Overview
overview
3Static
static
3hb7hEXB_Te...9Z.eml
windows10-2004-x64
1hb7hEXB_Te...9Z.eml
windows11-ltsc_2024-x64
1Descriptio...nt.doc
windows10-2004-x64
1Descriptio...nt.doc
windows11-ltsc_2024-x64
1Station an...re.zip
windows10-2004-x64
1Station an...re.zip
windows11-ltsc_2024-x64
1Station an....1.xml
windows10-2004-x64
3Station an....1.xml
windows11-ltsc_2024-x64
1Station an...CA.xml
windows10-2004-x64
3Station an...CA.xml
windows11-ltsc_2024-x64
1Station an...es.xml
windows10-2004-x64
3Station an...es.xml
windows11-ltsc_2024-x64
1Station an...fo.xml
windows10-2004-x64
3Station an...fo.xml
windows11-ltsc_2024-x64
1Station an...te.xml
windows10-2004-x64
3Station an...te.xml
windows11-ltsc_2024-x64
1Station an...rt.xml
windows10-2004-x64
3Station an...rt.xml
windows11-ltsc_2024-x64
1Station an...ah.xml
windows10-2004-x64
3Station an...ah.xml
windows11-ltsc_2024-x64
1Station an...es.xml
windows10-2004-x64
3Station an...es.xml
windows11-ltsc_2024-x64
1Station an...fo.xml
windows10-2004-x64
3Station an...fo.xml
windows11-ltsc_2024-x64
1Station an...te.xml
windows10-2004-x64
3Station an...te.xml
windows11-ltsc_2024-x64
1Station an...e1.xml
windows10-2004-x64
3Station an...e1.xml
windows11-ltsc_2024-x64
1Station an...ps.xml
windows10-2004-x64
3Station an...ps.xml
windows11-ltsc_2024-x64
1Station an..._ca.qm
windows10-2004-x64
3Station an..._ca.qm
windows11-ltsc_2024-x64
3General
- Target hb7hEXB_TelVnRlx8yW6UAhKeLMPrXP0_2026-10-02T08_10_07.779Z.eml
- Size 30.8MB
- Sample261002-j2r4vaybph
- SHA256 9d23aabb512f88ef02f2f5f37f305033354729b77ab4ab73e03ec5e4737b80ad
- MD5 848f2113bf4350d3cae01b23292c9b85
- SHA1 6167f113db204eab5a3f0b24f98ba33f0da9c7ee
- SHA512 5a144aa2acecba89d2952f25a4c953818b9b38174692cfc06e2f8b59349d19ddb9a6abc32842ce11a9dc8e8fb829438973785e3614940ee7af6a0418986f3ba4
- SSDEEP 49152:qudGoaEevVcUmWTDNvHx9U/4iCgI1oNBtZubhQtMSDhOSQ7rlet/PbVmXEshTswy:l
- TLSH T1C7672334999A2AEF0B11E1F6B65AB8947DDD13870D86132303BC83E035F54A4DBB7C66
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
hb7hEXB_TelVnRlx8yW6UAhKeLMPrXP0_2026-10-02T08_10_07.779Z.eml
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
hb7hEXB_TelVnRlx8yW6UAhKeLMPrXP0_2026-10-02T08_10_07.779Z.eml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Description of analog automatic station announcement.doc
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Description of analog automatic station announcement.doc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Station announcement simulation software.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Station announcement simulation software.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Station announcement simulation software/Airport_Makkah_new3.1.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Station announcement simulation software/Airport_Makkah_new3.1.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Station announcement simulation software/config/Madrid_BARCA.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Station announcement simulation software/config/Madrid_BARCA.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Station announcement simulation software/config/RailwayNodes.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Station announcement simulation software/config/RailwayNodes.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Station announcement simulation software/config/Text_info.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Station announcement simulation software/config/Text_info.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
Station announcement simulation software/config/route.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
Station announcement simulation software/config/route.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
Station announcement simulation software/file/Madinah_Airport.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
Station announcement simulation software/file/Madinah_Airport.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
Station announcement simulation software/file/Makkah_Madinah.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Station announcement simulation software/file/Makkah_Madinah.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Station announcement simulation software/file/RailwayNodes.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Station announcement simulation software/file/RailwayNodes.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Station announcement simulation software/file/Text_info.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Station announcement simulation software/file/Text_info.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
Station announcement simulation software/file/route.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
Station announcement simulation software/file/route.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
Station announcement simulation software/file/route1.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
Station announcement simulation software/file/route1.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
Station announcement simulation software/file/special_gps.xml
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
Station announcement simulation software/file/special_gps.xml
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
Station announcement simulation software/translations/qt_ca.qm
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
Station announcement simulation software/translations/qt_ca.qm
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target hb7hEXB_TelVnRlx8yW6UAhKeLMPrXP0_2026-10-02T08_10_07.779Z.eml
- Size 30.8MB
- SHA256 9d23aabb512f88ef02f2f5f37f305033354729b77ab4ab73e03ec5e4737b80ad
- MD5 848f2113bf4350d3cae01b23292c9b85
- SHA1 6167f113db204eab5a3f0b24f98ba33f0da9c7ee
- SHA512 5a144aa2acecba89d2952f25a4c953818b9b38174692cfc06e2f8b59349d19ddb9a6abc32842ce11a9dc8e8fb829438973785e3614940ee7af6a0418986f3ba4
- SSDEEP 49152:qudGoaEevVcUmWTDNvHx9U/4iCgI1oNBtZubhQtMSDhOSQ7rlet/PbVmXEshTswy:l
- TLSH T1C7672334999A2AEF0B11E1F6B65AB8947DDD13870D86132303BC83E035F54A4DBB7C66
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Description of analog automatic station announcement.doc
- Size 1.5MB
- SHA256 71d109d559fcbbb1055f8fb201c747cbe30097222b0c2b402b31b55c07542383
- MD5 47e75265d42b03ab0132bedb87fed6a6
- SHA1 abd64be0c72d437416e9fa9902839daf46b4dadf
- SHA512 e8290bfe42c96cdd63cee1739d4cf61f499ae87c9a3d1c8161ba4e8aea979111f5af1faf7e5701610852f7c75f2e897111b30110091c43fb13456233556b4f45
- SSDEEP 24576:ZIqIcqxboIof3aP88J7DlRfitIK+aLIAx7Czl/eOolCKqRoPNm/9DZGL0MvEcSBm:WbEPaEkDemK+aLXgElm4m/szEcqDy
- TLSH T1CA652326BE93DF01C9EE067050ABCE6926348E1E7F705A2A330C3A257FB57714D8625D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Station announcement simulation software.zip
- Size 20.9MB
- SHA256 d5d2d525ff95242005787b67170128f12fb548270cd4983f9e9c5684ec4f2ea9
- MD5 4c6d63f484dab5b7021a541aba3341c0
- SHA1 b71b8107b018f03bf96c998da4983349edf827d8
- SHA512 eb56ac170bccbe3eaccd60a7748165bbf1191f51802cd3820f995b602828385365239d462612d0d7ca77d212e4faa5bc8fab6521f9a708933bd63f63ca8684d9
- SSDEEP 393216:YCHPfyDFMsCZePWCox+D0VruSplncqVGbIMpG4j7d/UTdZUR78zCsyxIexJexDuU:YCHaFMeRDwruSp1ZVNcD/UTdZYUsBx87
- TLSH T11C273394E0721B1DFC2F5772B6D08E32D12EA39471C2AEFE1572C65A38B1C4950BA91F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Station announcement simulation software/Airport_Makkah_new3.1.gpx
- Size 31KB
- SHA256 16ef94f512136ac1365d6a830d954ad267971e8f872add933580d9908e53a572
- MD5 1761d1788af3fd83c727f2ceaf56dd4a
- SHA1 d84f0d9b9821050564e16fe5cb36d8b7e2d7c02e
- SHA512 a071188a0da828e9634b735de760927549dd784cb66cabb38f5bf2aae062f58008a56ab853284f2a65620e4e593986ac048dcf68a69d9f3fd9e06775f189b95e
- SSDEEP 96:7w59I9iXqMmfbKqVqmAu7xHsBz5IF2BtfvMzRSNg+2D5AnOtgZFDf/KQzuYFpcYj:K9Ha5zvU8Ju5UckL5GOqDtzNqJY2g
- TLSH T1B8E2E81217F9DFCF6DCE4D168662CAC4F093BA3074C229D5C227CDD69AA1312696A37C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Station announcement simulation software/config/Madrid_BARCA.gpx
- Size 2KB
- SHA256 3eaa5369c5f994ecb50b3e0dd5b3c8b5362e8056fff384db11cc747103d5fd6f
- MD5 1e710797e4b66c67cc53261a55a181ac
- SHA1 6bafe0ab6b5811a424ead43177ab7a7724e2d708
- SHA512 b0aab1c95dfc8374276ecbd6b354de544659a0bc11811d62545a54efbce2f75e539d82f8826f5cf46e70bb7f18f4885ccb659e622358a81416fd9e2b3bd53715
- TLSH T1D0517F965BF8D3DD6CC28D449396F8D5BF90A00364C329D4B28EEE888F8B9D2112735C
- MD5 SHA1 SHA512 TLSH
-
- Target Station announcement simulation software/config/RailwayNodes.xml
- Size 2KB
- SHA256 cab11ffa0b2ef795116ef78b973a9da7f10fc79a73e52f3e6a68f448392355ae
- MD5 8ef29ddeda7fd354b71fa6065be2f1f1
- SHA1 07f11b0e7a43a9d5b3eab70225dc5539144a7a33
- SHA512 381ff161fe1be441a539f96ff3286e0ef275c45f7d01e2b297b87dc1a4e61bbf73424c381b089d552a7f66022bbebdc0faaf21ff799e27dfccf9f4e13e548bec
- TLSH T1D541C3BD8671ED2EEC9AC23B0272B6A82DB4596371271DF4441E451F2F0494A634F4F9
- MD5 SHA1 SHA512 TLSH
-
- Target Station announcement simulation software/config/Text_info.xml
- Size 771B
- SHA256 3ac032e40d38ab47a57bd5c95afed0b00540834f1961c562693861562ad34f37
- MD5 bc10e3ea1570aee5fcc64194c2b3828e
- SHA1 f55fac4dfc41e8455034de58c0ebc5ec0edcb109
- SHA512 1453877476f5dda77f1528744fcf38eeaef9811ee7e4e1f9c8072fb2d120ef65560cdce60124f8bac5d4b15b27110f954e07bf61af0398c79a82f9c775ec0c47
- TLSH T1ED0152708190CD574774F606A6AB79507969C2A2C10C8A42219864FFB2F2FD591FF364
- MD5 SHA1 SHA512 TLSH
-
- Target Station announcement simulation software/config/route.xml
- Size 1KB
- SHA256 e73dab825c50fe2f86aea4399c2847a89cf884c867f875317a1681e5034fbdee
- MD5 b75ab4ce3fd9c3a722da0ba58ffbb5a5
- SHA1 5884e49cd75c6c54f83b0b5c7276a462c33f9771
- SHA512 a0f7ab1955740b75fd6a4b015ffae0840e6a9b9d1b43bc836909c4fc7344906378aa4f57c387a639d5c962504f1aaeb3585ffe242fd4f7804b07117210c8dc21
- TLSH T10C31DC1B42BD7C59B32B132C1BD5EA68B7A2A05297332944FA5F38F30F775D94823045
- MD5 SHA1 SHA512 TLSH
-
- Target Station announcement simulation software/file/Madinah_Airport.gpx
- Size 17KB
- SHA256 bf7bc6f16d63d5d16f64fc77cc5b8e85dfc1dbde1367ea487c8c52ecb55fa650
- MD5 db5cb7735f2ae7cfade95c28be97753c
- SHA1 ea3ed2c6cae3b352f305d2068a2e0cb0c23854e1
- SHA512 41fa4e2c8d7332da39635693c9d69cf9b8a7a9d2f4ee89ecf9c719f1d66b09375bf68eb630d221ebe0752598ef4f9a1661a1555f393fca39bbaae8aebad7b4c1
- SSDEEP 192:Sfb0s2JNWxY2An1Geja7Uk50Lxf7Bpyy9gfyUJ6Aiz/u6XfguV+EDNz:MFYxn1GeIUk5017Bpb9gi
- TLSH T1CA82428B5AEBEACD8FA34D24015A8C90DC15E49676F37E80F25EF9D38F22192507364C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Station announcement simulation software/file/Makkah_Madinah.gpx
- Size 20KB
- SHA256 f375af8a40d99ce17d5e645948e871362e765f7434381db06832ffd5f2a1dd55
- MD5 dfabf7abf6ce4bf3078ad97b5efa07d5
- SHA1 8c92ad7cc38897c4163d78fd50d0040967669101
- SHA512 1ad173d1a51f939a660578c60d426c6bd6219a4702195b804bd2b4c91ed1d775ed459a900a889bb1a797d44934e9067d59614a26c5c3ce560658bf410b1ac2c8
- SSDEEP 192:C8nISmFafVsQFelZ9sv233k//ocuaxz9QlpaSfNFtr:TV2C4Z9sv23U//oYxz9zSFtr
- TLSH T148A2408B18FBE8D24A978E21414AAD95F811F68763F37E50B25EE9F4CF0129095336DC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Station announcement simulation software/file/RailwayNodes.xml
- Size 1.7MB
- SHA256 07192dcf1928a49d74add3c03c106d77eddef7d081f432e43ae9c85f3b81901b
- MD5 8f3c287fdd7852c194a3bad51b1c398f
- SHA1 5ffdc41bf432e80e67da6a4c09e0569241cd9724
- SHA512 b1fa386f3e90ca4c81b85b8dad8f5c8741dd5c5ec62f997f2013a3c5fea809b4de59ce42a4a64224c135bf21d02bf5b5acf9f0d11ccdaa67bd0cd1abad6132b3
- SSDEEP 6144:IzXwOWNZidxJJRicPTeNhuwUQDOwZlvbcDphDnmuRTj2hQItf6D3DrWQcA+TPD0J:IzXKidjJRnwUFhDh3Dl
- TLSH T12D85AB03E185ACD68E7602215A770B556491CEFF521C85EAECA7321FF86E8307A7F1B4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Station announcement simulation software/file/Text_info.xml
- Size 2KB
- SHA256 c3ca827916ea555e5da3642baa049d062ff7312b17ec33b941955a4120330fcf
- MD5 9036c5c8650934f171d00369dc4fa4ab
- SHA1 825fd05af561eeef06bf1c848d3ac37bf6119c4b
- SHA512 12c83a87d9173aba3879d4062d31f0185a4b8505dd70257a30ce086e23679ca060a635bd3ca9c29d8993dcb160571d0732b732bc882074eebeb1c81f07e0ac00
- TLSH T135419AF10750A81A0FF0D5AD2767F640EBE5E3EAC12C9C0A8054649C6DC6FB05EFA7A5
- MD5 SHA1 SHA512 TLSH
-
- Target Station announcement simulation software/file/route.xml
- Size 4KB
- SHA256 b29cf7c2b845db0e0c9c48ce6d55b17675b3368a309b090a4b6ff14917220fb2
- MD5 04b86a34a03f1b9b3f40e1761f50254d
- SHA1 e0b7695dfb77d125728e2725a0fe67270c68c441
- SHA512 c9ea30ebe391f1ab8137184afbab65cbaee6e8b0237cfb0257fb67fb715f69e5dd8e616728f6bdee001ab6f170bf58721756411a4873c77bf6bb5e006ff27da2
- SSDEEP 96:Nt7RUYURtitEohBtt12juyt0ooPt79XtIUorD6ytRoRXtLy:sowyJossUoquoby
- TLSH T1C591670C87A84C4AF77F11AC2BD5EF48FB22206296371244FA5F79E75F371A94817099
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Station announcement simulation software/file/route1.xml
- Size 9KB
- SHA256 53df764a9ee88e7933a6fce07851eae58e1974b4425ed8508a2acb40480474ac
- MD5 b5cf41d3c51e4f26b4ab6221ed8bf5a6
- SHA1 abd9d0a3b38d63224b3f773a455431e639badd2a
- SHA512 2c4cc78ecea9879dafbd630670440caaa6e3094938a382757edb76d4a9581ab5b9322795c21e82e7da72f97eb9d7f70bf1c09f1c54862021b318086a69bd0006
- SSDEEP 192:ufErY7Verzir+K7unre72prO7i0ry87NQrB7QrN7264JrI7MYrM7AWw2N04wC43:eJZRT+E6CQA3
- TLSH T19A12371CC6980C08F3BB21AC1BC5EF58BB1710A2EB271611FA8F76E74B775B5441B4A9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target Station announcement simulation software/file/special_gps.xml
- Size 239B
- SHA256 b1ff55c6d14961dc5528f5652b886ae3b5f6264cce4112472b7826380dec826e
- MD5 487d572367cde489cd30eee50c0a6d27
- SHA1 75326b035ef7b6f63391d9617676784d3d1de4d1
- SHA512 88f2c9924bd1b188b747d96286cb18707c7650671e5bd8c8feee03633b7ecbe7bdb342e6ba7f65215ff1e67abf41a31c54f8f15701112fafbdc4be6f1933a840
- TLSH T16ED05E4CE0818D9729B0963032AAD6438235AA218845878124AC11175FEDDA0128B490
- MD5 SHA1 SHA512 TLSH
-
- Target Station announcement simulation software/translations/qt_ca.qm
- Size 170KB
- SHA256 6af2c1bc7596f7204a8f34e5b7199a9696faadcd1bc6f7ffd9bc988db3c87205
- MD5 2d44e0122dbef1932edc1d69fb921a9c
- SHA1 39dbc0656f0d6747a0a2ad26e83edd29156ddd4b
- SHA512 d131191ce0a86a6e7ae87eb74f640d92e8ab4563cecf617aac49bdeb22499fe79675dc502f7b3ec8fdc2402f93df9c32c8014a6d256f5dcc6db30859e7c508c7
- SSDEEP 3072:lQdg0fzSLGjzrjx5pgeFkF50rSQ0zg7dmG:yfGGjzrjx5pnFkQRmG
- TLSH T1F804EB4167FD261DF6F32B396A3B86048F3A7C656939D50E53106D6D08B1E48CE3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10