b9395a20b33e43b8d2d18ef5a53cc0636cdd9532e60be80c0fa25342b2608840 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

EULA.txt

windows10-2004-x64

1

EULA.txt

windows11-ltsc_2024-x64

1

LICENSE.txt

windows10-2004-x64

1

LICENSE.txt

windows11-ltsc_2024-x64

1

Nightmare.exe

windows10-2004-x64

7

Nightmare.exe

windows11-ltsc_2024-x64

7

README.txt

windows10-2004-x64

1

README.txt

windows11-ltsc_2024-x64

1

changelog.txt

windows10-2004-x64

1

changelog.txt

windows11-ltsc_2024-x64

1

config

windows10-2004-x64

3

config

windows11-ltsc_2024-x64

3

lib/file_0.cpp

windows10-2004-x64

3

lib/file_0.cpp

windows11-ltsc_2024-x64

3

lib/file_48.c

windows10-2004-x64

3

lib/file_48.c

windows11-ltsc_2024-x64

3

lib/file_49.cs

windows10-2004-x64

3

lib/file_49.cs

windows11-ltsc_2024-x64

3

lib/file_50.cpp

windows10-2004-x64

3

lib/file_50.cpp

windows11-ltsc_2024-x64

3

lib/file_51.go

windows10-2004-x64

3

lib/file_51.go

windows11-ltsc_2024-x64

3

lib/file_52.cs

windows10-2004-x64

3

lib/file_52.cs

windows11-ltsc_2024-x64

3

lib/file_53.sss

windows10-2004-x64

3

lib/file_53.sss

windows11-ltsc_2024-x64

3

lib/file_54.c

windows10-2004-x64

3

lib/file_54.c

windows11-ltsc_2024-x64

3

lib/file_56.cpp

windows10-2004-x64

3

lib/file_56.cpp

windows11-ltsc_2024-x64

3

lib/file_57.c

windows10-2004-x64

3

lib/file_57.c

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Nightmare.zip
Size 117.7MB
Sample260928-e514psvs9n
SHA256 b9395a20b33e43b8d2d18ef5a53cc0636cdd9532e60be80c0fa25342b2608840
MD5 c5fd7299fbcd8b8374f0244daf019773
SHA1 cbd7f6117ed191742e9ccc8f284ea31124e74951
SHA512 0bc2c54ec0f0a1e3a2dffa299e889128b4d1e8623f3c9ae150b4e46913e0f8ce05678bb4efeb6a34d495727462cf2f890b86561bf4443b63ea104419855a5fa7
SSDEEP 3145728:hr9B1rdBxi2L+uyDGn6fNmP0ksb+Y6SZM0v:h3Dzi2/vn6FmJsuSG0v
TLSH
T19848337BED0525ADF3E3F3779946B8E1903FB2E66020AB188C06037561155DA94B2F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

EULA.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

EULA.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

LICENSE.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

LICENSE.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Nightmare.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

defense_evasion

Behavioral task

behavioral6

Sample

Nightmare.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

defense_evasion

Behavioral task

behavioral7

Sample

README.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

README.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

changelog.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

changelog.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

config

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

config

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

lib/file_0.cpp

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

lib/file_0.cpp

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

lib/file_48.c

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

lib/file_48.c

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

lib/file_49.cs

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

lib/file_49.cs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

lib/file_50.cpp

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

lib/file_50.cpp

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

lib/file_51.go

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

lib/file_51.go

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

lib/file_52.cs

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

lib/file_52.cs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

lib/file_53.sss

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

lib/file_53.sss

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

lib/file_54.c

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

lib/file_54.c

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

lib/file_56.cpp

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

lib/file_56.cpp

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

lib/file_57.c

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

lib/file_57.c

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  EULA.txt
- Size 1KB
- SHA256 6cfdccdaf44b7f583c6a72381b688ec4ba44ac4708bd063904a26770cb91146b
- MD5 b3f3906abc900c397e17414e06cdec4d
- SHA1 914d5538c142f55859af8901296910001af06628
- SHA512 7f870a576a8adc1cc96ed59300a81b571e56f6ca7b29c300dcc569dc3ea56d26a5395656478a76927068ba95842be8e0392ecef3c82310c632dd5865a316b641
- TLSH
  T15421632C7507BB31249043B21C0680DC9B1B66B051EB6AF3F54A80073B9672402F88BE
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral1 behavioral2
- Target
  LICENSE.txt
- Size 9KB
- SHA256 7f6839a61ce892b79c6549e2dc5a81fdbd240a0b260f8881216b45b7fda8b45d
- MD5 31c5a77b3c57c8c2e82b9541b00bcd5a
- SHA1 153d4bc14e3a2c1485006f1752e797ca8684d06d
- SHA512 ad33e3c0c3b060ad44c5b1b712c991b2d7042f6a60dc691c014d977c922a7e3a783ba9bade1a34de853c271fde1fb75bc2c47869acd863a40be3a6c6d754c0a6
- SSDEEP 192:ydP0KvBLCqikR/EgGJLrlwD+eilNi5Py1SDeoDXDw9lF5OMz6Q:PWBuqikR/EDJLriwlNi5KI1Tw9lF5OjQ
- TLSH
  T1EC12B57D7284177109D207E16A0AB9D6F62A953C3117AA2438FDC15923AAF2CC37F3E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  Nightmare.exe
- Size 12.4MB
- SHA256 7ac6fc6ec397d35fe7ae12b191553635da730d0d238c172c81b555834b7b73bc
- MD5 23c7ad52c305e1af150b933aa6afaff0
- SHA1 49f54dd8043924121040422dabcda45d1e4f436e
- SHA512 209be6354eb7f41a01d28bdd4732644911e75ab5ab153cf2f8b119100c751cab9fa1766115b4edc37f7dd570856d2882ab5a9ff3d0b323da990383748fa98dd3
- SSDEEP 196608:KFxVeXZUyfO00803N9fuQ64e+pEcR8iH56+CjBXTBkEbMNqG1Uu+2yymnHgul/it:KTVGvp903N9fz5pfRDw+GNkhDYamrZit
- TLSH
  T1BDD622E9A5E162B4D1D34500724B83AA31C1615D82FD4D293DCB3E022E19DBF6B4EEB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion
- Deletes itself
  defense_evasion
behavioral5 behavioral6
- Target
  README.txt
- Size 615B
- SHA256 d8d89e1ad2bcc678a35fad49dd642b1227ba763920531edd664d7d44197bf0d5
- MD5 61812594d55b16bf5ea82976a5967141
- SHA1 051d9f378b287a37e759cf0b8ed6d18fb475097e
- SHA512 d97e344e7a937c5e837f41a31425dce54bcce8a5698b60cd9ef0d55b87ccdd12582b765a018947343070d13a507b8ed3d52b4cb87902eac406e12798c22e7fbf
- TLSH
  T1A6F0E11A7E323F212A71D55642421915D91DA4F5C4CAC0F3F764021C7566FA786FE41B
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8
- Target
  changelog.txt
- Size 743B
- SHA256 d94536f9b0e3300749c5a7ea6e8ab3b5989a99cccc3f531c37f06394ffdd5759
- MD5 af12f3bdfaeca99030ef218633c6a243
- SHA1 b70dacdad92254cd96b805052d32e1ccc2cad856
- SHA512 b7cc72a76a9f36c49b1f1d96488c2910de39baa92a692ac412195001679c0503e31c7681757a78b438a3b8ab6ef9254f2f117ee69345ab1f24503bd0be0108a5
- TLSH
  T1CC01C525A4552F9383B39597D112372E09FD7C6BA326B9502F5C423C50417D54FDE06D
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral10 behavioral9
- Target
  config
- Size 3KB
- SHA256 60099cf91bb1a5717fc1f2d23cf36a61d3bfb70d9489fbb6f4bae98c560bf3d5
- MD5 d9bc824737177af5792846f26507231c
- SHA1 c44835e4881d95a97b597bebff5deba0233a5887
- SHA512 f9558f9e985643d8205b5534998412a5896bb6f5712bce5d6cf27469200eed64f29efc01936ab00c4a93625b0fc573036fba00ba2c4eb1d1d7c47555608f11e8
- TLSH
  T114610CABF16C48F87171266692FFFBEC51B380A0DD3D2105AE11DA021927F67C853AC6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  lib/file_0.cpp
- Size 249KB
- SHA256 6f581921c8c60123ba51f1e130d18420a7daed0edf73f2d0932790969b112849
- MD5 3c2b305332590fef5b179cd82cb19089
- SHA1 8347a515bec85b117234031d462409098b145e46
- SHA512 da521bf0a160670468a90e3c2ee0b49a9c967e5199fb4e02fdebca85d585ee05de786e8e0b4aa79f5ac1c283ee35cbdca9d9372eca749284a882ecc57160b5c3
- SSDEEP 6144:H0kvFZkz3Y0fUeBQBgeHLRPsN4+zsPTXBMvgaQpl7dp3R:UCIYS5QBgulkBzsPq3MJX
- TLSH
  T15B442347466BDD5C902BE3AEE38D8B2AC612DA902CE64F7D00BD43614159613F7AE827
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  lib/file_48.c
- Size 157KB
- SHA256 d10de412ec2af901d8e1e96fcc037197eb6c40f3f2bee00d05a58e8b3d820b89
- MD5 f13796dfed5fb0e7640234c400241a99
- SHA1 5d3c91c27c7bf3f4d2661220fab75d235a493e40
- SHA512 6164c999756b99a8683aaec24aa5d7b0054f902efb94c0b028842d78b08f83408c7255ae1bc5359cb00c4a62bd255dc5c90a4b3ce7e0815527097c9afd3cddb7
- SSDEEP 3072:qg9mKwxIhP0E2TmW8MrgytMwbRp+Fs9dwtyULbzsZ2:qgDhP0E2Ckrg2GLbzK2
- TLSH
  T1E8F3136E5CA5D71339BE12ECB55A4B0027B07A4369B8FB53B9F4C0F6084F79C9C19A09
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  lib/file_49.cs
- Size 230KB
- SHA256 df1c5304daea48c0ce1efe614e36885d4c9cc07002f3eacbd6c553550956df78
- MD5 092e79300c530f261c0cc22a1cbafbcf
- SHA1 adabca4ffbd6b8c9c5af7d46249db752b9a5cfae
- SHA512 58f14a4e75d49b6ac7bdcd063ac143e048fe25336fef47d73ac8a02363e067f325fe0a4dbe51758e07b26f5bd0fb0737908ca3b17bc34e706e5380defd57f6e4
- SSDEEP 3072:j0ivPqgjajr/bXcq1LqEO0f9ZTdQqS2bZR5UoYybCePDhSoK1ba7FPRKjp4piUAZ:j0gGjf1B3dQqlbFUoYybC0DhE+g03HZi
- TLSH
  T1783423469745D62574FC505361A4DC7673F22F28112EF8BFAB20B35A12E61BE720E17C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  lib/file_50.cpp
- Size 199KB
- SHA256 ba4e1934410bedea0535e287ca7dc2e156b6813a5bac5defa7e359c0c6dc1a5f
- MD5 f8395566ad44072742d2dd2f34ac61a9
- SHA1 6ac88d70dbb64cfb39eb433118d1f3736f3250d5
- SHA512 ef00f0a42127e7bccc754a228126224e1eb41475760317bb375a0b44d3a53cb80813563ba63f635c8255c21fe1718ef54c63da87b4b5ca7ceb50e9241b1489b1
- SSDEEP 3072:hJaEwtzO5nRSe35MyMI0HXPhv2nF/VZDmxLL4gRWM/7+gXAc4Ys/cway3XZJepIb:SEw835Q3ZMF/V1mJLtR3Qc47jSpIx+I
- TLSH
  T18A1423BAD717D3BE8FC1ED81326CE65C72240889D682F5293E5E203D3E2DA321C57691
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  lib/file_51.go
- Size 222KB
- SHA256 3c91ed05a407e5a89c5153e275524079e17600a4ad552227fb8c8bec75c7f49f
- MD5 4d992b056230c6ea799a7712eb3f3b52
- SHA1 740a74b0b902d16054f99cb0edc337194b7b47c8
- SHA512 6d8d6cb1a2f210b0326ee7871a4230aaa7379b615ab1fcd3dfcd6ebb0816eed5e9463f1974721a7b19c3e785279a601e93502a87b4a8fa76a17d75a605744f0a
- SSDEEP 6144:RiplKHUWaTatVXtEkYn4qwCn4upS3wsf7Wkwt7:c1WayXtZYnSA4upqWk8
- TLSH
  T17524231B050AD93D43701F718FFE0EE88E1391E645FB8A1CBE42D9884E9941EBE465B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  lib/file_52.cs
- Size 249KB
- SHA256 48d2cf0cc5876cadd46358c599380623568f9345a46b8b4bf11b3377400cf49d
- MD5 baa790cee61e44dbc6f17273bd9b7933
- SHA1 e4d036fd728ab16a32bebec25eeec7f53505fdad
- SHA512 9aabd852b21baa28f7f894742408c60deb7f136160a553b7840aa4e97e7d1712f6529a30a1ca19f7ec305f9732f4b12c582f9e0a9bba073f7ee0664feecc35ee
- SSDEEP 6144:hcX45iMgcG/MiMUtudUHD+rYGfJXf++viS+qbNdW/Is1Hs:hcX48MgFMUtudair0+v7nuIsm
- TLSH
  T195442236B67EC4961D061D4322372DB13972E5AE5AE7CF488D7EAA245618D303EC381D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  lib/file_53.sss
- Size 267KB
- SHA256 f4d26ebb798775ba5defca7cdf80a3dec3c22724d0c11bdee3e1cdaf83d95723
- MD5 8f07c9abf8f9614c6c1f98c23b1493b8
- SHA1 60ace24e88f74f57b3da8307de2a13e52004cd32
- SHA512 2f8aeb2ed87527526d578a2d4186c55ac8b5a27e0ed80e8ecba8326c191e746ddc22c9405d9672453fdb39c8259caecf4e88a428322bfd6b67fdd01032466ee6
- SSDEEP 6144:kEohJETSfYdjRv+WigefiVGUfn2hy7IzrLamIUAMVISH5KXBO21:3ohCTSfYfvlitK1fhIzNIUAMeWG
- TLSH
  T1C74423AED48B976B1EDBD0D9E0327C0EE517FC1E32355475B251F88EE42846AB202372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  lib/file_54.c
- Size 165KB
- SHA256 b1fcdc8a3e2b6957b6d4c92cd1a632ef026efd76c4f9168b054c1371d1eff6c4
- MD5 de8bfdd222dfc6e248f823cdc09c8256
- SHA1 8823f76125f3b9eb491fd2eb62201daa4ad1e0c0
- SHA512 84736b5910a49278fde549af29ea40c29f52a854e70c095c4cb327bdf1c32bf58e27996d9fd9c830b302e737dfee0720493b7999c01495c9fd3a2548279708c8
- SSDEEP 3072:qja1WhIhsX/R8I3q1/ZsqUZq/f4hQZZrTAoqFzcdnlL8iVkNop6KvY:qWR6v/oSq9/f4u0oKzcbIiKNoYn
- TLSH
  T1CAF312703F8655212BBB268A883D2F9B96D5135C652CED431C0FC8DF2359F59162633B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  lib/file_56.cpp
- Size 142KB
- SHA256 c0464aa6539b8bc90b19ddf1840c7c11af4638c6e1a9534acb2b509442fdb4bf
- MD5 3ef6fff72137f4ad5b1e515b0770dfc5
- SHA1 cc0475d01f2cd30e7e2fc68d6616224c15ea3008
- SHA512 548101003760d874349d9a7b0c8bf33451edc6561ae9b0c0415d042023b1c6c6c81d35ec61943039475f65f2add25ef54033278265edd75e6d3b426e34d9aacf
- SSDEEP 3072:0azZxureRu9vKoytb8f7JjBxXLpp3m7uM66Ovg5diYBQxCwN2LKxpCNNym:HzZ2Wdtb+NjB13LL/BYBs9N2LK/+Nym
- TLSH
  T123E312F63D1AC89E59F1583A0A01D2967CB25EDA788E4F12D1F704F4D05BE9EE013DA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  lib/file_57.c
- Size 264KB
- SHA256 b9b2720b88ab66b69937304a2e1575ef51324ad874c3a89f00522e113838899c
- MD5 2120b619e67f94794ac35a3c77bf1d60
- SHA1 92ce5fd2f756abdf6818642f5a672d343cc9427e
- SHA512 fec7ea0dec5307876ef18c350f938bd13ae66590b8ff8c4b0fee597219da56004219de20f71437ce5a600759bb6c84240d888948c0800e8c9744ea87d5892186
- SSDEEP 6144:H7zNSDX9SQOcCTfBfG8VT0Vu73lv0uV3V0rgQZkDu7gMV0/lV:Hf0DX91OpJG8ByI3vd2rBWq7gMVilV
- TLSH
  T1B844231E0CB85AAF9EF487618347BD8F4CF150AE83BCEA6824513AE5563D1901AF7C94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

defense_evasion

behavioral6

defense_evasion

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy