4ffff566b33583c1fc8dd5f153e7f24d896384f1c3eaf4c50245495c6464538f | Triage™

Login
Reports

Overview

overview

3

Static

static

1

blockchain.py

windows10-2004-x64

3

blockchain.py

windows11-ltsc_2024-x64

3

build_exe.bat

windows10-2004-x64

3

build_exe.bat

windows11-ltsc_2024-x64

3

coin.py

windows10-2004-x64

3

coin.py

windows11-ltsc_2024-x64

3

nostrseed.py

windows10-2004-x64

3

nostrseed.py

windows11-ltsc_2024-x64

3

portmap.py

windows10-2004-x64

3

portmap.py

windows11-ltsc_2024-x64

3

seedphrase.py

windows10-2004-x64

3

seedphrase.py

windows11-ltsc_2024-x64

3

sosaiem_miner.py

windows10-2004-x64

3

sosaiem_miner.py

windows11-ltsc_2024-x64

3

sosaiem_node.py

windows10-2004-x64

3

sosaiem_node.py

windows11-ltsc_2024-x64

3

sosaiem_wallet.py

windows10-2004-x64

3

sosaiem_wallet.py

windows11-ltsc_2024-x64

3

start_miner.bat

windows10-2004-x64

3

start_miner.bat

windows11-ltsc_2024-x64

3

start_wallet.bat

windows10-2004-x64

3

start_wallet.bat

windows11-ltsc_2024-x64

3

wallet.py

windows10-2004-x64

3

wallet.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
sosaiem.zip
Size 70KB
Sample261017-awtk2stwex
SHA256 4ffff566b33583c1fc8dd5f153e7f24d896384f1c3eaf4c50245495c6464538f
MD5 d7d1e7a629f4192ff501cc1d68f0891c
SHA1 9d3f2566d148a033299bb6cf4b9729b11392c421
SHA512 d3177db0a306436dc8f6c8b20b016f5900f1c14d0e8a7c5c17ce609e7a8d0866061415835bda042a2afe51b5bbeb3dca7ff75f8e0af851aab7b84d24b6d04d50
SSDEEP 1536:13pkxJedPSKplVeA9ziRwzgHloIzjqbNkbqdwndm7cgPAKGb31SvH4:13pkxJedPPpPxi6zgHloInbqUdaUb1SQ
TLSH
T1136302B92B324DA7D9DD47BE393A5BC0025247BE1871B83D8534CF460DDA3606E1AB85
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

blockchain.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

blockchain.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

build_exe.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

build_exe.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

coin.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

coin.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

nostrseed.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

nostrseed.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

portmap.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

portmap.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

seedphrase.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

seedphrase.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

sosaiem_miner.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

sosaiem_miner.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

sosaiem_node.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

sosaiem_node.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

sosaiem_wallet.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

sosaiem_wallet.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

start_miner.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

start_miner.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

start_wallet.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

start_wallet.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

wallet.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

wallet.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  blockchain.py
- Size 10KB
- SHA256 c242c7882ad228524f65b72c3ddc0d722270ca08994afb5ae0a291c62af70c15
- MD5 9c99a731ed2bede70b40285bbad72aa9
- SHA1 8960e5c652cf54009c4070472046062dafdf2d4a
- SHA512 34b6a4dbe9faee396c3fb6a503f070248594888b4781da8e54aa1d3797eb118b5749fedda673f39b8e9509d3192da85d3bb01393d59be5d0a9499299059fbd5b
- SSDEEP 192:kw7O9DpHNpA6UrL8pNkvHmEBRNRyRQFBNDTef0uFMt3h4Tg6hKCLv:ke6ptpQrLVPmEBV4QFBF20ueph4T9/Lv
- TLSH
  T13E226452AD3016F05243C52CAD577192E32F84239F682164FAFDD1451F1E06992BEDFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  build_exe.bat
- Size 1KB
- SHA256 91e6d810ff1a9e4e905183c3d690b7f09cdb4de562d5c59cb34e55f25bd70bc1
- MD5 eb5c6dbc97d990289b91792d92665f10
- SHA1 e6ecdc8399f37e5af6f08ada17576c229cf0af54
- SHA512 b3cbe323254f72838232ebc59c5a2754498c5b1c62332fad097db3c944106dfe780305c5f84a8c8145487d86cbdc8f3862bea1b7086ef0546bf3a9dcd9dc5f1d
- TLSH
  T17531E05FB7E8C27060E413ACBF7921B0B401A0AB05A33FC47547057097447D0FEA8687
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  coin.py
- Size 8KB
- SHA256 05191fb1f1c202e5b0e3529b3968927ee0eb57b893378e92ed72f37a94872822
- MD5 a0a6304b4788bbd1b6102d06cd7a0a4b
- SHA1 49eb0dba6f1c48b5bcfc315fd8720b0bc3745e86
- SHA512 3c0b9b77dfd5f0b6372d08bb03806e83532989130a7fce63265a7bf38da92a802a2a45eda23cebd9edbb4aeedfad294fda3555e763612b8b99b2b2028bc5298b
- SSDEEP 192:WyUsdDfVTkMsM9jpNnzUli+7yYBtSrEP3BbdFaF+63liWnOGcj1o2JB0m:TUsVfVIMsMpBuyYYqPAsWJcjW2Am
- TLSH
  T122029769AD2A2461831794BC4C8A8013671EAF13C594311CB9ECC26D7FAD87EC1F0E9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  nostrseed.py
- Size 13KB
- SHA256 9ba8273f40b20c2df7ce75666ac7770972bee284d2793a54a3c8ac5b7a1260e4
- MD5 414eab5c406921a0ae184bf5e227885c
- SHA1 ce49543004bb21c4d266eb6c973d785e2ba3d751
- SHA512 a76b4ade5efc4842041b9e4266d5d9fc709790ec056fcaae91bd6623010c1e69e99e4aad7a7e067c9b41c6c6960fcfec2c266903ecc797682d35743611f565bd
- SSDEEP 192:1Rvb2mKR2Naid2YcDyNRd5MPlpQtU/0pUjrd56VvVTjwnPaJZ9fYCfIosr:1Rvb2m0yTdu9ytU/0Ojr6fCQZ9fT+
- TLSH
  T1E452A502ED2165F6D3A3C4588961F042F3347A237AD4147578BE5698AFA0C3982FCEED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  portmap.py
- Size 7KB
- SHA256 b8855f0a81b51549bcb495f6d19ccb605508bb99362c520b55c99f9e4fd56238
- MD5 c4664f0f86618ca37bd33af2721ded09
- SHA1 139575050ef9ac845ec8991410930f929130e69d
- SHA512 155b60e49eee601235d8f2a3e755f63fab6d759f100097ab6973bc9a5ce8ab37111bf04e76a2eae0f3fd03d5bc3dc60635e799fbfee364b384a3e083018caf5e
- SSDEEP 192:lGf0pDuaUvR29pbU2ZlPEZ9w5ZC3YoPrIqT94zfQ:i0p9UvR2/n/EInE8tQ
- TLSH
  T116E18553E8A21E7692D3462D5D07E0407329AC57A10568B97EECE7983FD683DD2730CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  seedphrase.py
- Size 9KB
- SHA256 871db2d7dbaf192c0aa0eb03e0b66dc97743c8ccb12ce3daf8fbbd7ccee234d6
- MD5 fda2914c8f48608eaf3740f4599875e5
- SHA1 fcb93ede64d0175d67294c11ee5e5d7c73f3065d
- SHA512 a351c3d7d9f34fcc3e273ee5455e5f8ad0025b0d12a1cf0af4882a7abd6518fb2a18054fed3733bf971cc3b671e67f6db02f66fd5664f91e9bd5737beef65c48
- SSDEEP 192:HZVomf4raxyy4agQOfJnBLhwZIl1yUkkKfJtk7DONFQhWRX62:Hvomoax0fQ8hwZkQkKMLEBp
- TLSH
  T1D5120947EDC4DA6756C3821FB901A927BB25D87B424452317CECC3983FD6428857B8E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  sosaiem_miner.py
- Size 7KB
- SHA256 2bc3985d4d796d5ef7dabf121c4c35083df2337ab0293430a9d62e8e11ec4343
- MD5 71aaef22600824164b3a3cbeef3f2ea0
- SHA1 0e882834c377a6116b2e1f99806708fd3dd797f7
- SHA512 7c74518ffd834447dbbdefba6b67a8ae7162b67a8ab2020dbcaf23d3d3bff2fe571f4ae1b5407f98f212400ead07a96fcb498c5935c91151c6d8780398432da0
- SSDEEP 192:QQJIVW3fpWNLT6QgtDQM9ZtsEtevcDhJlhL8AMi:QwGP7gqsZCXvcDLlJJN
- TLSH
  T157E1C40BD53C2B028B23ED9AF8BB3642579F2943800E552C787C52D50FAC53782B9F99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  sosaiem_node.py
- Size 139KB
- SHA256 39da74927a2d5b1fd1598171ccb9b55a5e68e8e4e36ef0d3eedc25eca7952349
- MD5 552c0a404e86ed692478049f0b1918d1
- SHA1 dc0817bcdafe90a7a3a7591f00684eb59a40001c
- SHA512 0534dd71b52da31e785287293837f9460b0a034ffc72540a1193f7d9a605ef0a745fd590f87bff0940ee593b6e1efa6627529b6529e2931a0492f4b6f2808b17
- SSDEEP 1536:tuJXA3xWwlNEFw9t2dUIRM+07Al3E3C2oQjD9v2XZrwm1TcfzdcdZdCU:tu1wI4zK07Al3E3C2oUD4ZrwmJc65
- TLSH
  T115D3E866ED24167AC35384386D97E102772ABC138508107CFDECC3997F8947AC2B5EEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  sosaiem_wallet.py
- Size 16KB
- SHA256 d6726b2f356bd2087c63f02a49c60f2328fb32f14d00e68817d18beeb1c072bd
- MD5 273e55cb5bde2925da25118ee78b4cf7
- SHA1 20e7c6612e8152eb96c63228281f77b6451010ae
- SHA512 0ea860ead52127d7efea3780d99dedf11717607c1fa45cfd1498b8cdad4a9b18c9032a6dc129fdff81bc6c10189e99b3d8b18cf93fb35196a1697a323abaa0a5
- SSDEEP 192:+EXG1ekRVW3fjnOyZdxIiZ0N4oe+z0Vg602wOZI1Yhrbpn5yPEkJC45wMi:+EXcQxIiZlotcHZhf15yPELbN
- TLSH
  T13C72E94BDB580A64E383DAACB57326A2A70E4A278509122DBCFD13D81F6D53380F5FD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  start_miner.bat
- Size 665B
- SHA256 32df4088a5ef9381c7896c3c9a4d49c93bd92160c874a4d48d18e1e129d13e5e
- MD5 d2f1e9bc7e77300f4aa60087116a9224
- SHA1 b9d91235b3b5d9aa1083029c5d9c44b781816c73
- SHA512 c1ac8cf51f1fdc2b8be2d790d876528a4eb341c3a35d34c0f0b05d7063d03ca9fab2271152f9d4a8c752ef2d3eead5828334df398771174b3c7d2d4e3d089705
- TLSH
  T18D01994B78A0C27162F88BA826BA601AF35680FB48917FCD7167E1292FA90C04BD6113
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  start_wallet.bat
- Size 668B
- SHA256 8da4725852d09c702bd9c2753dabcf6f30e7574f724a0582b8ad3a69cd645f35
- MD5 97ccafb48c6cb0c4e5622055cfb0dc69
- SHA1 a5e75d32d9e16cd23282d7fcafa3e554b6989754
- SHA512 7e275a21f77fe492294e4a333a8186fde0e8cc4f898495da4a9607a71f8e630c0322f04a9fbe8827bd5d7bf0ff42d06133f7341cff23d84d15eea4e639d33890
- TLSH
  T1AC019E5B7D64C37423F887A825BA507DF35280EB08917FDD715791262F990804BD6113
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  wallet.py
- Size 6KB
- SHA256 e70b42405e9891f048dd889261b7b7a6558e56b959cc2c9e56339fff89fa5b02
- MD5 4a9688064913794230ba849ff2faa6a5
- SHA1 de831ce4d8194544c38936c3c43a1af24de33dab
- SHA512 bb61a1eaa3ef7a07eefaa55e7e54c6aa35ca7d62c347c958f5485997e8b332784f0cddcf2bbc82e4fe087a6fec5c2c3739293f62cf6594aa274ac29a90fd3da4
- SSDEEP 96:orzgZVlKk7DqFnF2va+za5lQVrRhYvWOucl2CqJOgsWjnAaTo6eBF/e9d2clC13w:Oz4DKkfqtsxuwVrRhYvtLlOL7w/x1A
- TLSH
  T122E174ABDE65AD52538BC5B6440AE077BB29AC13040921757E9C430C3F27935C6B2DF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy