c54b09c99555b7d13b44afa8efca1eaf008a3e4fcef2900c117d7eb44b77b010 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

SprocketCo....3.zip

windows10-2004-x64

1

SprocketCo....3.zip

windows11-ltsc_2024-x64

1

BepInEx/pl...ck.dll

windows10-2004-x64

1

BepInEx/pl...ck.dll

windows11-ltsc_2024-x64

1

LICENSE

windows10-2004-x64

3

LICENSE

windows11-ltsc_2024-x64

3

README.md

windows10-2004-x64

3

README.md

windows11-ltsc_2024-x64

3

Sprocket_D...n.json

windows10-2004-x64

3

Sprocket_D...n.json

windows11-ltsc_2024-x64

3

Sprocket_D...e.json

windows10-2004-x64

3

Sprocket_D...e.json

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
SprocketColdWarCore-v0.1.3.zip
Size 8KB
Sample261006-t88ehs1v6q
SHA256 c54b09c99555b7d13b44afa8efca1eaf008a3e4fcef2900c117d7eb44b77b010
MD5 c4304604b5993fd09544917b0c7fd789
SHA1 cce307cebb0ffd306688de472c24c35b375e3659
SHA512 158547a7ebf70fd4b5ca39d4bfb16abae6201cab186c79110d66cc63f25c7e02bf89dfb5d49718485652a8e2ffea03af5d1317632235b3490e84d58635195ad5
SSDEEP 192:Ox/iAtHnMwxdVlG7Pr7BYzOyQskBzU6b25wpPI26+TCtba:Yd5DlG7DeXHI0sIYTCtba
TLSH
T12C028D39E9EECB11D2F9C1B70D493B40E1258482E682D8199BFCC492D927D386DE474E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SprocketColdWarCore-v0.1.3.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

SprocketColdWarCore-v0.1.3.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

BepInEx/plugins/SprocketColdWarExpansionPack/SprocketColdWarExpansionPack.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

BepInEx/plugins/SprocketColdWarExpansionPack/SprocketColdWarExpansionPack.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

LICENSE

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

LICENSE

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

README.md

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

README.md

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Sprocket_Data/StreamingAssets/Technology/CWEP_Cannon.json

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral10

Sample

Sprocket_Data/StreamingAssets/Technology/CWEP_Cannon.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral11

Sample

Sprocket_Data/StreamingAssets/Technology/CWEP_Engine.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Sprocket_Data/StreamingAssets/Technology/CWEP_Engine.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  SprocketColdWarCore-v0.1.3.zip
- Size 8KB
- SHA256 c54b09c99555b7d13b44afa8efca1eaf008a3e4fcef2900c117d7eb44b77b010
- MD5 c4304604b5993fd09544917b0c7fd789
- SHA1 cce307cebb0ffd306688de472c24c35b375e3659
- SHA512 158547a7ebf70fd4b5ca39d4bfb16abae6201cab186c79110d66cc63f25c7e02bf89dfb5d49718485652a8e2ffea03af5d1317632235b3490e84d58635195ad5
- SSDEEP 192:Ox/iAtHnMwxdVlG7Pr7BYzOyQskBzU6b25wpPI26+TCtba:Yd5DlG7DeXHI0sIYTCtba
- TLSH
  T12C028D39E9EECB11D2F9C1B70D493B40E1258482E682D8199BFCC492D927D386DE474E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  BepInEx/plugins/SprocketColdWarExpansionPack/SprocketColdWarExpansionPack.dll
- Size 13KB
- SHA256 082b1023d27e12a79686ca3bb521a48f9392e8a74a80262ae7d3420b2b16adf6
- MD5 bcb855bcdfe3d45bcf2e2d9e23a17164
- SHA1 4fedab64838eafa00d3b9fb189bbae526cef5e54
- SHA512 fd17a6f6ff85cd5a2ba64913dd4c3250c0aeb75d546ce7466a11c531cbb7ce225ff7011865fc009f28a9d74fb2ba3bee3064721491efcac2b6a21c1a6da2515c
- SSDEEP 192:0XPduLTCa+7DIe06dVCe5HNDiwhqfOL81tl3NhbwRmvikD7EgeCktorFvdI:4luLTC/h02R1xP8ZbwAvDDGyu
- TLSH
  T168529614BBF44216FAFB1FB06CB60A621A7ABE86EB31C74C4544104F5C32B45AB61B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  LICENSE
- Size 1KB
- SHA256 ba21f85cdb690d57d46d2a50d59055cb02c80be74117b0fa788e886654c950be
- MD5 9e0a75bd500825076a54a0c3391148af
- SHA1 2220efee48ef8b18a74a2c9df9caf1314b8343a5
- SHA512 0455c0409550df49357949ff0bacd2fc9fb2fd90f93ed0959b71aee706cb80a754da3e32e37a884d1b450987dfd4668c8cffc51d54e5b43f553f0e09d81b9002
- TLSH
  T11311421EB25107A618AA13605678A8D5F22BB25A7A6F2A84247DF245232A06CC5FB840
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  README.md
- Size 698B
- SHA256 858783edd7fb00ddfba173a990d530d996f6eaba0e2568f592de6d5519e6076d
- MD5 beca71a9c889c143fafd2db8148e6001
- SHA1 812270cb43ad7a0dac64b9775f402171dd589a53
- SHA512 573a181a6087cf09f932e69d8e44066b97db4e0cda538dea7c3a85f5a0b291da78b014947db704083f1e4ee244abb44f8441bd4898957642bdd6568e1395867b
- TLSH
  T1240110B7A396318E9AF2E0E4D41854F1D522D255F304CB70CA1700C981470AB767F5A3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Sprocket_Data/StreamingAssets/Technology/CWEP_Cannon.json
- Size 260B
- SHA256 404c3d2eba2c6b5a7245f097811cd6808223ab27e29c1f8f6cdd87d4143ea516
- MD5 15c5cb95c739a2472712cf75eba7beb7
- SHA1 22c5028139299f4dec43e4520a6095d5937baf08
- SHA512 9d326872bb16dc5ab0231eb71f1c4cf77c6a11b2ed665c5d91af4e9277a798619d49950f2612ff90f50892f0d207dd466681fe84b3c832455260031cb7116ace
- TLSH
  T1AED05E17E908CC93B1F8626023300551F9117F0B8466CC9B73F6452EABFAE439186F9B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral10 behavioral9
- Target
  Sprocket_Data/StreamingAssets/Technology/CWEP_Engine.json
- Size 176B
- SHA256 ca5df98ee2e0fd046af5c441336f75d56c1843d6c41a070463a6a4e2ddcd1c2b
- MD5 eb2e211484635c8fbfbc3ceffbc31342
- SHA1 704557bf9a10d115666b768f5145ddb63e5e3e5e
- SHA512 ebc64e355faba64126dce718de40def15b1aa89f1aafd9d0204306e3163b8f01a74f2d89262e98f32274051af0f5034152529a66586bb1467d09b7dfe266fa9b
- TLSH
  T1ABC01222D4184D631BF217508A750711B8121F1B96308C0275B35229B9A6655018CF03
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

executionransomware

behavioral11

behavioral12

© 2018-2026

Terms | Privacy