218db553b815f11b51e06bf97df3fa5ce00629aba11f71611d03c6e2d316d049 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

Notepad2-m...��.bat

windows10-2004-x64

3

Notepad2-m...��.bat

windows11-ltsc_2024-x64

3

Notepad2-m...��.bat

windows10-2004-x64

3

Notepad2-m...��.bat

windows11-ltsc_2024-x64

3

Notepad2-m...d2.exe

windows10-2004-x64

3

Notepad2-m...d2.exe

windows11-ltsc_2024-x64

3

Notepad2-m...EN.exe

windows10-2004-x64

3

Notepad2-m...EN.exe

windows11-ltsc_2024-x64

3

Notepad2-m...��.bat

windows10-2004-x64

3

Notepad2-m...��.bat

windows11-ltsc_2024-x64

3

Notepad2-m...��.bat

windows10-2004-x64

3

Notepad2-m...��.bat

windows11-ltsc_2024-x64

3

Notepad2-m...d2.exe

windows10-2004-x64

1

Notepad2-m...d2.exe

windows11-ltsc_2024-x64

1

Notepad2-m...EN.exe

windows10-2004-x64

1

Notepad2-m...EN.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
218db553b815f11b51e06bf97df3fa5ce00629aba11f71611d03c6e2d316d049
Size 3.0MB
Sample261012-1eswasfv81
SHA256 218db553b815f11b51e06bf97df3fa5ce00629aba11f71611d03c6e2d316d049
MD5 9f430ea07f9a4eb3fb2be320d4321e34
SHA1 d36856bd0c165a1bd3bc42d0a3b1788694273ae4
SHA512 4b3c28529c9392e18e4241344e4baeddf51c31a8055d8367590c1e4add1b92030d3a10e660084139b2fb786bd9393d852c83b3edfeb60604d5e6cfffc9efe2d2
SSDEEP 49152:sZJudiOKEH7BbJXU9+SueOVOap1ePZO/F2tFtSNXqmIL31JWbnfhROPr181gPkcb:sZlfA1bJkOBOa+PI/EtyRgL31J0X+Ogx
TLSH
T1D0E533F834A54E4FDEA18EBEA205A050B151A1DF166F9F95D78E48F1BCE1213F385A30
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Notepad2-mod/32-bit/!)替换记事本.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

Notepad2-mod/32-bit/!)替换记事本.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Notepad2-mod/32-bit/!)还原记事本.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Notepad2-mod/32-bit/!)还原记事本.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Notepad2-mod/32-bit/Notepad2.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Notepad2-mod/32-bit/Notepad2.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

Notepad2-mod/32-bit/Notepad2_EN.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

Notepad2-mod/32-bit/Notepad2_EN.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

Notepad2-mod/64-bit/!)替换记事本.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Notepad2-mod/64-bit/!)替换记事本.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Notepad2-mod/64-bit/!)还原记事本.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

Notepad2-mod/64-bit/!)还原记事本.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

Notepad2-mod/64-bit/Notepad2.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Notepad2-mod/64-bit/Notepad2.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Notepad2-mod/64-bit/Notepad2_EN.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Notepad2-mod/64-bit/Notepad2_EN.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  Notepad2-mod/32-bit/!)替换记事本.bat
- Size 345B
- SHA256 8d72963998e3dbd0bdd2964d69e1369bc0dbadffdc4f413bc660504b22821bd6
- MD5 eac1036b0c0d891eec82d8fcedf7d1c0
- SHA1 320280f8cfca18d66602c1a69c6fbb887b6946d7
- SHA512 69a58caefd53295bce4764ffacc9e42ceef8cc427498a4d19900294151a842616759bfdf0f0b3b9d2fda17e8186ac4e6185d9ed61db09f2d514d2dbaa0b20111
- TLSH
  T1CDE026843A314102D2F54C80897B541DBE37E0E7A2121F557492E8B8692FBE1B33E6EA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Notepad2-mod/32-bit/!)还原记事本.bat
- Size 289B
- SHA256 d829599c2d3f3ead2b1f90ed3c9aef2676261443b4e0be7309da31762c42dad8
- MD5 4759c7c7f84300b3e94fdba672528b02
- SHA1 d0c6f850b049cd4ac0b98266d7f6fc52d0adb09d
- SHA512 45320d4dd96abc6164c3c8f9cd17fe6621584b64f8ca766ebe687448618e22435ad830984b36f8b4cfc2115c7b3795c8b3cf4727546498d2d8fc871e78e17a1c
- TLSH
  T1D5D0C2893B22010192F188419976841DBE3651E762135F01B0A7D8B4AD26BE5B36E5AB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Notepad2-mod/32-bit/Notepad2.exe
- Size 1.6MB
- SHA256 f3498d18d49306230f5510e94fd44416244089319c1f8c872aaf3f7c4d8e67f0
- MD5 904f52f6267dd14b8c23e09000d10c93
- SHA1 2ef436c89c6aa7a0a1ef445fcd95a7d13aba2b7d
- SHA512 1af62f56cccde638c7460c6ff796055043d947aac92de7e66a1c7dabc52b266fbc55ce1b5415002fd0e4a95e69724df7485f8e76b110170089a071177d13745a
- SSDEEP 24576:rIntnK8+xBuKhpSK438pckG0WY9gxdvAp2ei9tige/5ZZ0RQn/+chX/g/ER26yvi:rInt6Z0yn+2VbKjFaUl3QP
- TLSH
  T15E75AD11BA82D033E4D20471AABDAB5B862CBD350B2654CBF7C06B7D59345D22B36F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Notepad2-mod/32-bit/Notepad2_EN.exe
- Size 1.6MB
- SHA256 7f083b3ec1c8534f7f9339aaa7f9cc8a4f2b9000f33e4f59b6099734fea629a7
- MD5 df0085f7decd734f802edbbb5183ab3a
- SHA1 23db5e9f80a6b62c0a06e3188a69d41c24a41249
- SHA512 69aa70e63172cbb4b2abe0e3d9f902215f5e08383c80f4ecc009a0157c3d43270e3f326e111197308f98c196f1643e9a0ff7dd94787b79f92e25bb3cdd40b3fd
- SSDEEP 24576:NIntnK8+xBuKhpSK438pckG0WY9gxdvAp2ei9tige/5ZZ0RQn/+chX/g/ER26yv:NInt6Z0yn+2VbKjFaUl3Qki
- TLSH
  T1F0759D11BA82D033E4E20571AABDAB5B852CBD311B2594CBF7C06B7D59306D22E35F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Notepad2-mod/64-bit/!)替换记事本.bat
- Size 345B
- SHA256 8d72963998e3dbd0bdd2964d69e1369bc0dbadffdc4f413bc660504b22821bd6
- MD5 eac1036b0c0d891eec82d8fcedf7d1c0
- SHA1 320280f8cfca18d66602c1a69c6fbb887b6946d7
- SHA512 69a58caefd53295bce4764ffacc9e42ceef8cc427498a4d19900294151a842616759bfdf0f0b3b9d2fda17e8186ac4e6185d9ed61db09f2d514d2dbaa0b20111
- TLSH
  T1CDE026843A314102D2F54C80897B541DBE37E0E7A2121F557492E8B8692FBE1B33E6EA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Notepad2-mod/64-bit/!)还原记事本.bat
- Size 282B
- SHA256 237a91f5aea075311fec67ba50da15dd23df8e34b13ee9cacd161195c8a38da8
- MD5 fd4c7d0f3132c018d16c6117bc834740
- SHA1 3aeb7c49521ddb2119e67c72fa270f889494ddba
- SHA512 3d5a2f46bd75691a54c6aaa02bc4f9563f4b878692442b84cfab3f2ecff9e4f9f0389d1eab874f9d4e14a612475699e0a095f4b3df86e5bf239c206c416b2778
- TLSH
  T102D0C2883B22010192F1884099764418BE3651E762125E01B097D8A4A926BE5B27E5AB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Notepad2-mod/64-bit/Notepad2.exe
- Size 1.9MB
- SHA256 d01dff781efd3c54d38f8c7c590f268088774b973811e2fa6dae81cbe3cc505b
- MD5 26f9b726222405aed58019a3770347b4
- SHA1 2e780d0c39fe4b297e1c9076991c03b79c9f980a
- SHA512 5c6b5b14556e01cc7c4374c33eacb75b7b27cb330049099c7adf8f2a9e42dbf11f9ff1bbbf86e5ea1243b74ae012a1a10a272f79eea7ef816cd636ff6690ca4f
- SSDEEP 24576:3W3tHK8+xBuKhpSK438pckG0WY9gxdvAp2ei9tige/5J5KdbMBiF0RYfjwmKCc4k:G3tK5KGuGYfjDuScm/PCZqZR/6AMOn
- TLSH
  T11E959E46B7A410E9D0A7C178CAA79643E7717C140B618FEF5694839E6F33AE14F3A312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Notepad2-mod/64-bit/Notepad2_EN.exe
- Size 1.9MB
- SHA256 52d427d24308e95cd20e23c8b980a3f874f74d6ab0ef31627e482b1011d55163
- MD5 cd273ef20ca42c731d641899aed74240
- SHA1 2aa578c73c18a753b2dd732998b3b9f249cf01e7
- SHA512 97e2d2c8d4d611bcd5fc9887c065af7a589ced401f78ce2f04f785a2277c0b5874f461a02fd5c1dbdba38196a9f040d10f015f02d5474b85c0ad4e2ecd281033
- SSDEEP 24576:IW3tHK8+xBuKhpSK438pckG0WY9gxdvAp2ei9tige/5J5KdbMBiF0RYfjwmKCc4m:X3tK5KGuGYfjDuScm/PCZqZR/6AMOn0
- TLSH
  T14D957D46B7E410E9E0A7C1788AB69643D7717C541B318EDF4694839E6F33AE14F3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy