Overview
overview
3Static
static
3fragment/b...14.pyc
windows10-2004-x64
3fragment/b...14.pyc
windows11-ltsc_2024-x64
3fragment/b...314.js
windows10-2004-x64
3fragment/b...314.js
windows11-ltsc_2024-x64
3fragment/bot/main.py
windows10-2004-x64
3fragment/bot/main.py
windows11-ltsc_2024-x64
3fragment/bot/sql.py
windows10-2004-x64
3fragment/bot/sql.py
windows11-ltsc_2024-x64
3web/_tmp_aes.js
windows10-2004-x64
3web/_tmp_aes.js
windows11-ltsc_2024-x64
3web/check.js
windows10-2004-x64
3web/check.js
windows11-ltsc_2024-x64
3web/dashboard.js
windows10-2004-x64
3web/dashboard.js
windows11-ltsc_2024-x64
3web/dashboard.html
windows10-2004-x64
3web/dashboard.html
windows11-ltsc_2024-x64
3web/resell...te.ps1
windows10-2004-x64
3web/resell...te.ps1
windows11-ltsc_2024-x64
3fragment/b...aes.js
windows10-2004-x64
3fragment/b...aes.js
windows11-ltsc_2024-x64
3fragment/b...eck.js
windows10-2004-x64
3fragment/b...eck.js
windows11-ltsc_2024-x64
3fragment/b...ard.js
windows10-2004-x64
3fragment/b...ard.js
windows11-ltsc_2024-x64
3fragment/b...d.html
windows10-2004-x64
3fragment/b...d.html
windows11-ltsc_2024-x64
3fragment/b...te.ps1
windows10-2004-x64
3fragment/b...te.ps1
windows11-ltsc_2024-x64
3fragment/b...nt.exe
windows10-2004-x64
1fragment/b...nt.exe
windows11-ltsc_2024-x64
1fragment/b...64.dll
windows10-2004-x64
1fragment/b...64.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/09/2026, 00:25
Static task
static1
Behavioral task
behavioral1
Sample
fragment/bot/__pycache__/main.cpython-314.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
fragment/bot/__pycache__/main.cpython-314.pyc
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
fragment/bot/__pycache__/sql.cpython-314.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
fragment/bot/__pycache__/sql.cpython-314.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
fragment/bot/main.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
fragment/bot/main.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
fragment/bot/sql.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
fragment/bot/sql.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
web/_tmp_aes.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
web/_tmp_aes.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
web/check.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
web/check.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
web/dashboard.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
web/dashboard.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
web/dashboard.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
web/dashboard.html
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
web/reseller_validate.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
web/reseller_validate.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
fragment/bot/web/_tmp_aes.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
fragment/bot/web/_tmp_aes.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
fragment/bot/web/check.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
fragment/bot/web/check.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
fragment/bot/web/dashboard.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
fragment/bot/web/dashboard.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
fragment/bot/web/dashboard.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
fragment/bot/web/dashboard.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
fragment/bot/web/reseller_validate.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
fragment/bot/web/reseller_validate.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
fragment/build/fragment.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
fragment/build/fragment.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
fragment/build/lua53-64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
fragment/build/lua53-64.dll
Resource
win11ltsc2024-20260709-en
General
- Target fragment/build/fragment.exe
- Size 11.4MB
- Sample260905-aq13yatbme
- SHA256 22114b36d0c1f5f79e0a2b0761d82a835bb3cc63dd3705fe2fc18ced37294451
- MD5 fef5103c5787355c2029b933bcb871e4
- SHA1 29197177fca84aa66601ee09e7bb31762ddda388
- SHA512 e57153210c8e8d360c0a053112f5a01f42d81fa6dc6d69efe0a5edf9396e593ef342e2a724718e331459b4d12b2ee3805576e681bed78a19d87778e754a654ec
- SSDEEP 49152:N9LgxGVecn7UmaRIAVPRBdd0NsN4bFZyt0OGm/CW0rbRMK8KwjhmStL8nQHr:gxGVeE71IZkFZ2C/rHItLj
- TLSH T128C663E4F1262BA4E437FD35641D7579839A5900FB39E03788FEEE2226B4DB404253A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe 3620 fragment.exe