1829ce31eebc4421abe5a74f8b37155b945b2c7f0c33690303a83c04442e02ec | Triage™

Login
Reports

Overview

overview

5

Static

static

1

__init__.py

windows10-2004-x64

3

__init__.py

windows11-ltsc_2024-x64

3

command.py

windows10-2004-x64

3

command.py

windows11-ltsc_2024-x64

3

config.py

windows10-2004-x64

3

config.py

windows11-ltsc_2024-x64

3

connection.py

windows10-2004-x64

3

connection.py

windows11-ltsc_2024-x64

3

constants.py

windows10-2004-x64

3

constants.py

windows11-ltsc_2024-x64

3

extproc.py

windows10-2004-x64

3

extproc.py

windows11-ltsc_2024-x64

3

fileops.py

windows10-2004-x64

3

fileops.py

windows11-ltsc_2024-x64

3

grabber_user.py

windows10-2004-x64

3

grabber_user.py

windows11-ltsc_2024-x64

3

handler.py

windows10-2004-x64

3

handler.py

windows11-ltsc_2024-x64

3

hardware.py

windows10-2004-x64

3

hardware.py

windows11-ltsc_2024-x64

3

helper.py

windows10-2004-x64

3

helper.py

windows11-ltsc_2024-x64

3

idle.py

windows10-2004-x64

3

idle.py

windows11-ltsc_2024-x64

3

idle_report.py

windows10-2004-x64

3

idle_report.py

windows11-ltsc_2024-x64

3

launcher.py

windows10-2004-x64

3

launcher.py

windows11-ltsc_2024-x64

3

launcher.vbs

windows10-2004-x64

5

launcher.vbs

windows11-ltsc_2024-x64

5

main.py

windows10-2004-x64

3

main.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
usbvideo.zip
Size 49KB
Sample261013-w4hz6sys2p
SHA256 1829ce31eebc4421abe5a74f8b37155b945b2c7f0c33690303a83c04442e02ec
MD5 c1be24b535dd0c654f7c345705586025
SHA1 580a94bd6bbe792e5054b932db91410ee7b586ac
SHA512 29c0903d4d6491d540fe3660a1a1027be3e839565deb2ce1a502bb4b9ed38fff53712fb121476b98b88ae1b3e7dd375e28a2511712e05812efc4d63eb82b1530
SSDEEP 768:kJ2JxbfLzImxcx1kN/nVfvXB8iPbGhdLF97g4vJ4JazIb0PCyyQWcX3t2kaYWfu9:k8JRImxIkN/nJvtSPRVvp0zw3tcQ
TLSH
T18E33F1D4D51E2A06F9A7EFF82587643BB372252C6370D22F29AC50171E079EC2F1309A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

__init__.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

__init__.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

command.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

command.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

config.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

config.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

connection.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

connection.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

constants.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

constants.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

extproc.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

extproc.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

fileops.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

fileops.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

grabber_user.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

grabber_user.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

handler.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

handler.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

hardware.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

hardware.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

helper.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

helper.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

idle.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

idle.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

idle_report.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

idle_report.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

launcher.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

launcher.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

launcher.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

launcher.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

main.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

main.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  __init__.py
- Size 25B
- SHA256 9ca4b5149f3ae4d6e0e25a26b608bd7ac8e55fc37bf3dcd30af4e24ca6411d48
- MD5 0636458394b00074ca8f2fa2b39d595a
- SHA1 3ac051844e39bcc39b176c7712146baa4da86ce0
- SHA512 e9c38af7bcc777701934d0cb0fb93c16ce787cfe61d8bebbedb0c01ff3ebc839b55935f5b8739442a8e47ba4f98d3c2bab1cec90b8b8d2a4b5923c32e7a3caf3
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral1 behavioral2
- Target
  command.py
- Size 1KB
- SHA256 bad1ef73cadf67860a13c1d8b7ed06ff874d2e85363441c4d20f5b0dfb895bb3
- MD5 18f44e2869774491354e8247adc93e77
- SHA1 9c15d9daeed9dd9eb0996fa9b34772bb0d8f6029
- SHA512 4423a44c1a79d400df13014d8fb111b7ec889becdcb90f79fd981202b184038542fbbaa72e1ed1df00851ccf802be7ef21e7136d1e2939a6ed93a1a5b44022a7
- TLSH
  T16631DF1A8EFD7515037B823E15666080CBC213230710453BBAFCDE501F38051E2B46BD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  config.py
- Size 1KB
- SHA256 40a7d29c690f45c51548817fd1db91904dcc538cd6ebe6c881493583e089a325
- MD5 c2121a31ed276bff618fe1c967bb5827
- SHA1 4cf1bfbeff23ff767857da2ef73d2898014f992e
- SHA512 96088df911fe71e71219faa086f105c4090df76d405b9abe750e3d70913cbcd2c1241b78a28830e50a9a8de9ac5591a1cb4b759d853cc0279d323510e0f8a870
- TLSH
  T1F111F0813CE1E0B58D1694E8B6A43053233E74830F481554B99C0FC83F2C6AB6FE128A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  connection.py
- Size 5KB
- SHA256 081652a4e08df102feefca60d30eaaf39c8053626aaddd3fda25e5c9f36f7a35
- MD5 002a203b53372277dca704dca16df6e8
- SHA1 9a13a5989b2410f157f67864e1df899695a07001
- SHA512 450055f9d755876e9bbda2ba61a7c7225693c4a03d02af919654b7922db1c1c007a551af2a909d52c5ada904d025c6381e99b5d028a8e7836d86deb2fc95e0ad
- SSDEEP 96:9ODXoEKNgnH0nj6nh49R7AbPYtFQUCMdPVp+ZPiWrVRVbRdh:9hEKqnH0nj6nh49RYipCMnpeaWB79dh
- TLSH
  T18FC13548AA795427C323CACD9D23D010A71A748B1B08687DFE4CC7749F2CA61A2F57CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  constants.py
- Size 8KB
- SHA256 3660377c0ef66303321f97e8721325186f6ba98e67c671e4dd8864b092d3e349
- MD5 cbd89df06b4ea05c585dfdd89b39fcd8
- SHA1 7cf889b2ac4b664afc87e90afa8091d71c995bfc
- SHA512 0a432025486312c6d1c4b8abcf580fd97b91d85d89c7d32bdbee5f175572b0bba3b32a18c1c906d9e4ffadc39326cb2c5a79b7329e5dc2777eecb812a2ed320b
- SSDEEP 192:lhASlaEBSJUzbUWbQJD6WgTWIpdr2IMpGfp:lLbBM4IWO69TpbM8R
- TLSH
  T12E028037DE5A0D4B0674A682D89A05C0FA08D7FF077A1C17393A492C5F3EA3612E29B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  extproc.py
- Size 14KB
- SHA256 15b66ef677b6dadb4bee16c6ce5f393cf5de8139a58db5ef371dee7bb1c19e67
- MD5 45e6a0f2cf2dd1b8f7a98bc6ebf93c09
- SHA1 8409b6ce2082f78f0629b74bf7be6b2035550c40
- SHA512 c4f3aa8ba2b2c910890739ef1cdcf5b04ba14c209aede57eafb785144b028d33f525f6798d39cc919dd94fb0291ade71b6031cbd5d78680e32916dd2750963e3
- SSDEEP 192:kQDBGyiXIH14g+5KQOihzb4afdmYsaJbVFJQ+oEfKbTLvjdSV1M/xKnAI:kQVO/5QXSmEiHHdSV1cxKnAI
- TLSH
  T14562A74A9D0C2625E2D3DBD9DD429485B239F9AB76003834B6EC47445F80178D1FABFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  fileops.py
- Size 4KB
- SHA256 1f6a71e1fe7a4b2c883e567dc32defbfc577230b7a3af8f9cf6849916bbbbee0
- MD5 f5d1a85dd5a9e333bd7f9fae11204ade
- SHA1 c4b3c80e630efce587bd10d6024c5b64c5c80f22
- SHA512 58bf6491c98ac1ac93ef7134b0f114f151555998ef1da444e902384666cb39adf407ab0465a073da2ceecc8a02f6a583c07a1415924ada59ae2b4adf8b43a123
- SSDEEP 96:Z3S9sJqX6EcBREmaO7E0q6YU9JN7Ek6YUM:Z0fGRE+7YAD7TD
- TLSH
  T15EA1E5298C406401C7B3F2EC897189562572ACBB5A056D23BE9C4AAC7F84631F5E73DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  grabber_user.py
- Size 9KB
- SHA256 15ea9f3dd4aa76ef274be05b0290c8c0efb96883c31804fb04b030643c6963db
- MD5 d81e17db226c7d362aa041ce6ae488e3
- SHA1 412ec297c0e8bb665877d0c932f017136d18934c
- SHA512 2f8b49e89ad1247ed3bc4353922f4b5c67454e457a55abdb3dfde24cddbd9f66c2634f070db37cd3724267b6e35c1ec0b9965bf1f95b8368cb741342c12ab4dc
- SSDEEP 96:AhuVBqHDWJv/WGel4RukdD07Zyj4B1cQEc5UJnpW5vJZm+JDNZznoIsN:AQtKmzhyZycB1LEdpknGIC
- TLSH
  T1C122BDA2AC1D842240B2FB9C7DA2D8D0D11953E32B22152376FD4B859FB46B0C2B55BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  handler.py
- Size 7KB
- SHA256 4ee74f4699976b35ed1431859d9ac99a5c6ce76e9f0118470faea95dcb2f22f8
- MD5 09241bb6289508a7813a23730ac12a6b
- SHA1 7d1c7df897ac5c1c375c039a307e9835d8db7e86
- SHA512 3d374fe2b8a701965d1d4e93d4b31e785c760868a4c2619137deaaa28ed75b0158f4d43445781bba4e400b065104013f16cdbb8fed920342b3ee48eb78664f6c
- SSDEEP 96:Zx3PrcnsI8Pdfn5i0aZ4dA7kVXZS7D2tMJOYqNGxFU:ZxfIsIodBiFGdA7k7SdOGK
- TLSH
  T1E2F1FC11AC2C1C5BC293D19AB02670C19126A7974B043C37BBEC47785F9C8B6A2F739E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  hardware.py
- Size 2KB
- SHA256 b458578cf0b4fa63495288e79723b2ad394fd88b8be68cfe1e60ffaa3a56dd36
- MD5 d7e12008462e74f933117b90b67c2e0e
- SHA1 fdd35cd6e9232fcea7c5c861cd57e7e450cf546a
- SHA512 7befeb40c4e81cf4bbb5a213a57160506f9bae95c2a3f36acb87f8203e6ecb4d6169d72f553fbe5f345c0a0f6f9a0b2bda7f99e684aaf0de3f582e403f9cbb4a
- TLSH
  T17D512151DF2A990543B1C19D94A2C226EB4847035E1B897FB9FCC3692F7C0229274BFE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  helper.py
- Size 20KB
- SHA256 0034ebae5801aebd30b9b8a650efb970ff4a55b27601e66488b48002f4b2b666
- MD5 8a12bfbc8af06f7dd3ae27fa88f924a2
- SHA1 452eb8623676523d566f10c50bfb4554119a6a46
- SHA512 9494df8a3b202be204ee2578fe68fb2dc5f869c9fa26dc41e9af7319531aa676fe32d0aa1ac810dc3406f6fbd1d5b78ca047b22b1f15be483018aa0ce2c78557
- SSDEEP 192:/T1Z/5CiDVLyg7k/usNJz7+bwXj/1oa+z/7oLEXgMKZxH1Ti3Xk0LVdZ8La1Xa9P:/jdZsNJzSoEwxVi3pXt4
- TLSH
  T1349264A15D1EA801C073DE1D5882E197F717274BAA1E4D03BFBC8A885F75121C6F4EBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  idle.py
- Size 538B
- SHA256 fbcd2de2b160a4eea64681f30798a182edf657244e479622eef0f0effe49852e
- MD5 f50b91a99dffcd27c944b2da947eb9aa
- SHA1 b45a8cf0b86fb2173233e23cb15a9c4d9fd2793a
- SHA512 52a6995cb83feb4d2c8fb4f39a35b08b088ff732e39b597779398f62c8e1f725bb4932c0a374293924f6e2f8331b5dd4b73f1e967e872d9504d0220a2330204a
- TLSH
  T16FF024655C2ED00403B1420DAA8AD989FA407713BD381E0EBFBD42F62F7667C836C711
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  idle_report.py
- Size 1KB
- SHA256 21ffd6055e27ac5f5829a8afc5999517f9f6e9797cc6cc6e6bbfc7a54656fd8f
- MD5 72e5d8822c7e1da447975a722d9cf8f1
- SHA1 8be937ad1a7c2d8af5b922effaf0d0446400b762
- SHA512 5f127e7d70a196a3e55367ab0324ccc0341d5c0c61c51f07be7dc8e5f02ff653c5b1b264410df5ff5278b39ac23d89e5b76ad1f1b3851208720d6ed922064c2a
- TLSH
  T1633127210D2DAC415DB24C9DA46F6AD8F363434B2B181E13FCBE87944F7A9D09699129
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  launcher.py
- Size 740B
- SHA256 08dde1364e711f6febfec22620605824607a2d9bc03beac9e1bb326b520b64c2
- MD5 95dd9c3fd139fe9c8dd440bf5990b49c
- SHA1 201646ed344784efecc433daee2b6640ffd91b3b
- SHA512 fb2c77472dbe48e9c268bd8297667c8776e40b167f80d4a7d4314bfb9949b6d0c5a13bf357678acba15f212b4847dc7e5c9468952be4b4e8090020dbbed1bb70
- TLSH
  T1D701D30294081DD08693C9951534E2F043731C8B1F49AD39B5ECC3171FC95358AFB8F5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  launcher.vbs
- Size 477B
- SHA256 c5f774c9c447909cac48abc29aed0bbccbcc9caa5b4986a6d8b1a4872f3f3a16
- MD5 8a16bd46c514e6946fe4000bf2a6dbb6
- SHA1 4c87cda9bd0c8854257550404189db7d4d2cdc89
- SHA512 c913364da408b2752a54b99f7793ea83ca23f13ee36be4922649d809235a8684b40b5de02bed94b29fe2a794fe6621709c15b6b05a18434918b6e20686522734
- TLSH
  T1C1F0DC48EC38C5384807675A00FECC4FC7290459066084F959BCC4A8C31C36C7DAB2C9
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral29 behavioral30
- Target
  main.py
- Size 3KB
- SHA256 abc5506e628c3bee834fa18784c3f5dc5217aa65f369c0b78e7e3ff6a5da1bc9
- MD5 3054903556a568fa93e4a70d426ae8dd
- SHA1 1fea33734a7d86b92bfeef90adc123e9704b4654
- SHA512 b67bf0f628adcb97d5cddc8a77d478a3ae792897a2825eb53a263bd160e85ae4972d0ef8064d3e4e8b442e2b9444a11f5c9c184bd0916aaf1d1e036b8a250281
- TLSH
  T1F971EE128D2BD00A8C70F7DE18BBE369E31AC1775E090E07F9ACCB295F79064476855E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy