84bf94b13d815a98616d08793721819c78c1248b2208bd83979b199d2024ada9 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

README.ps1

windows10-2004-x64

3

README.ps1

windows11-ltsc_2024-x64

3

dictionary...ict.js

windows10-2004-x64

3

dictionary...ict.js

windows11-ltsc_2024-x64

3

dictionary...��.bat

windows10-2004-x64

3

dictionary...��.bat

windows11-ltsc_2024-x64

3

dictionary...��.bat

windows10-2004-x64

3

dictionary...��.bat

windows11-ltsc_2024-x64

3

dictionary...��.bat

windows10-2004-x64

3

dictionary...��.bat

windows11-ltsc_2024-x64

3

docs\Claud...l.docx

windows10-2004-x64

1

docs\Claud...l.docx

windows11-ltsc_2024-x64

1

ocr-overla...ay.ps1

windows10-2004-x64

3

ocr-overla...ay.ps1

windows11-ltsc_2024-x64

3

ocr-overla...��.bat

windows10-2004-x64

3

ocr-overla...��.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
claude-ocr-overlay-v1.0.0.zip
Size 97KB
Sample261027-mzb7dsdc78
SHA256 84bf94b13d815a98616d08793721819c78c1248b2208bd83979b199d2024ada9
MD5 d0f6c39d47031553cce391342e48b4bf
SHA1 a4307d449d8d76d20e3691a44c7e12d5aa081dc7
SHA512 f704e83fd1d71e267df714d7b6bed90388a2aa46de0e4b131c31a63fe7a00667cdaf7e3b0e7c16ad3cc1351776fe5483240a32b194a0ab265a6521df528853aa
SSDEEP 3072:E3IdFA/QimpdAsBCv0upjSYzKz4/5FB/d8pA6OGjYks6:E9oimAsBC8MXE4rB/d8pdi6
TLSH
T15DA3020BD9587938D34B88F37812F5DA12582983D8D2FF8A665961CF40574A81E9BC3E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

README.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

README.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

dictionary\update-dict.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

dictionary\update-dict.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

dictionary\互動新增翻譯.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

dictionary\互動新增翻譯.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

dictionary\更新字典.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

dictionary\更新字典.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

dictionary\檢查未翻譯.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

dictionary\檢查未翻譯.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

docs\Claude_OCR_Overlay_Manual.docx

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

docs\Claude_OCR_Overlay_Manual.docx

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

ocr-overlay\claude-ocr-overlay.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

ocr-overlay\claude-ocr-overlay.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

ocr-overlay\啟動 Claude OCR 浮層.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral16

Sample

ocr-overlay\啟動 Claude OCR 浮層.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  README.md
- Size 6KB
- SHA256 caac90a308a4430aeb9018d35d364304fb51f6ddfdb61a41e99daa5cd45eec6b
- MD5 8164ddcf0abd63a0429eb69cbd789c2b
- SHA1 5de94e0847eb5a9d33000f157b69beb3dcb3de18
- SHA512 133edb340db1fda36c47d74508e85b9aec0ac4c92d3201c29aaa41e8272c1527621edc87fb80cb3c4a8b62081b2df13d1b72b5b3a71351806ace334cd494b772
- SSDEEP 192:R8l7DFCF8Kr2BOD+d8qwh9Qgt8uQhAo7KNY:RU7BjhPe9hX9Qh5
- TLSH
  T149D1E8705610AF9E3AA6F0CDC30F119FE0887C22887A363CFBCD79E91B41B51491E95A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  dictionary\update-dict.js
- Size 18KB
- SHA256 3d4bb829060ccd8365ce0d0ff1bd0d70e174b8b641ad1504403e93f609053e12
- MD5 1887349e97ea3acb6c9795f316593320
- SHA1 6c7cbbffeaee77100b08828adb4e3f0f8be9046b
- SHA512 f38ee07ec98debf4835127b59db292e8a58bcca3788a6e5ee9b680d84001b7eeb4e28e928bb03d05f65134fa5e9ee1ae3f256e446e0cdbe9110122d8cf5ef2b1
- SSDEEP 384:uMXEaQ2w5SqGcTAz6xbh8S6VMIhDQM0VI3b:VlQZELcTAz6xT6GIhDx82b
- TLSH
  T15F82407414B9527470A7ECAD4A7B0C117158B913F019EA84BA9CB2DA0FFE914CEA35BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  dictionary\互動新增翻譯.bat
- Size 405B
- SHA256 47086ca13180198dbb0b6ca2b52aacf6998792445a896389289e83d6c8a24da6
- MD5 06e721c7ab3e1df6fbb724861bf0417c
- SHA1 5550dc6c9c86b52f06aac29ef8aef772a229a91c
- SHA512 dbc273f3d8fd93c5292a896f6252ee74a2a3fdf22d8b7c51888555d89be8deeb9cee5cae857b1e6a06ea16886ed37a66560b7ea913cab77d800cd0e2f9a8f739
- TLSH
  T1FDE086823063E115225D13129D4121D1B958E8DB89655C99B887207483DEBECBB1D645
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  dictionary\更新字典.bat
- Size 429B
- SHA256 b03e4598c057734941c47d08ec5d500475a337c80178470b049bf5eb38664d16
- MD5 9c8b6ee4b8429b1b778141d89ebc269b
- SHA1 506d19f034150b2bfaf1ecb2e096a19df476454d
- SHA512 fc40003c0bb5729ace124ff15aba0c6c11f38c485f5eb06788bed354d8bcb8a7a427106efdb7092d99f470c457cae0f87e307f292b9fbd7e58f6d663f01f602d
- TLSH
  T19BE07D63340BC16721FE4664CD476454B02D0ADF81C22DE574D335E85D9DBD46E9D8C9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  dictionary\檢查未翻譯.bat
- Size 285B
- SHA256 78fd2923873b2bbf3160fbce3af0736ceba69f358faa0103ecb345989eb83cb1
- MD5 d8f4ec818196dd15251ea34b75ffff04
- SHA1 55b7e70266fe6050255d4a9fd1c27d45d5f402cd
- SHA512 1859541bbe618688cbe076304ba8deb18db71c84c9a6507d14f18fa1bbc8db5b636b463514edf8d6944fd469ca524627e03c9257ad553871cc4ba7d5127551c5
- TLSH
  T100D0A9823421C34222B302108C4636C0BD2A488F83222D28BAE360A1088DFA8BF2F001
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  docs\Claude_OCR_Overlay_Manual.docx
- Size 20KB
- SHA256 7b0e2ccec37bd12e72e7348208f88e20e695aa1121c68a6d12dc62c6046f537a
- MD5 3aad706b8333476af5687fbf25eaa999
- SHA1 47e9e636bf3ed8c0ddda204834e7e4cb8dcad4d0
- SHA512 a54de30553696e87a6d5a0bc4edcc78df4133c5c437fba77af55c3911e2bdd2eb5451b431b94fcf25542f2038f8056c2646f14ed557d6a747bc0b316479ca45a
- SSDEEP 384:aVEzYIO39G941Vopb94wcWQWne6PmeG8NjGviYptIxzHvYS:s5I4JVkb9RcHWnxPmz8R/2IxkS
- TLSH
  T151A2AE36DE432871CE17023E39284847FE56474BE374614526CC36FF4FBAE902A16A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  ocr-overlay\claude-ocr-overlay.ps1
- Size 15KB
- SHA256 3eb645620326752c8bc1ff2e23dde9fed8722e89206fbe77b553e7d5cbbc5df4
- MD5 357d428be773904f4b03f798dc56898e
- SHA1 8df6d59b8b0f1176f54c887a9496c5e677f4577b
- SHA512 da79d10e3994614efc784f1f5a715cf5b35ea308b6feb3d5036fa861d4c2c095106089a7ab0d722c669c3344ac0672996625f4eb0184a88ca4ac05816a91d67f
- SSDEEP 384:qfVU/hiZaqaW2KZDHCoZ4tmY5YUbvf2YtnzK0C6icfBVceEceVZ6m6Xa:zoLZDHCuuch
- TLSH
  T1F97284E4B37E900456A7A0272D5FC4C81F7A6433621EAC1AB4DF9381FF99934877B285
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ocr-overlay\啟動 Claude OCR 浮層.bat
- Size 148B
- SHA256 1e903b3fd01f3aec32710856810c9e94f3ee35bbfe0c7c6afeadd44d655c89a2
- MD5 3a7d07fd3d94108486acc52688151346
- SHA1 1708edfb36bb422b6b8e10903ee8031cb4ccbc13
- SHA512 17fd2a2a058d8611e6d430f36ec95b04dc3fbb74dcdca1690d6b2798e76c513481f81953f4e400bf29aaf535244fa5141c2a408c1d98a648c8672de0d344ad72
- TLSH
  T1E6C02B22341443CD32BB5815E09B71740E5D618B92388A4232F7237B340E265CD16EC6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy