726e1a0e98c1ef0985bc97ad103bffae4e5b85c0854d40afb6577731fa3a53b9 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

HorizonV3-... 2.zip

windows10-2004-x64

1

HorizonV3-... 2.zip

windows11-ltsc_2024-x64

1

00_MANIFEST.txt

windows10-2004-x64

1

00_MANIFEST.txt

windows11-ltsc_2024-x64

1

01_ODUOZnteF.class

windows10-2004-x64

3

01_ODUOZnteF.class

windows11-ltsc_2024-x64

3

02_ingShs.class

windows10-2004-x64

3

02_ingShs.class

windows11-ltsc_2024-x64

3

03_eklycro....class

windows10-2004-x64

3

03_eklycro....class

windows11-ltsc_2024-x64

3

04_nregmsHunsbu.class

windows10-2004-x64

3

04_nregmsHunsbu.class

windows11-ltsc_2024-x64

3

05_nregmsH....class

windows10-2004-x64

3

05_nregmsH....class

windows11-ltsc_2024-x64

3

06_nregmsH....class

windows10-2004-x64

3

06_nregmsH....class

windows11-ltsc_2024-x64

3

07_nregmsH....class

windows10-2004-x64

3

07_nregmsH....class

windows11-ltsc_2024-x64

3

08_main.py

windows10-2004-x64

3

08_main.py

windows11-ltsc_2024-x64

3

09_app.dll

windows10-2004-x64

1

09_app.dll

windows11-ltsc_2024-x64

1

10_app.pyd...ts.bin

windows10-2004-x64

3

10_app.pyd...ts.bin

windows11-ltsc_2024-x64

3

11_engine_...er.png

windows10-2004-x64

1

11_engine_...er.png

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
HorizonV3-triage-set 2.zip
Size 17.3MB
Sample260907-lsavbatepf
SHA256 726e1a0e98c1ef0985bc97ad103bffae4e5b85c0854d40afb6577731fa3a53b9
MD5 7a85d7466ef671b7587e3f802a9544b9
SHA1 5be6bd14d413767f2b200e5fc854771c3792ac5c
SHA512 b6e704b1e2a1ad030749492e01aca10f4979b4266dd5f8b96f6ce4425be2ac9fb32a2703d81fe52ca5591b8259cbf5fc3fce7cb69e31ae0df384d7dfe108c904
SSDEEP 393216:BFyOjGEITmRaqv8ICbtP6dBv7dpDibuOo/WSNGRI7KlyrN:BFyvCR7qbWFdZiaDzNGRI7brN
TLSH
T17A0733E74B7327EA60AB78318EDB32AE1D0DC4165A90ADA6E7740B937D330D7156C10E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

HorizonV3-triage-set 2.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral2

Sample

HorizonV3-triage-set 2.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

60 seconds

Behavioral task

behavioral3

Sample

00_MANIFEST.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

60 seconds

Behavioral task

behavioral4

Sample

00_MANIFEST.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

60 seconds

Behavioral task

behavioral5

Sample

01_ODUOZnteF.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

60 seconds

Behavioral task

behavioral6

Sample

01_ODUOZnteF.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

60 seconds

Behavioral task

behavioral7

Sample

02_ingShs.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

60 seconds

Behavioral task

behavioral8

Sample

02_ingShs.class

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

60 seconds

Behavioral task

behavioral9

Sample

03_eklycroFbwkqgxDqczqnCtij.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

60 seconds

Behavioral task

behavioral10

Sample

03_eklycroFbwkqgxDqczqnCtij.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

60 seconds

Behavioral task

behavioral11

Sample

04_nregmsHunsbu.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

60 seconds

Behavioral task

behavioral12

Sample

04_nregmsHunsbu.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

60 seconds

Behavioral task

behavioral13

Sample

05_nregmsHunsbu_inner1.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

60 seconds

Behavioral task

behavioral14

Sample

05_nregmsHunsbu_inner1.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

60 seconds

Behavioral task

behavioral15

Sample

06_nregmsHunsbu_inner2.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

60 seconds

Behavioral task

behavioral16

Sample

06_nregmsHunsbu_inner2.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

60 seconds

Behavioral task

behavioral17

Sample

07_nregmsHunsbu_inner3.class

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

60 seconds

Behavioral task

behavioral18

Sample

07_nregmsHunsbu_inner3.class

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

60 seconds

Behavioral task

behavioral19

Sample

08_main.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

60 seconds

Behavioral task

behavioral20

Sample

08_main.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

60 seconds

Behavioral task

behavioral21

Sample

09_app.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

60 seconds

Behavioral task

behavioral22

Sample

09_app.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

60 seconds

Behavioral task

behavioral23

Sample

10_app.pyd_encrypted_constants.bin

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

60 seconds

Behavioral task

behavioral24

Sample

10_app.pyd_encrypted_constants.bin

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

60 seconds

Behavioral task

behavioral25

Sample

11_engine_stego_carrier.png

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

60 seconds

Behavioral task

behavioral26

Sample

11_engine_stego_carrier.png

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

60 seconds

Malware Config

Targets

- Target
  HorizonV3-triage-set 2.zip
- Size 17.3MB
- SHA256 726e1a0e98c1ef0985bc97ad103bffae4e5b85c0854d40afb6577731fa3a53b9
- MD5 7a85d7466ef671b7587e3f802a9544b9
- SHA1 5be6bd14d413767f2b200e5fc854771c3792ac5c
- SHA512 b6e704b1e2a1ad030749492e01aca10f4979b4266dd5f8b96f6ce4425be2ac9fb32a2703d81fe52ca5591b8259cbf5fc3fce7cb69e31ae0df384d7dfe108c904
- SSDEEP 393216:BFyOjGEITmRaqv8ICbtP6dBv7dpDibuOo/WSNGRI7KlyrN:BFyvCR7qbWFdZiaDzNGRI7brN
- TLSH
  T17A0733E74B7327EA60AB78318EDB32AE1D0DC4165A90ADA6E7740B937D330D7156C10E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  00_MANIFEST.txt
- Size 1KB
- SHA256 288c2a793b56b866c9daeee9b1b341642af6998e1e85ed821bddd6c71f3f78d7
- MD5 0763999239d9078a161690f1bf728558
- SHA1 dd6512e59c6afd896d929be74ee16488fbc41e0e
- SHA512 f6c0613b73b2add793c9ff4d7acf5675577840c5794b9a00143a44273c55f878a9d757768ca5f4f4832c6472da5455cf48f1fe95a58a7c900fc982eca0e68df0
- TLSH
  T1EA31821A2CC1027C358312E67B1D8AC69202207EA75215583AAE022CBF30B27B2F59F2
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  01_ODUOZnteF.class
- Size 11KB
- SHA256 77c17c04176182bc78ac82a5d5e4409fcde492886f568c58225d5a94305fb274
- MD5 1ee08900630cc7f2f7f0191bf9521c54
- SHA1 c7ff88ec01d704d87d865692b7bb9e2d157116a2
- SHA512 7ecaf2a62cf0d21caddb12f3e942b1ab5d0d5e179ad5aa22eb91c6b212963d4dc74b24becb59a0ebbbf8fc073bc082f8f637bbdd01532d2119a053d32d87606f
- SSDEEP 192:E/NQJPwIwmKamMWktq7gezJkZHYznZwZxDlIfKR:E+JYbfMn6g0+Z+O4KR
- TLSH
  T12D421D3FADA95A8EE7F0DC78E61575126E23F031C8EBA7579D9BC8A105B1C4D88C84C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  02_ingShs.class
- Size 147KB
- SHA256 f5bf76f2b50ca1732eb9f50b3294ab39fe85c0c2970cf044ee299163d1a962d9
- MD5 6fdc18fe2572ddf0f3ecc6ddf3244801
- SHA1 e9435a9ef1a9fff6f6aa4c647c06c5e6c24dc37c
- SHA512 e97bfc70b2fa64c2760e30bd85c742ff55fea24a1d183a7bdeb6efc247a86ea88020310bb7d3f5d2bcc7323130a9cd157a1dc652ca737db516242f9767dfc77c
- SSDEEP 768:G2pZuKU4FLhzPDzoB/Krcw2saVko83LUjiPPo4Lm1dflXAhhOWozfd1:G2fRzoB+cIaVkoULUj654fghOlzF1
- TLSH
  T1ACE31B0F4F97A20EC39E5E3264945CE0EABBF383D4CB6743E566068A4DF406CE541A87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  03_eklycroFbwkqgxDqczqnCtij.class
- Size 27KB
- SHA256 8dd40f0a900dfb976b3811f2f8df235b454c8046f3baca5afc50ff8088a71686
- MD5 0d2a1512750d1014cc0311c83d95c640
- SHA1 f99fb4a8b16843e7d4f8149d311aceec9ea9701b
- SHA512 643ba76bdafa1491e8765741f7e7d70dbf50ff8755e78ea4c844f82141bb296a7fc9596bbdd7683691b6208fdf4a72053d1e0d050b57e2d3ecd131c461e5da26
- SSDEEP 384:PRUzXKmgBIo0pzNhmxlXaQWTT0fn8XEhg:PRs5c2KxxGIfn8XEhg
- TLSH
  T178C2611EAD891A6EF492EEB9D851495B323EF025E8D37397EEDF34E128B414D04A3341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  04_nregmsHunsbu.class
- Size 37KB
- SHA256 8dbe50748372d0f9d693ee8e13cf4a939a675ba7e69089aef68184aee6133ba9
- MD5 961c7fcb604e427c0b227b7913959e5c
- SHA1 96b5fc792d26956e91205ccebc9c4f02e557be21
- SHA512 11999e98e8befebabd3968e50a3b28b6cf49f7f136c5024fc6f35ece042cc6bcbc5512665f4a236b0c21a90b2dedbfdc4a319bf0638956217f1fb451c0877cda
- SSDEEP 768:3+2zrsoGYcVBo0wSoOBJh1tphhzaO9fClzgKdTY1:O99YOBESHBJh1tphhzaoabTY1
- TLSH
  T1D6032D3FAEAC9B4EE9C09EF410547A1427B8F421F4D7735FED8608C3D8A718E49426A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  05_nregmsHunsbu_inner1.class
- Size 1KB
- SHA256 a1b826aa7d8ed2a0de01f2d9d13748e6ff55c6bb9dea1426947c7434e0020714
- MD5 9866e3138dd7ef2ba229c6f57e9ed893
- SHA1 880af4bb8c681a815904f116f3c55920c07e7c06
- SHA512 593e79f0a04c37158cc1f95ce29e484e61095bb293897726967e3a3543f54485cc7d58fbac3672cad35839c5457a0c972d032094e3bf20795aab01a9dc61bdbc
- TLSH
  T12F214243E6000DF3D540E7BA89A31334D1318421D38B0A701AAA412AAC63FF8E5E2BE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  06_nregmsHunsbu_inner2.class
- Size 1KB
- SHA256 3e71530115ea3819221bb49e0ad8f7b781aae405ebf70a0f58ac09af127f37f9
- MD5 06524eaf4510996d1d2e0a42e7f2990b
- SHA1 c3ffec568652631a9db7aa94f3e9d323ff44d6cd
- SHA512 e90b9e39bf21c11d82399aaf57f5fe442e9262646005e080119fce827d2e6b6daa96124204c0c561e5999c7ce83fdea78e735b2e0deffa05fe0a3400c2345050
- TLSH
  T1A731D01FF4189573F680F3BC9C5207289238DC368967E6A32E5D0E7329F63919985BD4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  07_nregmsHunsbu_inner3.class
- Size 896B
- SHA256 c975a0f98a52620256424c304af576a822dac99d4734174193f8f79f35849bbd
- MD5 8c49d02e104d10f673ba6dc9d922a870
- SHA1 13cf9e9a7f4b0125ad9d67141e8ebc232afe220e
- SHA512 b49b2d58a6403a10637c173ef21f46a89ff498141e48b01c8e778ca6e709fc78baa89230c7e951da52050a3fdca87eb681ec75a8a5286612114b422fa8cd7aeb
- TLSH
  T1661152EE1820C8D3CD68E779D0537724BA39993D130779AA0BF6083B14A2713C9A17E0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  08_main.py
- Size 353B
- SHA256 bc87ec291523785fd9f8b1925e92dbe5aa71af4a9dd631c794fc14efd9e5afb1
- MD5 b35302bbc1615c96d2c72d1503d3ff48
- SHA1 345a3a7922abecfb79cd4a5ca5bb33eeca5f3ced
- SHA512 0a6c04ec4d00bdf1ee98ca49c80aee6556e1511b07602b01608f9a5043a8e90217734f2cadead4f3b1c1349b234669ee2d43383ea3909ac2c29028436e0e011a
- TLSH
  T18FE020D60D681C412545F3FCE00508F48C6312FF6FB705007CAE05B886084C4CBC9D42
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  09_app.pyd
- Size 1.8MB
- SHA256 d03c42c275f0dbc617428441508c49ae1adcbbc95af4eeb094bca4e4f8943f3e
- MD5 ca1666b335b285fa80e5759a1908ad6c
- SHA1 230896fb9d2892cf08e46d9d85a937a32a925e60
- SHA512 a4430a6714f0f5f278bf95d1dd2ec3e2d9ce33a12521a2e06926908e568f4626839a0e257e30bee1342715a540f427bd0b013567f22c8e0fdd53c0e6365301ec
- SSDEEP 24576:as1eI/R4pxl7ekJFfBupIFfrVw5eQKAx+gUpVpIgQjGHyCNyCvaz9a:aKeoR4d7ekJFpupIFekpZVyZwm9
- TLSH
  T18E85191323B40046F6F6D5F74EAA9B23DDB2F9CE1B2232D704A4EA592B83DD256DC144
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  10_app.pyd_encrypted_constants.bin
- Size 231KB
- SHA256 8a26b31a246ab3316a9d132ac56ba944b5673d0f51a16deecc4258cd3ee3f996
- MD5 40dd3d2a55890e9d122fe5b4327950e9
- SHA1 546621139932898e65490c9e79a003ba208229de
- SHA512 f13e5b5cd80c27672dac0161a25621d752f7642e00a26b530e554aa89445979492c0adaecdc1554c05eac3a17dc772895461e16ea51bd85560f05b5d0b097e7c
- SSDEEP 6144:aXUEaB+ih6Qj4NK3eWEXnOnAHGPZJv46C9bys8oqynS7cFy2Lt2BvUBnAxTZZtRu:AUEoHgQjGH61C9byBo+0xsTjz9PiE6
- TLSH
  T1D134F17063B94BB4C39AA285C326A2F47C71784DEEEB566B1D9F0E1331C068782F1576
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  11_engine_stego_carrier.png
- Size 16.2MB
- SHA256 9fd6b3b123e38362f20f929f7c80ecccbf6c499822f15bd75105b35a850dc842
- MD5 fd8283a5804e5cafcf2350a8f9e480db
- SHA1 0f4be9f81a5933ab4a0ccc752327ab4c827099b5
- SHA512 898b894d94662ba6df001c07dd39cd1d09ed2ffba0b5b6d777951eb564ae9fe2617f1c67ebadb3d4c92c3715427ab470b9a27ad826cfee27adedfdcca33ccb88
- SSDEEP 393216:sdu4xgCyzqsl4glTHsWlTD3b9mPaS2dAkPgpdnQfa:sdu53z9Dp53pmyR7PgpdnR
- TLSH
  T12D0733E38B3326EA506B78314EEB316E1D0DC8166A51AE67F7740B97BD371D705AC00A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy