe43780588e25135f9311040190b3c4e23c64b0333accead43e85ffda0758
- MD5 ce179ccebe56f78e60de5046a7fed652
- SHA1 184c58f329dd5cfe977a2f6694f5e8bcec84a0e8
- SHA512 2e5342a60b03fda4b02ddfb1b6b6eccceb017248af96ddb4736fac0c3c33c74bc5b2ddb330be01dc353766483525103b5bde017d94a164d289cd1f250e57a834
- TLSH T18D511F92BDE3B21962B37834579F9006725C942B3905DA44BD1C03D86FC1661EEE8F92
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target web/dashboard.js
- Size 15KB
- SHA256 37f73a9333f9beae3a2eeccc9e599e79fe78bdc7535b44b725f6ae198285ac5b
- MD5 3d706a4b3681cec45af2652ee15443bd
- SHA1 d3aedc7541ac2d8a2925f12645df526855b4ff1a
- SHA512 48c48c51718b607eae6a125ac4f3924921bf6509f917382f2f497b29c44ff9cfcc06a2fc644ca9df943dbc95b5eebe321e85de7ebd4750c8ae4f3d2426bfb2bb
- SSDEEP 384:wajLOzA4g+8TGV0dF8/2ldI/rpez8n5G9wiWZJy1d8tvwvsfHCJpMQozlz1F6ePt:wajLOzA4g+8TGV0dF8/2ldI/rpez8n5R
- TLSH T1C662306F31F3243949A7B47B63DBD18A7622500B1C0CD9247E5C9A405FA2F6895FBBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web/dashboard.php
- Size 17KB
- SHA256 4d5cd7177f551248053013e74fd68591ca42e196f0d32d19c0e29a6e309e9af7
- MD5 e7d326d33617c75987dc542b7abcd467
- SHA1 fce5b7ee55a59e1a0fabd4e1dffef907d1123bf7
- SHA512 2210f9f4edb1d84e0cd88c67814115f3aec000a94c3011f543bef05916a92499a60169f9793e7b9618d76531d5e2846c0f066d98a9177c971ccc81b21dada96f
- SSDEEP 384:fsc3Fx0gvECLZCLW6CLokCLXqCLX0CLXRCLq3Q:fsCECLZCLW6CLokCLaCLX0CLXRCLF
- TLSH T1BD82226120F10AAFA0D7C791F6506F16ADAE9717C45B917DB5AD82D12F83CB2CD8F208
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target web/reseller_validate.php
- Size 1KB
- SHA256 b920e0d2fdf7193f1f7ae44fd12a242ecdb4713cdb22655ebc7106730e77b994
- MD5 aa128360376ca285bfb18df35433dadc
- SHA1 35304eb551f0868215256406d8970bcb74fcc0b0
- SHA512 7fa8dbb511568c09b52bf4b57366090bd62e1ddac1cbea4c200f976f55d08bcf6110f2bd06ceabc8a4a0462ed1f77247008d68e965698f6134b91eb4d55b5d2e
- TLSH T16941543154F377189A7794E747E5AA41B7E504034D029457B75E2EA31FD46ECC9F0B08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fragment/bot/web/_tmp_aes.js
- Size 13KB
- SHA256 d9f7578eb92e72692d4ff21876deebbde478adc4a7db1ecaab269e2374729773
- MD5 6feec52c651bbf1cac2887175da96f88
- SHA1 8c09590d0e79a69b68c98b2abbf096a626614097
- SHA512 1cc2f4bf06209f2362077030af96c36398a5a678a2ad735f8e9a600848fe779a20227626386e9ddebc897ad047b90798d1fb4d24b45f053571a693db43f4aeb0
- SSDEEP 192:4hsoEj776Bn/tnHcgaollys/6+EgH3JLg7oLu0MyMVv:i50/3xoGs/jE839g2FBM
- TLSH T1F55200C203894A7CF2C92ED68C2F605620F3E54A3D251249EFB399DBBC77D895075A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/web/check.php
- Size 2KB
- SHA256 b57fe43780588e25135f9311040190b3c4e23c64b0333accead43e85ffda0758
- MD5 ce179ccebe56f78e60de5046a7fed652
- SHA1 184c58f329dd5cfe977a2f6694f5e8bcec84a0e8
- SHA512 2e5342a60b03fda4b02ddfb1b6b6eccceb017248af96ddb4736fac0c3c33c74bc5b2ddb330be01dc353766483525103b5bde017d94a164d289cd1f250e57a834
- TLSH T18D511F92BDE3B21962B37834579F9006725C942B3905DA44BD1C03D86FC1661EEE8F92
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fragment/bot/web/dashboard.js
- Size 15KB
- SHA256 37f73a9333f9beae3a2eeccc9e599e79fe78bdc7535b44b725f6ae198285ac5b
- MD5 3d706a4b3681cec45af2652ee15443bd
- SHA1 d3aedc7541ac2d8a2925f12645df526855b4ff1a
- SHA512 48c48c51718b607eae6a125ac4f3924921bf6509f917382f2f497b29c44ff9cfcc06a2fc644ca9df943dbc95b5eebe321e85de7ebd4750c8ae4f3d2426bfb2bb
- SSDEEP 384:wajLOzA4g+8TGV0dF8/2ldI/rpez8n5G9wiWZJy1d8tvwvsfHCJpMQozlz1F6ePt:wajLOzA4g+8TGV0dF8/2ldI/rpez8n5R
- TLSH T1C662306F31F3243949A7B47B63DBD18A7622500B1C0CD9247E5C9A405FA2F6895FBBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/web/dashboard.php
- Size 17KB
- SHA256 4d5cd7177f551248053013e74fd68591ca42e196f0d32d19c0e29a6e309e9af7
- MD5 e7d326d33617c75987dc542b7abcd467
- SHA1 fce5b7ee55a59e1a0fabd4e1dffef907d1123bf7
- SHA512 2210f9f4edb1d84e0cd88c67814115f3aec000a94c3011f543bef05916a92499a60169f9793e7b9618d76531d5e2846c0f066d98a9177c971ccc81b21dada96f
- SSDEEP 384:fsc3Fx0gvECLZCLW6CLokCLXqCLX0CLXRCLq3Q:fsCECLZCLW6CLokCLaCLX0CLXRCLF
- TLSH T1BD82226120F10AAFA0D7C791F6506F16ADAE9717C45B917DB5AD82D12F83CB2CD8F208
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target fragment/bot/web/reseller_validate.php
- Size 1KB
- SHA256 b920e0d2fdf7193f1f7ae44fd12a242ecdb4713cdb22655ebc7106730e77b994
- MD5 aa128360376ca285bfb18df35433dadc
- SHA1 35304eb551f0868215256406d8970bcb74fcc0b0
- SHA512 7fa8dbb511568c09b52bf4b57366090bd62e1ddac1cbea4c200f976f55d08bcf6110f2bd06ceabc8a4a0462ed1f77247008d68e965698f6134b91eb4d55b5d2e
- TLSH T16941543154F377189A7794E747E5AA41B7E504034D029457B75E2EA31FD46ECC9F0B08
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target fragment/build/fragment.exe
- Size 11.4MB
- SHA256 22114b36d0c1f5f79e0a2b0761d82a835bb3cc63dd3705fe2fc18ced37294451
- MD5 fef5103c5787355c2029b933bcb871e4
- SHA1 29197177fca84aa66601ee09e7bb31762ddda388
- SHA512 e57153210c8e8d360c0a053112f5a01f42d81fa6dc6d69efe0a5edf9396e593ef342e2a724718e331459b4d12b2ee3805576e681bed78a19d87778e754a654ec
- SSDEEP 49152:N9LgxGVecn7UmaRIAVPRBdd0NsN4bFZyt0OGm/CW0rbRMK8KwjhmStL8nQHr:gxGVeE71IZkFZ2C/rHItLj
- TLSH T128C663E4F1262BA4E437FD35641D7579839A5900FB39E03788FEEE2226B4DB404253A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target fragment/build/lua53-64.dll
- Size 1.1MB
- SHA256 436f6bf9ac414e7e7259bef4f6e287702a41e1fddbdd9af7d43350d47539a3c9
- MD5 b2d53e47d838cf917f90a9a6977c31e0
- SHA1 7189c2dc9aa6136ca5f210b5ebd242d3491a91fe
- SHA512 1efe3b14d7eac03ad7f2286ca42fbe235481195fa5906b3068dd97d4b4f5b2f9517cdcd78b6907794f6d2979944899ec97dcaae495077282b791260c41aaffe4
- SSDEEP 24576:Px5ACjuRUvIY5cfisR23K16TpoJol/nj30sIcqqD7FE5sF8+:PgCYUG2uCFwsT
- TLSH T1EC45493432A810A6D17AC17DC84B4BA6DDB0300A573C55FB5195C6E4AF237EC2B7EB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10