00350fe25bb76818c33efd20984fa0f8055e017e1172ef10f382cae6ccc74e0b | Triage™

Login
Reports

Overview

overview

3

Static

static

1

bgnet0_sou...mo.pdf

windows10-2004-x64

3

bgnet0_sou...mo.pdf

windows11-ltsc_2024-x64

3

chatui.py

windows10-2004-x64

3

chatui.py

windows11-ltsc_2024-x64

3

chatuicurses.py

windows10-2004-x64

3

chatuicurses.py

windows11-ltsc_2024-x64

3

chatuidemo.py

windows10-2004-x64

3

chatuidemo.py

windows11-ltsc_2024-x64

3

dijkstra.py

windows10-2004-x64

3

dijkstra.py

windows11-ltsc_2024-x64

3

netfuncs.py

windows10-2004-x64

3

netfuncs.py

windows11-ltsc_2024-x64

3

select_client.py

windows10-2004-x64

3

select_client.py

windows11-ltsc_2024-x64

3

select_server.py

windows10-2004-x64

3

select_server.py

windows11-ltsc_2024-x64

3

bgnet0_sou...ent.py

windows10-2004-x64

3

bgnet0_sou...ent.py

windows11-ltsc_2024-x64

3

bgnet0_sou...ver.py

windows10-2004-x64

3

bgnet0_sou...ver.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
bgnet0_source.zip
Size 34KB
Sample260930-fxnn3szbpd
SHA256 00350fe25bb76818c33efd20984fa0f8055e017e1172ef10f382cae6ccc74e0b
MD5 f9c99b9974d776fc40155ab1c710278c
SHA1 be6934688a29144ebc90571d06e9bcdf13c9e711
SHA512 3972114aa9119250d3e0aa2848a3dd6429f1e9a1a3a6418eef7382d865d2c350b3e6fe630f003a636e503bee187085aebef54cecca0df6cb7761d9678e7dea58
SSDEEP 768:Yl8H69K8m77rnknu6hCO633/iDOviVv1tKq51UK+el3cKXE88zfzE1:Y8TRrnkui3hK4H3cKXE88zfI
TLSH
T1F9F25AB9CBAC4415EB0F1132E31EC18AE1A7C75B42447C9F6E655A82CB1E3137A32F56
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

adware discovery execution spyware

Static task

static1

Behavioral task

behavioral1

Sample

bgnet0_source/examples/ip-routing-demo.pdf

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral2

Sample

bgnet0_source/examples/ip-routing-demo.pdf

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral3

Sample

chatui.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

chatui.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

chatuicurses.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

chatuicurses.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

chatuidemo.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

chatuidemo.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

dijkstra.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

dijkstra.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

netfuncs.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

netfuncs.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

select_client.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

select_client.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

select_server.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

select_server.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

bgnet0_source/exercises/word/wordclient.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

bgnet0_source/exercises/word/wordclient.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

bgnet0_source/exercises/word/wordserver.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

bgnet0_source/exercises/word/wordserver.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  bgnet0_source/examples/ip-routing-demo.pdf
- Size 15KB
- SHA256 a505cbc66eb07721830a0b272f33ffbd4321fa718266f7c06bed2ae7e737a307
- MD5 292d9710dacbaf8fc02160b12ac05637
- SHA1 7eac8e3524ebeb91a7d5c9d24870a08367ed0037
- SHA512 729cfa6b829440d739282973f43ac43949b89dc5ea8ac93bd1a596e7e1d288cc9e8926ec3204f58b6e43f67182dcbceec2fa0b4a382b64db18e78398317b2628
- SSDEEP 384:2i2HEwM2+85fjSwm1m/uBxNds0FddzTanF:2i2jiefjoOAdp/zTuF
- TLSH
  T15072AE46DA5A726C84C04662A71339E193ECC3B07B444CDD3C3C06672F89E80EEBB5A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  chatui.py
- Size 1KB
- SHA256 81c6e315ba4d893c6acc12a58b3ab2ed063e0d215eace31d2ded5c80ca40e4b3
- MD5 259dd1059eb7ca0abef97328d8baf3e5
- SHA1 60c36a6876f4c19d530c07970ac1896dde97e732
- SHA512 1d09065be5d790aa5abdc11dbe05715b706f890e8efe2af3a90bc8078cfd3c13af3b48d510ae9f39f2e0a3cb6cc7a5c02f3e42c10e7605f2cbd73c0a93e888ef
- TLSH
  T14721F869F9429CD39317A8B87582D219B17D1DA35488F43CF86C00E43F82395C1B3AB9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  chatuicurses.py
- Size 1KB
- SHA256 4145280be2babc65a818c14e794c2a9b652c84eae1a60f1fcfc519c9af1e35f5
- MD5 c106567d07849ae00a9d334433f29c0a
- SHA1 e5cffbd55830977129573d55159793786d616fe7
- SHA512 cb386cb4cf08ba33247235cb2858e80fafaa568f800d7f28a01d9065feec35ebc845917561d9610ceaffe2f0f0a8ac4ff428e63c8e7653270acdb239af9477d2
- TLSH
  T16121CC194D206815533B883CD7C7F2414708502B7A68D07F7CAE82F07F88267C762AEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  chatuidemo.py
- Size 552B
- SHA256 e7558df1f58906078be1d81c5250bf92e8cfb65bbfa5750212e6518e0b1f2484
- MD5 c7df5d53ca13d7076dde243ff1307763
- SHA1 e7e4d4eef0767c3c2f05bdbdaf6a0cc9e9dffe2f
- SHA512 861d442898f0b36e1569c68bc13be6ff4bfb0aea7fbe4b9868963e0d9261285ef118cb2f69edeb4c1e7cd27ce3fa76615273912450ab3d313a9f9223ba262637
- TLSH
  T168F02B0658BD085B893E0C65760E63610B12294F0ABAB433B1BCE3706B65153C582BDD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  dijkstra.py
- Size 2KB
- SHA256 b995c6ecfd85935b2b7ba561f33d291c99174ab11b2c655a0d7c79610e7e6ee5
- MD5 fc70bcabfe6e85834b891bcc5b773c40
- SHA1 c59109d9337dc07ef4cefbd036ebda46bfc3c06b
- SHA512 b3ec9697d9fb27f2757fa27a89d57db33c635ddc0304d768b38b4271356277f4f7b91ba159ae05c21c18eed30e9a7d1315b851889ab01cada8db04403d2fe339
- TLSH
  T1C851322EDD851E224103C2B51C9BA085E211D8171752382CBB9CC6E91F2B06F97BFAED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  netfuncs.py
- Size 5KB
- SHA256 4c67d49d44f69e44a12fcba9259fecc9cd835191713266866eb712456e0cfa10
- MD5 dd841a570fb230133cdc36bc1bc9c84e
- SHA1 e522c00af408e801633a460e9d085f682fd47d31
- SHA512 68465156364e8fd0b808ee300dc04a130f66f53a1a1f6d5c0f09a81a84ac804f8b4d8a093c527ba8a58c9f471133fae4406310922c81e526b4567cd796193b63
- SSDEEP 96:kAF/62CcA4mtN36DEViLmVCtS6crzbmzYmX4Swmt51t1qWm0qy4yT9ikViRPjZVI:kAV62CcADNKDePCA6imJoSL51b7zikVR
- TLSH
  T15CC12029EC506D70D20BC639289BF409E399BA5350D929BDBB5CC3E41F26429C6BD86C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  select_client.py
- Size 1KB
- SHA256 ce9be035e5843872dcca6876ed822b4efef2a8b5a6c71fdfc95693e232593c43
- MD5 75f57e81d921e3bb89631fd37dfca810
- SHA1 ac25df30268dc8f64f23090229387d7053601f60
- SHA512 09947739eeada6e7cad18c29e72955cfcf63036cb78dda26ca2601a2032a827809f193c53dabfe473e3d387938205513c94bd7223847216ebc7cb987b87c6785
- TLSH
  T1E821350529808DA847975227A8D1E1453B37786F333F3C79F9CDE1141F2256920F1EB6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  select_server.py
- Size 504B
- SHA256 54c624a6c9736a1c5c01ef6ece1e5356cd1991ec1d4fedc174fb01d6d72c1b0d
- MD5 5c52f6fd49871b134c4993f7ab430f25
- SHA1 ae4d55606d9b5ec1f7800f5a68fc4382aac3a9ee
- SHA512 50ecb0846bddb41b0eb7b8907c800943706e25e53f50596422e6f4a371d2da302464e649a5060389501d7cc24c8d6f4ea86fe554cb2757824582c5c8557d480f
- TLSH
  T1A2F0EC491D80985A96DBC29D78A0D059D3056D2B10857C39B3ACDA121F85471656C929
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  bgnet0_source/exercises/word/wordclient.py
- Size 1KB
- SHA256 2cf911739454f889e59b2121c2b1ed15a3cf896e99d9784f3738f0c52c23c48e
- MD5 8bfed97ce60dc0456f606a544c6495bc
- SHA1 035dfc0054453ab7234e25284533385ef1f5d8c8
- SHA512 6f310ad87f8b1a526f8cb3c4906838b794900ee32f0b22ffaebd8a4a276160eed05a524da55b40a8672b6faaa49bc46f6aaf11f037b6e239ea840bb6de3f637c
- TLSH
  T12B21E106C9468D6653778F69C09BE482378FA8272138602C7FACC6446F316658271CFC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  bgnet0_source/exercises/word/wordserver.py
- Size 2KB
- SHA256 8b1018f43b43c50f785b4281b09aecc0f1dff0afba62c143e0f8eb4a6aadef27
- MD5 352b2de31fa732a860f855f974ee4cf0
- SHA1 97093cbd5cd58375db80ce46034fb7cdc02b2728
- SHA512 a88b0b8aeb2c853cbe197cddf4c118020fa28bcd4ca1aa55626cd3f1f3bf6000f99ca25a47e292421af088f75a5fbc0e4d2be084b744d39d3ab6ebd22ebf71df
- TLSH
  T1EC51CA28FC0B0C5B02E7C60578DA5802BB59A5370259752D3B9D8A482FFDD2E749E67C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspyware

behavioral2

adwarediscoveryspyware

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

© 2018-2026

Terms | Privacy