dd40bf5460b2c1dd742d22700241da3ccb390e0a76f683b7f53dc630a46f62d4 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

Minecr7aft...1).rar

windows10-2004-x64

7

Minecr7aft...1).rar

windows11-ltsc_2024-x64

1

Minecraft ...on.iso

windows10-2004-x64

3

Minecraft ...on.iso

windows11-ltsc_2024-x64

3

MinecraftB-2.ico

windows10-2004-x64

3

MinecraftB-2.ico

windows11-ltsc_2024-x64

3

autorun.inf

windows10-2004-x64

1

autorun.inf

windows11-ltsc_2024-x64

1

elamigos-1.bin

windows10-2004-x64

3

elamigos-1.bin

windows11-ltsc_2024-x64

3

setup-0.bin

windows10-2004-x64

3

setup-0.bin

windows11-ltsc_2024-x64

3

setup-1.bin

windows10-2004-x64

3

setup-1.bin

windows11-ltsc_2024-x64

3

setup.exe

windows10-2004-x64

9

setup.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
Minecr7aftBe0drockE-1.21.130-elamigos (1).rar
Size 719.8MB
Sample261017-ftvcfsxtew
SHA256 dd40bf5460b2c1dd742d22700241da3ccb390e0a76f683b7f53dc630a46f62d4
MD5 5b1686bfa42b7a5b346f4f055108d2b9
SHA1 78991002884a9348d41d3b9d6a4a3ea9187ef457
SHA512 ca0fa5d2784002b09b4d314175dc06bc0ab4510e9d7b1e7e3f1bd10ef4e3eab9baff7279bdde0d21552c0dbb2a50ef56caa9bd71ff34345702217e1bec84e850
SSDEEP 12582912:hAqNVFczuzyIGfpSzMFBzcx60/uqcGqBP49z9O5vym3+OQ8uvb:h4zuaflTcjvcGqcz05vMRvb
TLSH
T1C8793314AB4A1D33D2331FF8DAA1B1C83C79BC40AE62511BDAA59ADD0E755C8BD347C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Minecr7aftBe0drockE-1.21.130-elamigos (1).rar

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

Minecr7aftBe0drockE-1.21.130-elamigos (1).rar

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

Minecraft Bedrock Edition v1.21.130/Minecraft Bedrock Edition.iso

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

Minecraft Bedrock Edition v1.21.130/Minecraft Bedrock Edition.iso

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

MinecraftB-2.ico

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

MinecraftB-2.ico

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

autorun.inf

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

autorun.inf

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

elamigos-1.bin

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

elamigos-1.bin

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

setup-0.bin

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

setup-0.bin

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

setup-1.bin

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

setup-1.bin

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

setup.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

9 signatures

150 seconds

discovery ransomware

Behavioral task

behavioral16

Sample

setup.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  Minecr7aftBe0drockE-1.21.130-elamigos (1).rar
- Size 719.8MB
- SHA256 dd40bf5460b2c1dd742d22700241da3ccb390e0a76f683b7f53dc630a46f62d4
- MD5 5b1686bfa42b7a5b346f4f055108d2b9
- SHA1 78991002884a9348d41d3b9d6a4a3ea9187ef457
- SHA512 ca0fa5d2784002b09b4d314175dc06bc0ab4510e9d7b1e7e3f1bd10ef4e3eab9baff7279bdde0d21552c0dbb2a50ef56caa9bd71ff34345702217e1bec84e850
- SSDEEP 12582912:hAqNVFczuzyIGfpSzMFBzcx60/uqcGqBP49z9O5vym3+OQ8uvb:h4zuaflTcjvcGqcz05vMRvb
- TLSH
  T1C8793314AB4A1D33D2331FF8DAA1B1C83C79BC40AE62511BDAA59ADD0E755C8BD347C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral1 behavioral2
- Target
  Minecraft Bedrock Edition v1.21.130/Minecraft Bedrock Edition.iso
- Size 719.8MB
- SHA256 64dfc3d87c8bec6eeaa3c9ed3de23589137d128de8bee327959b306f0cfbedef
- MD5 f94249b1aae8ef0ed1d39019d2c00c72
- SHA1 4ffc202a6fd7a50fe9d68b7b15221beb783a2885
- SHA512 f9a991061b31684ffd7bb519bddaf2f56f52f4ca36949d3be16e273fe5a4bd6aae51b251c3ef33d5cc241c8f03a6471b27cf17bc4e72ade92bf0237fff18209d
- SSDEEP 12582912:5AqNVFczuzyIGfpSzMFBzcx60/uqcGqBP49z9O5vym3+OQ8uv:p4zuaflTcjvcGqcz05vMRv
- TLSH
  T112793314AB4A1D33D2331FF8DAA1B1C83C79BC40AE62511BDAA59ADD0E755C8BD347C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  MinecraftB-2.ico
- Size 167KB
- SHA256 f5c519b24fe74bf36f990a50f06b9f873e2c3645c09ad4200513543bbc1a71c2
- MD5 544ecc8ec0b51958a624bc7e1ab3384b
- SHA1 ce284467858085c74308e2bbeba247f0f1b80e5d
- SHA512 d09759186db7ac68204b4217125c8fa039efd115970e77d07a0f447e07c913b07750a5af67ac8e6b5cf079dffbee377db1c99a6c6bdaa1861398c73967fcb477
- SSDEEP 3072:yFntrLFvCxpg/97bTFJGpRSgKnzVOzzz2zef56ktZg2o:yFepaJbi7C2fRZc
- TLSH
  T1C0F3E5BBEF48CD09C6571EFDE8C1F38F96649C135D288D20AA70795DA1799BC5C0B822
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  autorun.inf
- Size 73B
- SHA256 c12c65de0672610bae63414117a15d50506d75b839e97364ebd090aa9af47aae
- MD5 482ef12985103ca5d9ee7afb94e5007e
- SHA1 bef13cfe028298cb84d5cc418a1013c9df96dd2a
- SHA512 459f0eb67de967c64197378a0ced2fe7cf55184cce948c2141f524c07f6bf6f1474bd45b2e132f717763383553e11e7acd7147b96d75a95d6311dd19f647d7f7
- TLSH
  T1ADA022A0C80B2C8B328FB8C2023B0030C2E3A033000802E8F2C020803BB80C80F03820
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8
- Target
  elamigos-1.bin
- Size 717.0MB
- SHA256 83cedff3a5b049cbc9f042747f2b2462c1171a0f3d48f4713fc6040f9a03ef89
- MD5 57d07e96cb6881b510cc07fadc2f2d72
- SHA1 23d88284ca38c4ff547ac1ee22946a673cacf13a
- SHA512 a605b9d271bdaaf30feec758bebe896cfeef084b0b2efa70911d245c30f48d2a3b99dddaaaf6c87b83dd984e6dc889c90457c8102b6d2c79c4003bc2f9cee595
- SSDEEP 12582912:7AqNVFczuzyIGfpSzMFBzcx60/uqcGqBP49z9O5vym3+OQ8u8:/4zuaflTcjvcGqcz05vMR8
- TLSH
  T11379334C590E2E62533B5FD9E76435C478F9B8C0EA571227C286E2F74DA60CCEA24AC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  setup-0.bin
- Size 222KB
- SHA256 d2bf84240ec30fb820da06f1a4ab4480cb9ea1485c6297bf348fc7ec756af8d4
- MD5 d83081362d65f4f1b316ead54609c958
- SHA1 259d53892e8997a56f6ea3ed5cff88b366776843
- SHA512 2ffc7dad945216b98ea4dab42d0ecddf7ba151ca684bc50ebfab7c7437951f24a532e7beb6351ea944a0b35fe4f5cc7a988c5c425173b175396ca81854993c7e
- SSDEEP 6144:qzT+yJiYACr3/H9XEuBrP+N8P0NCfM/y+j2xmM+GzGVNt9:kiYACzH90Y+Nu0MM/y+jTMpzGN9
- TLSH
  T1AE2423977C85E610EF772E6AB4414C440E48A1E3FC15680DABBDA5DCCD34F2896D83B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  setup-1.bin
- Size 1.1MB
- SHA256 37cc467cd7ed1b479b8e18faebe9d610ab69e2e6926ec7c60a706d1b7f2f736a
- MD5 c459f57d45723ae17f305680c7f85f75
- SHA1 6bf720982214654465def0d02423652bebbd43a0
- SHA512 aa51f72ac742a93f2ab850df8bc6635c498b0f545114f0977921f069789e87990e906fd7702094289ef7fdbabafe9823b55fd6c0e5da2c53f5e5f828144eb857
- SSDEEP 24576:aQZva2jPRvVoHLLrm+CQA6MaKNcG9RzfIwcrJUVFw8ScNJnF7:aQBN6HLLFCQKayDDAwcrJxcJF7
- TLSH
  T1B04533528A30B92E454ED49DF0F47469662E1430BA7E4F6F39134EFFC40E2A7A530AD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  setup.exe
- Size 1.3MB
- SHA256 787b2ca13f9ee9a5760038e2e882d257191d925f0f235fcdf50c420bf57f54a9
- MD5 93563be5a44ba6804a32944f9bb2ea69
- SHA1 ac35b9bd6ebda06288b6479f77c5f5d5c950e09a
- SHA512 592c74ff335da3d85c34ea2ea2bbc16dc7648474926f5b573baec13fe3dc9d08c6a3da64e4070db8f011056fa3df252dc4aac9ccce5e353c071522c3c30af099
- SSDEEP 24576:j1VqyG3T/+ofiDIZE2kChYYmpY9a2nWEdEC6GnJJ3G4Fvx96H:RQdhZgEN6GnJPE
- TLSH
  T1A5555B22A3918437D5732F799C6BD2986C35BE202E74D95A7EF89E0C0E78B407D35392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

discovery ransomware
- Renames multiple (179) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

discoveryransomware

behavioral16

© 2018-2026

Terms | Privacy