192940e74dc1410bd3fd9426de71f86715ad13357a88788941a005a7603ab6b1 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

RTBP Mod/s...ger.py

windows10-2004-x64

3

RTBP Mod/s...ger.py

windows11-ltsc_2024-x64

3

RTBP Mod/s...ain.py

windows10-2004-x64

3

RTBP Mod/s...ain.py

windows11-ltsc_2024-x64

3

RTBP Mod/s.../In.py

windows10-2004-x64

3

RTBP Mod/s.../In.py

windows11-ltsc_2024-x64

3

RTBP Mod/s...Out.py

windows10-2004-x64

3

RTBP Mod/s...Out.py

windows11-ltsc_2024-x64

3

RTBP Mod/s...ent.py

windows10-2004-x64

3

RTBP Mod/s...ent.py

windows11-ltsc_2024-x64

3

RTBP/Companion.exe

windows10-2004-x64

3

RTBP/Companion.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
RTBP.rar
Size 1.8MB
Sample260930-v3f9hsvemg
SHA256 192940e74dc1410bd3fd9426de71f86715ad13357a88788941a005a7603ab6b1
MD5 433ca29fb79a1b6ea78d22486d8654f8
SHA1 4114917d19ea875fe7ff072c062715f1b24749e5
SHA512 2bc1920b0563773efa871aa74e6e23be48a9b4fc80aac258820e7ff474a9506e10200171eaaf66019528caefd690bac7f19895e8cbb405c42088909409e1d72f
SSDEEP 49152:8MbMx/ZSMiimHuSiSOuy4h0kL9g8d7mhQUBWVbZbYze:pMoimHnrDFGC9c1BWVZwe
TLSH
T19F853325D4D115598DC9024E8DD2CBE5B307AABDA63EC492FFACF47B272730E2442CA5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

defense_evasion execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

RTBP Mod/scripts/Logger.py

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

RTBP Mod/scripts/Logger.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

RTBP Mod/scripts/Main.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

RTBP Mod/scripts/Main.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

RTBP Mod/scripts/Message/In.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

RTBP Mod/scripts/Message/In.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

RTBP Mod/scripts/Message/Out.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

RTBP Mod/scripts/Message/Out.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

RTBP Mod/scripts/SimulationClient.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

RTBP Mod/scripts/SimulationClient.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

RTBP/Companion.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

RTBP/Companion.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

defense_evasion

Malware Config

Targets

- Target
  RTBP Mod/scripts/Logger.py
- Size 341B
- SHA256 bf7133070de37f60c8c0fa53290818d47b3a837a32fd3914d911f3245c0dd75c
- MD5 342a66962de400ae9e9b4c1b9add4302
- SHA1 039cc8d52ee0595424be5d62b5353f168b0720f7
- SHA512 ae67d4d872a183b48c859ec07c3be44fe486a78f6def347c22ae268d150337fd8898dde4e94bbfc63ec9d0e2f465a6c6e0a1bf2ed87c472bcfd9b925822ba9bf
- TLSH
  T179E026320B1F24483A90A616641C4E892AB0C1E28201F8B889C6B328037CD1EEEBA54A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  RTBP Mod/scripts/Main.py
- Size 1KB
- SHA256 e1bc864db822dcd7804c44db483e317f4b158892e3c3ac68007918c96cec15fb
- MD5 8e94b5ba41d1a52b9ef23418d35d96d7
- SHA1 e16a47eae97f445644dd9ec34a913deb57ccca45
- SHA512 f322d8366067a8b122b8b43b47c4d2b2b5a033eaab4eb8fcdc87eecf94b7b180f1ce631566e7f3f9244b3db8f400ec264bca41fee62cbfdcae5c2d64d497d9dd
- TLSH
  T131118B216726D83F4167936FE002D2417C3580378A2F343363E8A62D8E505436BDEA1B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  RTBP Mod/scripts/Message/In.py
- Size 344B
- SHA256 a60808e305a7afa86898155582634bcce97c99181fe5997710c1123ecbd6c840
- MD5 41e8bd74847bf63f89a935d3040b8150
- SHA1 a1beb09b27537162124f0c961d41d85c852fbb29
- SHA512 b5e40a290e6d8e7d6d1d4936b9682f1efe98a0deccad702c10208dc6299ee91a3131bc075e8f0f0bdc1d4ac6673520b7aaa17b9edfc7688175f98409f30e37c6
- TLSH
  T16AE02616A0E5F20CABB3A74EC8440813E07E4A15778C2D7FDCE07EA6E853415503A098
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  RTBP Mod/scripts/Message/Out.py
- Size 1KB
- SHA256 a01cd76ce078528b094aed9e524672170bc96deccde752c9f145f9a7a1c821ac
- MD5 51867bf21831cb12debfaa6065d32bba
- SHA1 e44cf2026c65112df240e52132e44573791670e1
- SHA512 6dfb42c94397097fee60f154db97827ec947eab9634a262f4c61ac8e25910961d5e05189c4e30c3b46557f56ffadb388c0f11e229e09ac5a3b39a8a2f92bc30c
- TLSH
  T1F82178ACE365D48B5A3763276444008374ED4A87A92C76C77EF5E16024D3C1FA24DC9A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  RTBP Mod/scripts/SimulationClient.py
- Size 5KB
- SHA256 4195c3766dca40fe9430c0e52684a310999e743962a142780ce3095e7e57407d
- MD5 2c0ccd036884c8798a12490d3d1d512c
- SHA1 1d4f93986195411430768b8fdf92786ef3be0839
- SHA512 245ff63b41796eda36e89033974a38607e9627dcd4994d7cc7ed10548a7b7134255a95b018b919c9fbb7b642b8ff54e29099d8b68ad52ac14f97fa9ce6bcfd49
- SSDEEP 96:bVXR/pxEkSYOp9xBDv9HgoTuvToqZbrvjXv3Oec2wT2C5rVJQ75nDzragFp:PwVYOp9xBD5PXeNwTbJJinDzragFp
- TLSH
  T1D0C164E4943F90FA4263A19D984822173AFD55734F2E646BBEE1C2386E8140B535EED4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  RTBP/Companion.exe
- Size 6.0MB
- SHA256 a414c8e8d6631f48be0749268238d492358a311c081625a373aea370b2224d1d
- MD5 b233cb52c303158a110bdc126b046923
- SHA1 3b7f12ce7b5201cbe2bd7de1de459d2c278137c3
- SHA512 8324beb45a051fa063b63151f5a5de1fa624d20fecef978cf55e0b10b52b19e32c38445f1840e69f99f1a70e1c8ff05ef712cc712eef651f8e19dca5062eaf35
- SSDEEP 98304:TQ/LtO1QxTKtJ0AYczqFl5vndZozsp6x+IUzsRC5vNXU:uLtO1Qx2cAYTXQspm
- TLSH
  T1CA566C07D3A345FAC17BC134C666D372AB71B6965134BB1F1D68C7226F30AA09F2E264
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

defense_evasion

© 2018-2026

Terms | Privacy