25b8849b55313a34235d8f060ff241c3b31bb5d0f0fe2a027deb09f5ddf56931 | Triage™

Login
Reports

Overview

overview

5

Static

static

5

Freebuff-0...64.exe

windows10-2004-x64

5

Freebuff-0...64.exe

windows11-ltsc_2024-x64

5

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

resources/app.js

windows10-2004-x64

3

resources/app.js

windows11-ltsc_2024-x64

3

resources/...ne.exe

windows10-2004-x64

1

resources/...ne.exe

windows11-ltsc_2024-x64

1

resources/bun/bun.exe

windows10-2004-x64

1

resources/bun/bun.exe

windows11-ltsc_2024-x64

1

resources/...ter.js

windows10-2004-x64

3

resources/...ter.js

windows11-ltsc_2024-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

resources/...ook.js

windows10-2004-x64

3

resources/...ook.js

windows11-ltsc_2024-x64

3

resources/...tor.js

windows10-2004-x64

3

resources/...tor.js

windows11-ltsc_2024-x64

3

resources/...pbu.js

windows10-2004-x64

3

resources/...pbu.js

windows11-ltsc_2024-x64

3

resources/...xhg.js

windows10-2004-x64

3

resources/...xhg.js

windows11-ltsc_2024-x64

3

resources/...cgS.js

windows10-2004-x64

3

resources/...cgS.js

windows11-ltsc_2024-x64

3

resources/...exZ.js

windows10-2004-x64

3

resources/...exZ.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Freebuff-0.0.110-win-x64.exe
Size 146.7MB
Sample260913-vxtmnas1bw
SHA256 25b8849b55313a34235d8f060ff241c3b31bb5d0f0fe2a027deb09f5ddf56931
MD5 018e662bfd73372c2d8a060cf2266abd
SHA1 3c3ea2007dc8e312c70bda28da0dfbe794ac52e9
SHA512 f6be223351fa866f65cf257306a637c25176ccd384e2b6c6a77b8bd32759def5d5c8484a0869c561f926136d6c7caced3b5d43038d6bf2e1847071bb31f52535
SSDEEP 3145728:DCnfevg3rA6bKZGsg1RBo74FDZ3iKzrX2KMGDMrJy:Ofqg33sg13D9zj2ZrM
TLSH
T1E47833400941DA55FA48E932ABE19A73873E4E54BEADCD373A5CF152309B3F30A4693D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Freebuff-0.0.110-win-x64.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

discovery execution

Behavioral task

behavioral2

Sample

Freebuff-0.0.110-win-x64.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

discovery execution

Behavioral task

behavioral3

Sample

$PLUGINSDIR/SpiderBanner.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/SpiderBanner.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/WinShell.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/WinShell.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

resources/app.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

resources/app.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

resources/bun/bun-baseline.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

resources/bun/bun-baseline.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

resources/bun/bun.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

resources/bun/bun.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

resources/electron-updater.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

resources/electron-updater.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

resources/elevate.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

resources/elevate.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

resources/orchestrator/claude-elevation-hook.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

resources/orchestrator/claude-elevation-hook.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

resources/orchestrator/orchestrator.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

resources/orchestrator/orchestrator.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

resources/orchestrator/ui/assets/abap-BdImnpbu.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

resources/orchestrator/ui/assets/abap-BdImnpbu.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

resources/orchestrator/ui/assets/actionscript-3-CoDkCxhg.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

resources/orchestrator/ui/assets/actionscript-3-CoDkCxhg.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

resources/orchestrator/ui/assets/ada-bCR0ucgS.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

resources/orchestrator/ui/assets/ada-bCR0ucgS.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

resources/orchestrator/ui/assets/andromeeda-C4gqWexZ.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

resources/orchestrator/ui/assets/andromeeda-C4gqWexZ.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Freebuff-0.0.110-win-x64.exe
- Size 146.7MB
- SHA256 25b8849b55313a34235d8f060ff241c3b31bb5d0f0fe2a027deb09f5ddf56931
- MD5 018e662bfd73372c2d8a060cf2266abd
- SHA1 3c3ea2007dc8e312c70bda28da0dfbe794ac52e9
- SHA512 f6be223351fa866f65cf257306a637c25176ccd384e2b6c6a77b8bd32759def5d5c8484a0869c561f926136d6c7caced3b5d43038d6bf2e1847071bb31f52535
- SSDEEP 3145728:DCnfevg3rA6bKZGsg1RBo74FDZ3iKzrX2KMGDMrJy:Ofqg33sg13D9zj2ZrM
- TLSH
  T1E47833400941DA55FA48E932ABE19A73873E4E54BEADCD373A5CF152309B3F30A4693D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- TLSH
  T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  resources/app.asar
- Size 26.7MB
- SHA256 f0d246cb6a62793cc721f0bdc02dcae339943b8b74bcda915c60f6e1fa2b4f13
- MD5 0d03e8b6a88ea00f817822a7f8d6dd3d
- SHA1 ef0927e206eb35630cc88da1a58a286283609361
- SHA512 0e3a3c56e39076c629897c5e835a25219d6c2d1a615e0043c76dd95f127ac845108e7acd762c1e8287e82ef5c096eacdf4ed08f2ee8ab5c23c8a1c7dbbe4d259
- SSDEEP 393216:hsKt2XGjdd5fMEi+qfiUmqs1KqG00Hj+Cj:hsMJdyi1KqG0uD
- TLSH
  T1E957BF03FADF54ADC9A6D078C7491373E335F8E90230656735AC83247F53A604BA9BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  resources/bun/bun-baseline.exe
- Size 82.1MB
- SHA256 4cc72eb3f9a696d9424ca3e048f0fdf2411f76417595979f1b84adc8582a82b7
- MD5 6b002ce32c23d510844e9bc0a26b933c
- SHA1 739f0cd871c045a0b5197a3168befd1e2f79a04b
- SHA512 c20f654ba5f266b8cca53fd224779e279cfe6d1b33dd2e4f8fd7ae49314b586b04657308d04880fd2ea810ed64ea86852890b1395871cf8c565439797e3ceb2e
- SSDEEP 786432:z1kpxkL9AYJHimQ58FJHO+ige5G7mnz7TROVdGZJ8rsSSgs9:CpxkLxJCmQSFJHVigeQ7Qz7KjsRp
- TLSH
  T1D8188E2771E260ECD056C0B4A75786639A32788A173869FB31D89B713F66DE02B3C771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  resources/bun/bun.exe
- Size 82.1MB
- SHA256 326b115ef43ec3905e8d819f18344b7ac0005dcf42f58a4de26e9e2de34364c5
- MD5 74f05c0ecf962cb3c7a8a741b63053c4
- SHA1 e89138b10464644d5bc8044223db8ff0dc7e1301
- SHA512 f20419c723c0d0095521ffe963517fee5313cb3ea1621927e830596460c445b56f9a288bcac27a99c3396427917eb757d2b4a871a097267173a88da8d43c0b1b
- SSDEEP 786432:F1kpxkL9AYJHimQ58FJHO+ige5G7mnz7TROVdGZJ8rsSSgsy:wpxkLxJCmQSFJHVigeQ7Qz7KjsRO
- TLSH
  T13E188E2771E260ECD056C0B4A75786639A32788A173869FB31D89B713F66DE02B3C771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  resources/electron-updater.cjs
- Size 519KB
- SHA256 7c387c32ef9e1de598a1a16a2d262d37985d36937c94112b9a96f679dfac6156
- MD5 ab8bb82fccdf486c72f992f39fbc1a4a
- SHA1 f53c91d2ad2c49ef93acdcba6c35d1fb5abb3fbd
- SHA512 d3a352583c87224c9067c090fe7368c1c7e0dc3a81e08a8d477955584e92a14bdd2193dd1519cda6d369893c06557cf581103b10104605489acab9bb42015e78
- SSDEEP 6144:p9f7IZP2lbAJyXqb1ipcMFwepn+MAvo5NF31NqIa8N0Fw:jYP2lbAJF1ipcMZnODi
- TLSH
  T1D8B492896AF720214663B1BD9E5F9006B276D107150DDE18B99CD7E0AF8103886FFFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  resources/elevate.exe
- Size 120KB
- SHA256 e24494857e34aaa3250bcc037b672f48cb443c1571083629fde9ac6815c7952a
- MD5 dc6e8919c4d65183b0b08fd20a89e524
- SHA1 bd81c861291e50616fae5288593138e8f7547df5
- SHA512 ffb098c81bf7ad196894168ba01cf09cf63b0a17ac018253bc59c1545b77917f57f1cd0b31a9ba260877f01f20c61f062e7e5141a68afceb54a6708319cfa348
- SSDEEP 3072:BRbLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWletz:fPrwRhte1XsE1l+z
- TLSH
  T146C37C1274C0C072E9732A3555B4CAA15E7DFE710E759FAB2398027A4F602C0AB29F77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  resources/orchestrator/claude-elevation-hook.js
- Size 4KB
- SHA256 1f7746ca000860a9362aa726c3960c9a7b6af2a27daeab4a2e6d5a26441a4012
- MD5 28d7629e854964842f5549d9cfa6a343
- SHA1 4cdd03ff32d2afecc965a8f47d643a21350cb9e4
- SHA512 b8776e5d2d768bbeaf5536a5c4accaeeb7da0d4780e6db44f46f982282d35ac7fc924877058b31896f27f794179481178107b75eabc8b6ddaa9c57981048cc55
- SSDEEP 96:qffCRcGciSL62TB7l7ps77KlH550OmybVTc1mo+PBjVaAaZ0Tta6MNkNu9NxieN5:/uLbJxpE7oH55dmuDa2kHiY97lngo9dN
- TLSH
  T17081884269FD0DE4716B603EB48D1480F9F98251319CCA97BA3DED25AB1C486CBF17A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  resources/orchestrator/orchestrator.js
- Size 10.0MB
- SHA256 2b43b387f51085bed08c679565601a51edbdc1d538ba4fd1354867eb3c2c6dba
- MD5 b52aac87f88a2b9d149709a06c53ce08
- SHA1 038a450c1223af7f2a72e133fe8a15515cd7474c
- SHA512 0938e4dc7c75d58baf118d0e6bc0ebe3db81f3c5960af4d014cc24f1998e820503d1ad3a4e0b68b3ff56ccb659153fe90015d238fd29aa7a58f9986661c5a7dc
- SSDEEP 98304:VAc3cqYY6Bj0Q/XGyHq9GesTH4J2liXkHx:VAc3cqYY6Bj0Q/XGyHq9GesTQXkR
- TLSH
  T19BB6F985A6F3041B1693B028ED7A944E763461878108DA39BF9D51E5BF8C538B3F3BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  resources/orchestrator/ui/assets/abap-BdImnpbu.js
- Size 15KB
- SHA256 d0a7972c37e141f01cc3aaf9aabbbb3e87c4778b9fdd3ccb575d1e1ff279c0fc
- MD5 2071c834f580753aa43a9ab319454f34
- SHA1 6e0c0477e5b2841ca5a48d2964e4fe44ed79e93b
- SHA512 1615b447f2fe71e6a12af0f7a26acf95e2cd7a7f147b9d85c3efcb7cdb8cc2738723d7f5d650c0db891f37fdbf244eea57edae5622ee9693c9122be7921ed98c
- SSDEEP 384:rYQpuCwLvQsjaZzt8KICT8r+Tm63rCTMN:9puC6vQsjuxZT8rAm4
- TLSH
  T16C62F86920B74CFF46FB3EE488C7D387713590526ACD8D21E9188F09DA48D4A916B3D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  resources/orchestrator/ui/assets/actionscript-3-CoDkCxhg.js
- Size 14KB
- SHA256 cc3e3792f3b16d9244f17680e20712184eac64175649df8add097ca3be123c84
- MD5 3c168da600ee92a5121efe583f54cb5c
- SHA1 3cef1a96e25d8b7d842f825e53d95f76093a36fa
- SHA512 a0ed5c3374dcc73e1320531e335edb5e4708c37ad372429168fb8e9207b58c1ad100425e59e43409998e4b16386051a69a9b1bb7161e2d41b8fb3938b6d60684
- SSDEEP 192:1RWAeueqW58WZmh9DuWexJGP9PdxszaCmBp6AeT0PT8WcGWefXwhd/okfFdNTjx2:2mD6HYFP4azWgwm9O4T2I
- TLSH
  T1CC626459587F6DBE34AA7DA5445FE3451129B011A3C08D4CA18C8B8DFFEA2CF492332B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources/orchestrator/ui/assets/ada-bCR0ucgS.js
- Size 46KB
- SHA256 fc5d05054dc584a01ec795083de1774ef07f3a29fc6cfbc1902c208a09862313
- MD5 210a54e85c3ded7f9db6ce5134e56e4c
- SHA1 bf24b02eaf57f23334c4464330d864ba0c793962
- SHA512 15bf8cc19a6d1fbaa587956947499f5e41d4e76caa485ef1e48d1400e2cf7aefdd711ea54bd934f5245bc37cf4dcbf60209cbab82d9b7bdba3f8c69f5b7ec69d
- SSDEEP 384:zX+bwrD7edw3TgzDvZoAeUmkauSlFNTO98ml:zXEwrD7edw3+bNmkauSlFNTO98ml
- TLSH
  T11E23DD9D557F5EFA6A9F2E58408FF30D3435E0976EC49D8A8048DB8CE71A48E85237C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  resources/orchestrator/ui/assets/andromeeda-C4gqWexZ.js
- Size 8KB
- SHA256 7fcfeda6c4e4d7cc1ce1c72aaca6d802bc7e107858bf0d34eca95ff4223669bd
- MD5 a52d08347830f9ec9b2081cc89afe700
- SHA1 b09a37e80f38b63efd417c9adb4e34bf53ee4685
- SHA512 00c89cd1647007eaf05d0d94678029b1ad6f4accaf3772c2874d64be2744a6d15a965805e84215b2c0a3d5e0fc0180fda332b2fafa3901803efb8d4f8a491187
- SSDEEP 192:JpC4dik6zk6I8gYve8vjSFQwx2/SaAniu+xFnJ6JCXkvLNPD2zvS28ZR4z7yn7:n8RgOe8vjSFz5iua6J/
- TLSH
  T1441251074AC5347D3F9B08B398E63A7138BE60E1E1543B9E66FEF078721A7854233956
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

discoveryexecution

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy