Overview
overview
3Static
static
3pageant.exe
windows10-2004-x64
1pageant.exe
windows11-ltsc_2024-x64
1plink.exe
windows10-2004-x64
1plink.exe
windows11-ltsc_2024-x64
1pscp.exe
windows10-2004-x64
1pscp.exe
windows11-ltsc_2024-x64
1psftp.exe
windows10-2004-x64
1psftp.exe
windows11-ltsc_2024-x64
1pterm.exe
windows10-2004-x64
1pterm.exe
windows11-ltsc_2024-x64
1putty.exe
windows10-2004-x64
1putty.exe
windows11-ltsc_2024-x64
1puttygen.exe
windows10-2004-x64
1puttygen.exe
windows11-ltsc_2024-x64
1puttytel.exe
windows10-2004-x64
1puttytel.exe
windows11-ltsc_2024-x64
1General
- Target e0089b66ab76a1e061255840eb25e497123d66361bd86c9a8f9d262292af3ecc
- Size 3.4MB
- Sample261027-e437nsbt9k
- SHA256 e0089b66ab76a1e061255840eb25e497123d66361bd86c9a8f9d262292af3ecc
- MD5 69dfbbd4d5d0eb78a817a4ad9a40faf9
- SHA1 202e0a53c81103f10c9fc2b7f51486b8fa1f120e
- SHA512 9b37720e08ee1fda736273185ee0aa9f1baa132b5c979e3c23d0c1eb8f0980c0fbc1bc2e4619731675955c6254ade91f891e83d522ba79a09b4cad8c9bd38cc0
- SSDEEP 98304:NPukCRdfuQegpu/BRtx7bZnkXk43JcukMbFLBwQ2:QkCRdf5Huj/7NRqkQAQ2
- TLSH T1E3F533EC4E0778BB82B610D1919DFF50FAD53947810690B6BB110F3FBAF46682894E4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
pageant.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
pageant.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
plink.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
plink.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
pscp.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
pscp.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
psftp.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
psftp.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
pterm.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
pterm.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
putty.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
putty.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
puttygen.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
puttygen.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
puttytel.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
puttytel.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target pageant.exe
- Size 557KB
- SHA256 b75225475bba9a31ebb6e9b6faa68e70a8d8060fe1c5959466622ac7eca500eb
- MD5 529ab877d1ba8d706ff20eccb6649188
- SHA1 2b57c823533ae2e2a4dc0f9fdc3fb5b7c0767bfe
- SHA512 67be9cb3391fb0013a95281714bf09a4e7e85ff9837b6599b528463cba855fef559c29e6862ce2dab6021c7b5530975383ec0a7727388e43bd5b619d43d88fcc
- SSDEEP 12288:2Db/ammwc2WMpaNn2tYNsXSQY8OkiKzKRMRXYGni:2Dbzc5WXtY2XS983iuKKni
- TLSH T172C47DA9E3A402F8E977813CC6529617F7B1F8654360ABDF07A081761F236E25E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target plink.exe
- Size 1005KB
- SHA256 b98c442bd43ba15620c85fbc3ea472e10fdc56bfd7b50b4ea967e204a10aa637
- MD5 92253af3fa0dd00694097f610886fe2d
- SHA1 16053098f582659a5b1a1d8e5a93c57bfc4e5b16
- SHA512 e43fcfd31dab868ffa9f30229146540837a2e60b26f34b1e11fac904ca95888a50bae78f4f0b4cd3b95035d209fae29fcf9cd13683d79a4382c50583464d7246
- SSDEEP 12288:LI7CfAdMvxORn5IQW+O2o0fYQs0W0LpsbpAg1X+1P4JIFWsHRlEojwU0W:LI7CfARJ5IQq0fY90W2sbpAgN+1PT70
- TLSH T1E2258D5DA3A400F8EA37D53CCA65C217E7B1B81617309ADF0BE186661F23AE15E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pscp.exe
- Size 1008KB
- SHA256 2faf6b42dc6db644639ee6accbf9022f9acc3d6f00ec0f943f04c3614493278b
- MD5 e410e916c31cd0989cd17ea1770be08c
- SHA1 347fb6ba8e6e17abfb448555334a2c950ff1eddf
- SHA512 25220d435f36b4e01bf3dea247ca69848b748ee2bb218a37c0d0c142390e73da2c88caff079ad346fc26409ef0b6284b8a1678935f53faf36bfdca61d9df787f
- SSDEEP 12288:I1CCJovAu2ck3DgvUaEIIcdeJtWtvYxs+yptRsR2gEHLIBQlHRtSjNkEk41:5iovAuWRIIcttvYi+MtRsR2VHLiyi
- TLSH T13C259D59A3E400F8EA37D17CCA62C513E7B1B8151B70AADF0BA187651F23AE15E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target psftp.exe
- Size 1024KB
- SHA256 8de0f7d1582533c6932a94a9b1d99a61cd4b362c917e20319bacd904020da668
- MD5 754880af73168505c3b07e56fa2ea3e5
- SHA1 e68fa6d6549c8d0f1fa69f5e1391bd5a9702e644
- SHA512 0bd3a47c0f0ac86d3d43a2836f3c43cd60e07369a8b7053f3e2537123589a18c00aec404a98e583e92f6444e420a7750dff8ad532a5828782c9ea724bad300e8
- SSDEEP 12288:Wgey1IEw/Z3XPJUe+rUKtD9jWL0JksYMsZGpBmi2Q0rT6E5lMLRNkmjeJD:/eoIEwBQr9tDtksYxZgIi2Q0f6MikJ
- TLSH T126259E59A3E400E8DA37D13CCA65C213E7B1F4151770AADF0BA197661F23AE25E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pterm.exe
- Size 636KB
- SHA256 67ef675d2dafa85f4d9ba5d573f1271eee63f45ab0298c865a440e5a30643574
- MD5 c5b29030e75fd2e8ab9ea8044f70b101
- SHA1 6ae1577f66059ba2b05e4c4ea9d2b08ebcfbef68
- SHA512 ac19204c8286376aaaa74377db5931d870f66c4d785c0d710b1b23b280df0cf739a918edbc946ee7850e5f1c4d60e8deaa7a52941403cc2f8abbef08cbe78a2b
- SSDEEP 12288:eLcXSR9+zTE/s6o7WWBnb7i90d2w9tXF1OdfNRR:eLcXSH1U6CWWBnb7wyPaj
- TLSH T1E9D4AE55B3E504FDE27B8139C9A28623FB7174161721ABDF07A086662F37AD41F3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target putty.exe
- Size 1.3MB
- SHA256 3ab9603e82c6f4c6e4a3091c4f1df2ebbeb88cf8c805a47bcd4c054807cc84c8
- MD5 728b764e9535764366c8ab7f0a7c8d3d
- SHA1 c9f160cd33088440b0e8b4f62df620cf5740fc0d
- SHA512 0912c369b6755b3961e63d91570f514b74fbe4baafe5e2ba0d229ec0de586e56f7ba089a891e7eed822fd5a52bbd8bd0eaf453a4fc24d3c54fececec3d5fe6b2
- SSDEEP 24576:8WKm+F60kepeBiJyRd3lZNBd08DDYWESSCF/kNlZTmVAbdQ8:8WKm+F60jpacyLlZh0itEKFczZCw
- TLSH T125559D59B3E400E8D66BD138C656860BEBB1B4151370ABEF0BAC86661F33BD15D3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target puttygen.exe
- Size 619KB
- SHA256 f5e0a0be0c248e9bd26bcf17fad27e57e9aec0d65cd8845978c68414ccb74651
- MD5 b154bc8185e33b0a5f74e3002df0e08d
- SHA1 115e6fccd72fbcc64492bf7eed504d583da4e7a1
- SHA512 39fda90724323651ee6cfb9efe0774894a4615aee918118ab2ffb1e3118d4e6dd2bbcc4f483f787822afc88819e12283d919871665a51c91ced5a89c831661e1
- SSDEEP 12288:2vVdYEQh/5qp4M7JY2sNIiN8kBpH8nrRpjh0zd:2vHYEQh/eDJY/NIiNHBC6
- TLSH T180D48D55E3A500ECE97BC538C6528627F7B2F81643A0ABDB03A081B62F176E54F3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target puttytel.exe
- Size 708KB
- SHA256 85ab62c39313553874484be6632a845e66d4489ec3cf9a0d9b8a749c7b1bc8ed
- MD5 eda65d760a0b6bf4cdd27894c62ca3b3
- SHA1 253e282516379dadbb96ea6319b48ed1bdc3369c
- SHA512 90b4d2b7e4d1e0723dcfc00589fe3add4c13d5466ef4b297e2e7e26e8e7a996d6fd6b59cb448731dbcca82c177bdda9d7992f6d246b3361725ed4c9bdf73e54b
- SSDEEP 12288:7a5BUR8zJcunmLlSugNPABBR47L5kRdhY895vFoFRmasgxFE:7azUR8zJjnQGtABBC7L5kvhgLmasgx
- TLSH T113F48D75B3F504FDE26B8139C9628613FBB174151730ABDF07A0866A2F23AD55E3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10