6802e16a9c3f8781410aeb8e09c87c5c0aa57dee1741f116c870c80beb29d2ef | Triage™

Login
Reports

Overview

overview

8

Static

static

3

8INSD.zip

windows10-2004-x64

1

8INSD.zip

windows11-ltsc_2024-x64

1

net10.0-wi...s.json

windows10-2004-x64

3

net10.0-wi...s.json

windows11-ltsc_2024-x64

3

net10.0-wi...er.exe

windows10-2004-x64

1

net10.0-wi...er.exe

windows11-ltsc_2024-x64

1

net10.0-wi...er.exe

windows10-2004-x64

8

net10.0-wi...er.exe

windows11-ltsc_2024-x64

8

net10.0-wi...er.pdb

windows10-2004-x64

3

net10.0-wi...er.pdb

windows11-ltsc_2024-x64

3

net10.0-wi...g.json

windows10-2004-x64

3

net10.0-wi...g.json

windows11-ltsc_2024-x64

3

net10.0-wi...ON.jpg

windows10-2004-x64

1

net10.0-wi...ON.jpg

windows11-ltsc_2024-x64

1

net10.0-wi...nd.jpg

windows10-2004-x64

1

net10.0-wi...nd.jpg

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
8INSD.zip
Size 114KB
Sample261003-wwhpfaef52
SHA256 6802e16a9c3f8781410aeb8e09c87c5c0aa57dee1741f116c870c80beb29d2ef
MD5 3b165b5c7ec7a2ddb16070b43a4a8b6f
SHA1 6cc0528ca174331fa89c299aa4149cd3f6d73891
SHA512 a450ad97f1b126cd1d0c3bb13858389d66556599da9e302127082cadffedc59e5b87021fc9bfc089847f8696388e2aac255916dfc4475b7635d9ebeaecaafabf
SSDEEP 3072:3jhRJVk37vogDmlhK4Q1SMUmmTw+m0ynzSERF2EWGjqucwm:5eLulkQ0ay+4FdWCqucX
TLSH
T11CB3126CC8307910F48F18797E7C57AFBC8C270679A9316B095392693C7606F7AA4D63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

8INSD.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

8INSD.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

net10.0-windows/Booststrapper.deps.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

net10.0-windows/Booststrapper.deps.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

net10.0-windows/Booststrapper.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

net10.0-windows/Booststrapper.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

net10.0-windows/Booststrapper.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral8

Sample

net10.0-windows/Booststrapper.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

discovery persistence ransomware

Behavioral task

behavioral9

Sample

net10.0-windows/Booststrapper.pdb

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

net10.0-windows/Booststrapper.pdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

net10.0-windows/Booststrapper.runtimeconfig.json

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

discovery execution

Behavioral task

behavioral12

Sample

net10.0-windows/Booststrapper.runtimeconfig.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

discovery execution

Behavioral task

behavioral13

Sample

net10.0-windows/DOWNLOADICON.jpg

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

net10.0-windows/DOWNLOADICON.jpg

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

net10.0-windows/background.jpg

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

net10.0-windows/background.jpg

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  8INSD.zip
- Size 114KB
- SHA256 6802e16a9c3f8781410aeb8e09c87c5c0aa57dee1741f116c870c80beb29d2ef
- MD5 3b165b5c7ec7a2ddb16070b43a4a8b6f
- SHA1 6cc0528ca174331fa89c299aa4149cd3f6d73891
- SHA512 a450ad97f1b126cd1d0c3bb13858389d66556599da9e302127082cadffedc59e5b87021fc9bfc089847f8696388e2aac255916dfc4475b7635d9ebeaecaafabf
- SSDEEP 3072:3jhRJVk37vogDmlhK4Q1SMUmmTw+m0ynzSERF2EWGjqucwm:5eLulkQ0ay+4FdWCqucX
- TLSH
  T11CB3126CC8307910F48F18797E7C57AFBC8C270679A9316B095392693C7606F7AA4D63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  net10.0-windows/Booststrapper.deps.json
- Size 433B
- SHA256 4abb39f68404e288cfba33ed8667c4beb842eb03b0e7da60f3bf816b4bc6dc07
- MD5 436016eca9e3a0f2e470001228cf36cd
- SHA1 3259d6ac9a3fd086ac52ae04d2b552f21cde670c
- SHA512 8f0d5c83bb195e7d6f0e94c14d5b961f59a8e80b08b69782b5d451e4d9d02217bdef504be2f7791a09304a7008f11d35d97c7c45569192ca3484a7b46dbe0af6
- TLSH
  T1D7E09209E2981C9300F123BD643A4792F53297339011290AB7FF921C0F72C2B6625F75
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  net10.0-windows/Booststrapper.dll
- Size 35KB
- SHA256 48f97a293a27847d1860d2a28b365085636383641bd8f81e395b21810ba030fd
- MD5 6a1b9437464c86ed8c4939ccb3caba81
- SHA1 644f4269fa04cfa99fb62a0abec1425d9549c0ba
- SHA512 6e0b19f8ba3c57441a519e90e9f33adcebbee6a7ad9b48b576512cc90e6621cc142d9fc3200028c612d854455d94fac499d401bc0ae942e234cadb09657146ac
- SSDEEP 768:dsEpuNR20eRKrkOkqLqufbuFHOU9U8ypesxkdTV+b1q+B+bOczUbxYTdvet:fpuNQ0eRKrkOkqLqCbuFHZ+xkdTsb1qK
- TLSH
  T114F23A0867F98B23D0BE47BC9466610057B1E53AF223E74D4EC9F4EA1DA33A087517A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  net10.0-windows/Booststrapper.exe
- Size 158KB
- SHA256 6059fb8b5b7567946f81ecd629a4b02ba116c6bb12739059d88ac7d3e1eaa329
- MD5 89d5a3ca6be44ae32e86e350c592874f
- SHA1 052617afe8dc08e41ca0ca8f52ec9fa67516953e
- SHA512 66706760b9e7d9259892ba05ecad0e818766a5ce0ceae234d16c491c576418adacbb4ebcc0173125632a5e73504feaf1ef9934c14aaa710f9bd772ca564e9d74
- SSDEEP 3072:cVDxk88wN1nLVu7dL1Z9Qnlf9rE38wGTbzaAT51b:IHRu7F1nQnB8KKO
- TLSH
  T1D0F33C13A6A851BEE1B3D678C9924941FB7278594B71A7CF03504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral7 behavioral8
- Target
  net10.0-windows/Booststrapper.pdb
- Size 22KB
- SHA256 dffa355856028f899a381ad940d8f577099fecbc2a34eea91ecdf3c17260ddc9
- MD5 6b21e450e248fc0bd233ef955cff0e3b
- SHA1 78b92a91f2e11e2bd2c4d1632799347b4ce7fbe4
- SHA512 23e5906df2ea22611d26b95f945dfa3d598f902077b2964cd7decbc0c41a3458a2c21c5e0714cc5812741dd1256ee4c9d9acab03dd51c726097f1d72d85b3bbb
- SSDEEP 384:Dqh2+Ybi2pTAkxwtiQpQmuGTaIQPUUbrMURQMC1lHz73dRDdPKkXOH+fzRftVzJe:DEMtThC1lnDfnWvPDTcJPlq
- TLSH
  T131A2D6336388CE16C2021A7B6566C2DD3778C310270AEF79F1D46A1DDDAF79507BA1A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  net10.0-windows/Booststrapper.runtimeconfig.json
- Size 447B
- SHA256 039a0defb81019310fa2e8a17ef8d2ad086b1a37656149aa598f1f75893f2a22
- MD5 b451096fec6028f9acbd24badac69055
- SHA1 d7d2be96751913015927effb0d58b0ac1d3fd839
- SHA512 cb3e5230de93c3fed5cf8165107de145c613655fbda729e604419a80e3a51431ceaf4e30c92a71fb73a8ffe2c713bd95f8f34abad7e12d0f1bc692fc9886d490
- TLSH
  T141F0222ACA100DA308B973BAD62AC182FF30432B20141956B5FC081C2FB3A611100F99
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral11 behavioral12
- Target
  net10.0-windows/DOWNLOADICON.jpg
- Size 11KB
- SHA256 2119f81ff4d7ab99a268a8e1c89e6c19f6512f7e1f3de8c2d174e4b3d2250bce
- MD5 e81c4b853220be97c44643d4cb33ec25
- SHA1 24bf54c27a68bab696dbdee9b58035ea1f15bc23
- SHA512 8f1adf26a6090e184f01db5168887661da4ce43610a5b79ba02b0ff694b917075c9fc7412a02e521c72652d81a1e38f7d3b9f95c2594f48a2e3c69e7057a11d0
- SSDEEP 192:p6DCGwDF4CKH9Oe9Bcg4oH7lPAdtOptz2gq8Qo/llgeX:8VcFf2OU4i7lPae6gq4/lqeX
- TLSH
  T11832B04F9F674AE3CF7D4270815D070A1AD9FD20D222DF878AFD2921149F1580F43192
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  net10.0-windows/background.jpg
- Size 4KB
- SHA256 77017135f40cfd270ddb2c301231677c89b67d97055aed1dddfe8ca15b587013
- MD5 93618a9c8158e54329f86cfed35c7960
- SHA1 167cd118867aa31e0f409c6f125fd8a6b6449b75
- SHA512 c7eb28c758f43ff38eb1c1ca32094ece448308191437dda87fb67f399d603c3ac5fba24518de248e90934aaf828356d3def33aaea50e15c870647209d8308c1a
- SSDEEP 96:4qkj9xUbqUeSV2NGmyBZ0jP6xe7RO0suR/oAXRcjv6:qj9uWUeDpuZ0jixe74zi9XRc76
- TLSH
  T180816D090A742682CB414C7C86E5CA64920E3D29F7733B34A38AF645CA4336DE2DBB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

discoverypersistenceransomware

behavioral9

behavioral10

behavioral11

discoveryexecution

behavioral12

discoveryexecution

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy