01ad302902c2816d5c8990fe74c1b210ced7329c3c74a9b75bb43dc76d4261d7 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

Code_Forge...t__.py

windows10-2004-x64

3

Code_Forge...t__.py

windows11-ltsc_2024-x64

3

Code_Forge...n__.py

windows10-2004-x64

3

Code_Forge...n__.py

windows11-ltsc_2024-x64

3

Code_Forge...13.pyc

windows10-2004-x64

3

Code_Forge...13.pyc

windows11-ltsc_2024-x64

3

Code_Forge...13.pyc

windows10-2004-x64

3

Code_Forge...13.pyc

windows11-ltsc_2024-x64

3

Code_Forge...13.pyc

windows10-2004-x64

3

Code_Forge...13.pyc

windows11-ltsc_2024-x64

3

Code_Forge...13.pyc

windows10-2004-x64

3

Code_Forge...13.pyc

windows11-ltsc_2024-x64

3

Code_Forge...13.pyc

windows10-2004-x64

3

Code_Forge...13.pyc

windows11-ltsc_2024-x64

3

Code_Forge...13.pyc

windows10-2004-x64

3

Code_Forge...13.pyc

windows11-ltsc_2024-x64

3

Code_Forge...app.py

windows10-2004-x64

3

Code_Forge...app.py

windows11-ltsc_2024-x64

3

Code_Forge...ach.py

windows10-2004-x64

3

Code_Forge...ach.py

windows11-ltsc_2024-x64

3

Code_Forge.../db.py

windows10-2004-x64

3

Code_Forge.../db.py

windows11-ltsc_2024-x64

3

Code_Forge...rch.py

windows10-2004-x64

3

Code_Forge...rch.py

windows11-ltsc_2024-x64

3

Code_Forge...est.py

windows10-2004-x64

3

Code_Forge...est.py

windows11-ltsc_2024-x64

3

Code_Forge...ws.bat

windows10-2004-x64

3

Code_Forge...ws.bat

windows11-ltsc_2024-x64

3

Code_Forge...est.py

windows10-2004-x64

3

Code_Forge...est.py

windows11-ltsc_2024-x64

3

Resubmissions

10/09/2026, 02:17

260910-cq7ltscq2x8

10/09/2026, 02:14

260910-cphlbawtey3

Sharing

Copy URL Twitter E-mail

General

Target
Code_Forge_Phase2.zip
Size 52KB
Sample260910-cphlbawtey
SHA256 01ad302902c2816d5c8990fe74c1b210ced7329c3c74a9b75bb43dc76d4261d7
MD5 6a1668f0fa252e41dc544055881ae41d
SHA1 35cfe06525939165506c50956d6695e631d410ca
SHA512 1b7f3cb936e63c78d8e13e67bc681602fc70cdbb5e585629e78eb7073fa3a318878bdc30ef6f9a191eed1896b856bdef863e3dbf22e27fc6722a7538455af294
SSDEEP 1536:w7ba0U7p/t/firjGmv3SVldb33Wm0ODOBktWOUnai6+JB+kcMkN8RrDeoeMs7+QZ:F7c5v6WcODOU2qrXc
TLSH
T1EF33E051736C6CE0D7C9EE77E3DA9B89822DA8AB1305AE183D881140BD237457DBB353
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

Code_Forge_Phase2/cf/__init__.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Code_Forge_Phase2/cf/__init__.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

Code_Forge_Phase2/cf/__main__.py

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

discovery execution

Behavioral task

behavioral4

Sample

Code_Forge_Phase2/cf/__main__.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

Code_Forge_Phase2/cf/__pycache__/__init__.cpython-313.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

16 signatures

150 seconds

discovery execution

Behavioral task

behavioral6

Sample

Code_Forge_Phase2/cf/__pycache__/__init__.cpython-313.pyc

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Code_Forge_Phase2/cf/__pycache__/__main__.cpython-313.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Code_Forge_Phase2/cf/__pycache__/__main__.cpython-313.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Code_Forge_Phase2/cf/__pycache__/app.cpython-313.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

Code_Forge_Phase2/cf/__pycache__/app.cpython-313.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

Code_Forge_Phase2/cf/__pycache__/coach.cpython-313.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Code_Forge_Phase2/cf/__pycache__/coach.cpython-313.pyc

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

Code_Forge_Phase2/cf/__pycache__/db.cpython-313.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

Code_Forge_Phase2/cf/__pycache__/db.cpython-313.pyc

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

Code_Forge_Phase2/cf/__pycache__/search.cpython-313.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

Code_Forge_Phase2/cf/__pycache__/search.cpython-313.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

Code_Forge_Phase2/cf/app.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Code_Forge_Phase2/cf/app.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

Code_Forge_Phase2/cf/coach.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

Code_Forge_Phase2/cf/coach.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

Code_Forge_Phase2/cf/db.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

Code_Forge_Phase2/cf/db.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

Code_Forge_Phase2/cf/search.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

Code_Forge_Phase2/cf/search.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

Code_Forge_Phase2/phase2_smoke_test.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

Code_Forge_Phase2/phase2_smoke_test.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

Code_Forge_Phase2/run_windows.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Code_Forge_Phase2/run_windows.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Code_Forge_Phase2/smoke_test.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

Code_Forge_Phase2/smoke_test.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  Code_Forge_Phase2/cf/__init__.py
- Size 56B
- SHA256 3761ab76a645bb296f84263830e73fb016f3d371e412c52b87e35c214f9b3c75
- MD5 ed330a2347d85d8b2c7ddd8370bde704
- SHA1 bca692d695d40340a57d56b858395e57c5831da4
- SHA512 72610cdf6b24f390236c9f575fa22a8fb83a73240db5195c7636d7c25b870875d36787f4eeed6cd18d0bf72371506e01eac1869f3c9ebd80b6df882600223f08
- TLSH
  T1009002035B458AE24247415749654056473510BA9444105453C4D0E9A7FA1840FC42A8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Code_Forge_Phase2/cf/__main__.py
- Size 61B
- SHA256 f3beb1653aa13de0c10f618a2abf29297df701ff0f8454e8b0023c6d842c1604
- MD5 737fc0d2bc70ce06007edad5c05ba6ed
- SHA1 ef2c1024b076454618fd0affd4c1fa85288eee40
- SHA512 42ab119b219c3c8fa32e1bd6ad573e2da38112d02c3ff656a024467e6d478083b6a13780a4151738ad2eeb149ad1abe7b674543a0468f3ed63e1c3d67b0e7c8a
- TLSH
  T1A4A00216059351814CE1D64C7464E15412A25A374950D134252019AF26921134D51C8E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral3 behavioral4
- Target
  Code_Forge_Phase2/cf/__pycache__/__init__.cpython-313.pyc
- Size 178B
- SHA256 52337475e953c51adceba0c7d11dc527f062b7b49d8cedb4856a0c7dcf15b08d
- MD5 35c83cea2d17b23b242f88e8f3dcb075
- SHA1 b472b7117d2cb4dfd76586fc1cfbf2821b186161
- SHA512 338fb931eaf6fa69ccc46ed7914a771cb62d9904b1bcbc2a95123ca7db53bdd7b00f7f7f9fb933c9b90eb3c64a007673da3071c4f2b0a03348c44f4d9f8f553e
- TLSH
  T1D7C08C10CB52C6A2E5A75136D025935E26AEE4AEF052101B204CE2997A6F2143BD1829
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral5 behavioral6
- Target
  Code_Forge_Phase2/cf/__pycache__/__main__.cpython-313.pyc
- Size 212B
- SHA256 733f1862ffd74b13e5eadb8376c87b788fabd05e3d5a32618b0fffda44cad240
- MD5 1fde183576c356a5bd96b3c2b59d9dd1
- SHA1 516022c61cd4302e6b47cf0e5b710291147e3633
- SHA512 5487856d3219406d07882500b2d1d84db88825ec45b4652baefc128ef1090ebce07d343d323642358b7c72f24560890dd3e4d49785d346573cb41b0fad5b6df4
- TLSH
  T18DD02281A42080C2D6F4A3BEA014C16850B69910A20B400EB00936D3890A3101EC0C2C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Code_Forge_Phase2/cf/__pycache__/app.cpython-313.pyc
- Size 62KB
- SHA256 4ef72a0d411da6d2b48989f06ef646721a5ade674af7eba8695fccf4b3171718
- MD5 598f29fe583ba2b1cee316669c7db519
- SHA1 7c537a7a54d488ad3de35560d8e1f4672cba166e
- SHA512 a2778ada707887cde327a76acf0a975cbda8a0e2f92d00d49c47b762556476d64a3df472b488ce3c5ae0fb762d0b5746b65b4b110fbba0fb0c9b313c29cd910e
- SSDEEP 768:/zXnVOa+ncaRHZTJNOqhdXPATI8qa99EeFNRqOsU7HJHpeKXfCwo8jqvDOwLGNkj:/rl+9/XP/aHEeFNj5peQCwgq4gk
- TLSH
  T14B53D46BB4B0D656FEB4F13580E65414E37D6EAAB1608737201E297A3CC3AB5CD6930C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Code_Forge_Phase2/cf/__pycache__/coach.cpython-313.pyc
- Size 4KB
- SHA256 502d4d9f21fc52c655d34c5339f1d25d08a3f9f692704da9b0ab2a54b499a226
- MD5 6bfabf899ef8c0cae5cf4a9f792f555c
- SHA1 df6d8b6b620f37b5b8953267f5162a0d0002bebf
- SHA512 0775a7969fd6342240965425dc9f6ce89ae206f54f2b999d8be48654cf8e2e779917cb9d6469b731502a144fcd1f6085945be0c27ca7df4719563fdf45053b19
- SSDEEP 96:hANNuH9R4PYzzNNnsBzeqiYs0J9zYKycx7vLHZPidhlaUfbvYqc/NI:hA0Nw6QZHx7D5YDfDYqAI
- TLSH
  T1E091D88323001333DA7202F7B47F5DC8A77554B1B7128A9068ADB1A919C6E25C73F7E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Code_Forge_Phase2/cf/__pycache__/db.cpython-313.pyc
- Size 10KB
- SHA256 e81e265a3463bab3c18bfac18f4baa68059afa108e7a02c567fde213dcca2289
- MD5 7d63a301995e2f17accca839c99111f2
- SHA1 912e70fafac6c97c309202f16904d7ffd12f403a
- SHA512 e800ddd69fb663d4f3a697510c20a31743025f626d1dcedfb77fcfd93a3b16c1ce800516958cec842e379c9d3a72277c8762d2451439f65ec18582fcf86c673b
- SSDEEP 192:aOENXZgzRSMlVFv/d5fC+ao3cFvrt+h/ietZUZCnRKF8N:2JjMlVFv/TfeJFvrtkqUmZ92
- TLSH
  T1B032F65E3E002220E1F2D174C4F26921627EE99F5F1272C1396C91E6CFBA51FD5722B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Code_Forge_Phase2/cf/__pycache__/search.cpython-313.pyc
- Size 2KB
- SHA256 8a273c34e81f3d3490e4347c334b7636b72dc2291319f614918cda76b0d8305d
- MD5 0d66688478f3ee624eb74f5508d19138
- SHA1 a31c3a62110fe898b13b5f7bd9ee106a0f90956f
- SHA512 11fd19e501dc7e7055d7997c184e26c652e9d74d77f2b5573b1fed0fd93b733302d6451c42cf806d313b174b6d6cd45b5bdaba0d1d6278bfba863b85f24ad515
- TLSH
  T10241698BA9527677C618D2BC8CEC1524A35847E1F6461B33308CF308EDFB515C9C0758
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Code_Forge_Phase2/cf/app.py
- Size 34KB
- SHA256 e4acc20001161a6c662e23fb90181867ceaff8be3270cb3542d8f002d9536c96
- MD5 ddac16e8392710268eba0d7eeedc91e3
- SHA1 8066b4286149febd50836671a15f50e75e3d44e6
- SHA512 be97561a6092fe0f6b3ebd1d56d7775431e122801ebda285db10b9ffdda1d17d69040f038ccbec886c17d9c614c1af360acc1820c1affded028d13f0ee9b65a2
- SSDEEP 768:6UsuondGjxQpcNubmHj3CU78O8afAHwT0m:6/dcQ6NubmHjyE8LafAQT3
- TLSH
  T160F2A51E95109C2AF357EC6EA857B913FA1F5F27140D0420BCBC66D01F6853682EEEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Code_Forge_Phase2/cf/coach.py
- Size 3KB
- SHA256 e2d3edd3ef060049ef89b7532180836d993303c231f82104bf2d386ad80601fa
- MD5 c2b03ae668a4808a884d4b408a4d8c8e
- SHA1 c02129721075e21ccb4e23164d0f905a35335c2c
- SHA512 c8f7ec857d3a3008c24688c09669593980086b906cb1335fba26dd722b6352bfab991b4c02500d5734e7995465716be5d410bf002364ac08717310d110aac843
- TLSH
  T1B081638397840A315AA702E61D6A68C49675543B3F116E6438ECE19D6F4C83EC27F7E8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Code_Forge_Phase2/cf/db.py
- Size 10KB
- SHA256 e2367ff76741038e168c69164024cda6d2d751dcbd71e357e15c5a9d1239b5a9
- MD5 0108b1aa31adb3648f8b5db5b593da47
- SHA1 8250ee0c2388f05f4a5bbf535c033321e3012b34
- SHA512 6388ee98b4cce201f30c6ba508a8d9d50a8b355a057ce42517dc5f48364124121debc39aa1f2ebf7836e34d3efa612ed2206ac806436b03ecb69e5df2e1dd2d5
- SSDEEP 192:IJENXZgzRSMlNHDWezdE2NqP4hDH7Ac9dKPisn7cjCNgGdgONfNHK/:9JjMlBPzq2NTH7H9dKPX7RN7OON8
- TLSH
  T1E922656EBE101A3110E39539897B5802793DF51F1F4238983DAC91D58FAC82ED1B7AED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Code_Forge_Phase2/cf/search.py
- Size 1KB
- SHA256 408b2faa52b5eb2ed5fe38c74bc70a3b74c9835f6bef937916dcc2ef89aba47b
- MD5 54f724b5485125b431326ebe6945b435
- SHA1 258ba756f243ea334e6df0e7c5faf271e6a39402
- SHA512 373d42d6a10ff77f15c85ed552dc6d314ddb8aca7a03b9e2b9496bdcf4145f7515dcce246d5a2052843cb3516d9adb3fa5bdeb1fab1de17e4816b53342cac210
- TLSH
  T19A311105147731B381BCCA5C8DE1D8DD6258AD1330C01B2970FCEB8C7FA4E2AD5E9A49
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Code_Forge_Phase2/phase2_smoke_test.py
- Size 1KB
- SHA256 ba22df37c5786dcef4941647667193a536fde3c5bfe9588faf6a7458320690d6
- MD5 84d8ce8592db19caf1ffc8e3c1b7f4ec
- SHA1 f2028609b0631307eb2e4b2e5b8639dcfbae1ed1
- SHA512 9200a11e96ea2383992edcb1503a5143bba20d48c1c23993a4f46b3da2c25ab33d4d1ecad4f7bf8f6851ce5bee5bef5ee608e2f77d8fe0f9ca2ed467e42d83cc
- TLSH
  T15431452AC1322DB631FAFF76016718619613F54369A6C408739CD1A02FBC965917B3F8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Code_Forge_Phase2/run_windows.bat
- Size 59B
- SHA256 9ba53cef62a9feef5e62c74f53a2323bbeababc889f630fede53fb55afab47c8
- MD5 4df2e5f6ab0ab5681ff161766a4c41d7
- SHA1 d0a26a69d76c3e9ef4aae99c627c8eee8485b5ba
- SHA512 5be1239cf3f40a53a4e508d21da50aa6524a46fc3285ab6752e5b9f90619e7a8b47ad88a79846623d7e804fd669b11e88de1c2ea5021aadc791d0abcc3ba84b0
- TLSH
  T111A022320C20008020B8080A800F00002C8C00C3880C2A00E0A2322B2C0A8000C00082
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Code_Forge_Phase2/smoke_test.py
- Size 544B
- SHA256 988b3ab802953c8d39def47d08e1d1b1ff0a7d8e3950ec9a34bb337e506ef271
- MD5 45ea8ffe67f35b5e6268058a184d3ec9
- SHA1 2aab14a1be986b41ec9cf919166f5ce584bc860f
- SHA512 3c63a615ba873e65454ef51d0310d0aa25eb96e25597f84b7ab34c8f723f922cea52e41a45331315994298a7bbd32b53778882581a5d80ab237e3ce5f24a10fb
- TLSH
  T196F084420122ACA902EDF83E059E9040CA1E9E81BBB0000165F5A3B2BB24CF08D2B33A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryexecution

behavioral4

behavioral5

discoveryexecution

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

© 2018-2026

Terms | Privacy