Overview
overview
7Static
static
1SecurePort...ram.js
windows10-2004-x64
3SecurePort...ram.js
windows11-ltsc_2024-x64
3SecurePort...ram.js
windows10-2004-x64
3SecurePort...ram.js
windows11-ltsc_2024-x64
3SecurePort...ion.py
windows10-2004-x64
3SecurePort...ion.py
windows11-ltsc_2024-x64
3SecurePort...le.bat
windows10-2004-x64
7SecurePort...le.bat
windows11-ltsc_2024-x64
7SecurePort...__.pyc
windows10-2004-x64
3SecurePort...__.pyc
windows11-ltsc_2024-x64
3SecurePort...oo.pyc
windows10-2004-x64
3SecurePort...oo.pyc
windows11-ltsc_2024-x64
3SecurePort...rt.pyc
windows10-2004-x64
3SecurePort...rt.pyc
windows11-ltsc_2024-x64
3SecurePort...io.dll
windows10-2004-x64
1SecurePort...io.dll
windows11-ltsc_2024-x64
1SecurePort...ss.pyc
windows10-2004-x64
3SecurePort...ss.pyc
windows11-ltsc_2024-x64
3SecurePort...z2.dll
windows10-2004-x64
1SecurePort...z2.dll
windows11-ltsc_2024-x64
1SecurePort...bc.pyc
windows10-2004-x64
3SecurePort...bc.pyc
windows11-ltsc_2024-x64
3SecurePort...le.pyc
windows10-2004-x64
3SecurePort...le.pyc
windows11-ltsc_2024-x64
3SecurePort...on.pyc
windows10-2004-x64
3SecurePort...on.pyc
windows11-ltsc_2024-x64
3SecurePort...es.dll
windows10-2004-x64
1SecurePort...es.dll
windows11-ltsc_2024-x64
1SecurePort...al.dll
windows10-2004-x64
1SecurePort...al.dll
windows11-ltsc_2024-x64
1SecurePort...ee.dll
windows10-2004-x64
1SecurePort...ee.dll
windows11-ltsc_2024-x64
1General
- Target SecurePortRedirector.zip
- Size 8.0MB
- Sample261027-mzbkvsdc77
- SHA256 c748992c87e912333300985433f5f6379c11c9e74f6dea6a81e3e2386a231004
- MD5 09cd2b5b38a556d091691b6566282710
- SHA1 8e6520f1e7ee1bb4144ebc158240eafe7e371b35
- SHA512 7aa59df506231556b650be22c78cee7c9f0a4dfd40be3530715fd940bba7b7cfd5699e888ed9c3c43cc066908f2fa6b7256d77a7c8e6c8869478564cbea026fc
- SSDEEP 196608:CWa/EXVPV0RsUK4EoXbpbiNkC5Mw1m/KR:CWmEXVPWRsXoXbpbieTw1GS
- TLSH T1EC862328D9FC72D8DBDB56FE304A040DA2524BC69B2C69FF57348F412CDA0DD9B0A256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SecurePortRedirector/CLIENT_Program.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
SecurePortRedirector/CLIENT_Program.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
SecurePortRedirector/SERVER_Program.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
SecurePortRedirector/SERVER_Program.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
SecurePortRedirector/automaticCreation.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
SecurePortRedirector/automaticCreation.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
SecurePortRedirector/compile.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
SecurePortRedirector/compile.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
SecurePortRedirector/python3.10/__future__.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
SecurePortRedirector/python3.10/__future__.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
SecurePortRedirector/python3.10/__phello__.foo.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
SecurePortRedirector/python3.10/__phello__.foo.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
SecurePortRedirector/python3.10/_aix_support.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
SecurePortRedirector/python3.10/_aix_support.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
SecurePortRedirector/python3.10/_asyncio.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
SecurePortRedirector/python3.10/_asyncio.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
SecurePortRedirector/python3.10/_bootsubprocess.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
SecurePortRedirector/python3.10/_bootsubprocess.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
SecurePortRedirector/python3.10/_bz2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
SecurePortRedirector/python3.10/_bz2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
SecurePortRedirector/python3.10/_collections_abc.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
SecurePortRedirector/python3.10/_collections_abc.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
SecurePortRedirector/python3.10/_compat_pickle.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
SecurePortRedirector/python3.10/_compat_pickle.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
SecurePortRedirector/python3.10/_compression.pyc
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
SecurePortRedirector/python3.10/_compression.pyc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
SecurePortRedirector/python3.10/_ctypes.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
SecurePortRedirector/python3.10/_ctypes.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
SecurePortRedirector/python3.10/_decimal.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
SecurePortRedirector/python3.10/_decimal.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
SecurePortRedirector/python3.10/_elementtree.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
SecurePortRedirector/python3.10/_elementtree.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target SecurePortRedirector/CLIENT_Program.cs
- Size 2KB
- SHA256 8c4f18d517b0dd4ba38308cab92f29e8c99304436e33718007bd07338c0832ac
- MD5 1fb33161a56efa9495828430f4d50554
- SHA1 329e1872795da8d306055d44c8a2cb9d701efd4f
- SHA512 3e2f2a73e585da8dc54189798b2067b6c5587f0f3051e315b35eca0ef33ba81a70739427edd1979e246f0268b897abe79c5b9a06ea1753b35b7a1c323fd54793
- TLSH T13D51D400BB81F77B5CB2133AE902D295EB375263156B6911BECD85998F32938C33DE54
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target SecurePortRedirector/SERVER_Program.cs
- Size 6KB
- SHA256 97d62c3162f9ee5e7f562425a52bcd13ce90eb45537545c5375ae823454e331e
- MD5 1ab7bbb81fe07865d91fe063019abdc0
- SHA1 841708c2cc12f7940a7b39fc75caf33e276ff664
- SHA512 a8f6caa762f259932677420ffaa30c04361d9906890f111cecfe423ddc60f8c576bdde314f616d024671aa29b4d8d9ef08ca14adfa4e7dbb1e732811d06959d1
- SSDEEP 96:Fo4+FltKXMy12s2ukB3CaKPkT75Ghkp/hOUsNGQx4qfDIS:hlYs2AaZxGeppXLS
- TLSH T1F9D1AE006A81AA7B68711376DA13A691FA3A167305771B01BACFC9D95F32D3CC27CF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SecurePortRedirector/automaticCreation.py
- Size 9KB
- SHA256 0fb541e6484c949b90aa4ae61970e40a077f38cfa976e6003974e35bd8df5173
- MD5 7135f9a3cfcc0594a89ed044d00e50d3
- SHA1 c8288fc77bb8bf53d296bc54cb2a2116bf86b23e
- SHA512 e2eeda7e3f385c9aa03d6ef62d9708eba581e3e379d9f12eb2605dcc51e01cba9abb9f59a9a8c4de9222d62893bd705f845c5bad045d89bbdce08558cfcc8dfc
- SSDEEP 192:DBU4r+AEWz1MJ8NtiSH8AB0wmhZpxZ+zEcaToWDkf3A:tUu+jyhfSwmhZZ+zEzTowkf3A
- TLSH T11D22B702AD1718414D7386AADA03B862DA1FD553133EE4123EAC658BDF39B9D43B8CF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SecurePortRedirector/compile.bat
- Size 70B
- SHA256 357f08fdabff565f7ae33b735661f56bdd79a2f2fd48b92b712786e38dd2ef2b
- MD5 d021097ceb6e9a441a9c092f29217a41
- SHA1 6615bf5951d00dc04dbeeb3a78dde4eca7a2d46d
- SHA512 dc77e835c460bb34ed6e19993a3bd1b45377e9e2866bdbc1bdc829bb48e2d3ca7e1c247d78e2b2f50535eab8f35efe21aed828a996fd93a5f33b9a0def868512
- TLSH T1A9A02220002AC0C88CC300CF30080020C82330C820C032CF3E308C2CAC88C008323208
- MD5 SHA1 SHA512 TLSH
-
Executes dropped EXE
-
- Target SecurePortRedirector/python3.10/__future__.pyc
- Size 2KB
- SHA256 0420cc477ffb18fb0826f49347cf94faa4fcf2808905cb46e073f00bb03c7734
- MD5 550fef2ffdc8586ee0fc9f543321b924
- SHA1 27de67f6c1970648f0f7545fdd8134708fd12a7c
- SHA512 fb9bccf49a37ac7f2e9e7b38efd1fbfe583f89ea60ec09301cab18598ad86ac33f59d2cc20fb9bbf2f4a1588fd798cf700f60637a6fc00744e77fd526719ae60
- TLSH T1FC41CC13B143899FFD6BF7F1E98A15400FACC65D2F14391B070077821A4A2628D3F45E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target SecurePortRedirector/python3.10/__phello__.foo.pyc
- Size 110B
- SHA256 ab5cfed5d913db4b86532cebd5b189d32d8ea8cb2fb1274c7f953d20b5d80189
- MD5 9884bf330fd3e295615df8b5116a198b
- SHA1 b55547dce35e51c1a3688d721f3ec358d9c4edbd
- SHA512 fce8f916194c5c8850df327981b017fdc252c22e655a41f07f407174ebfdf45318f792c6d0f6a3948f2f0009a61c92373b20dbaf074ecbfba9932d877ff87a7b
- TLSH T19FB012C08714498AE53DBE356051920110D0DD1233C310430824C4294C083300F51008
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target SecurePortRedirector/python3.10/_aix_support.pyc
- Size 1KB
- SHA256 611951e7425e0b77b63a693fac7d75206dc83f483fdcf65306d7f3a83fd452ef
- MD5 169f0f76f3af9c9425c1acb5a1a54e42
- SHA1 6019cbd1ce77064284862cb2461cb72724cec7fd
- SHA512 6ba01f3ff7a20792ed42a4e5c9d173bf5d4e347c7a9b8a9c64b4e66e7b0c7f1329719c27f7164f09f0e3fa44009710f80cb5e7a60785e0b83064f0ff337335f1
- TLSH T1423162C60E4A7DBAFCB8F2F5305F062607B0A373174DA9866808063F0D87A81AC62A01
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target SecurePortRedirector/python3.10/_asyncio.pyd
- Size 59KB
- SHA256 cf0edfd508d11bffb63d1b104b6099e0f14ea0fada762f88364e7163f2185f06
- MD5 6c2a86342ade2fac9454b83a49d17694
- SHA1 52946875ad946e4a170072f38e28e10f6037fab9
- SHA512 48d8eb8d20d041df37c4a6f243056607754046ed5f497260751270b42e9eea6f22fb1fb62d015e841d0263534f50bf6c812a6ade0e8bb0a0f79226bc64d05c75
- SSDEEP 768:NCEGDxmtgpeS5l4O7YZUWqJ5ZHWRgE9IaZIAYnc7DG4ythE:N1GDxUg7YTLRgEeaZIAYnctys
- TLSH T125536C86E29041A1E967A078D8B34F46E771F5401B00439FA26CD29E3FB335247FEB66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SecurePortRedirector/python3.10/_bootsubprocess.pyc
- Size 2KB
- SHA256 b82cd5f256edda41410ec8c9d1475c91b1b44cc6ec4ce410d0063a91de9a1cd9
- MD5 19db0c05484d51f309f27d34bf90d944
- SHA1 29add423b589d175ee89c90f8e26bde204db18d6
- SHA512 469b8ed3aed05babb553a2171863d0235677a79f55ad00573852ff1214a02d40d388700b1ea3d6745e8de28b1a2d8d9ee59c8a56a7332a131de51cdcfb1c86d0
- TLSH T18441CAC5876A54B7FC24E1FE518723B34BE5C539470666511829F6360D8FAD0F88378E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target SecurePortRedirector/python3.10/_bz2.pyd
- Size 78KB
- SHA256 4c2649dc69a8874b91646723aacb84c565efeaa4277c46392055bca9a10497a8
- MD5 b45e82a398713163216984f2feba88f6
- SHA1 eaaf4b91db6f67d7c57c2711f4e968ce0fe5d839
- SHA512 b9c4f22dc4b52815c407ab94d18a7f2e1e4f2250aecdb2e75119150e69b006ed69f3000622ec63eabcf0886b7f56ffdb154e0bf57d8f7f45c3b1dd5c18b84ec8
- SSDEEP 1536:owz7h8B7BjhJCZePYgIjFNf8AnZydTBIAMVyyw:owz18BrJCJgIHEAodTBIAMVy
- TLSH T12B738D52B36459F6F06BA27955704347E771BD0D0390C3BFB698426B2F13B916C7832A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SecurePortRedirector/python3.10/_collections_abc.pyc
- Size 26KB
- SHA256 fb6832c8959b2c24e69510c65af559fa380b190c4917f1e0a54143f8b3f6eb55
- MD5 161c13b540897411436a680f0bf87595
- SHA1 7c40ba4d6676c4a896986f3038bd992e15dcf702
- SHA512 9da338e0edb8e670c5bdeb336cfc0681772763f2ca03c48069374bc3d06b79f7eb122158e6c7e9f667e63d3769d33432a20261581e111c9bd44e987d40a68710
- SSDEEP 384:j3j8lqeZIZ516kzkvdrVfhmntMh60yWNJMEtk6o6e+ery24qILLHksVOh/F2m08l:/8HZIL16FrfAS8fao6e+EwzoIDKLB
- TLSH T156C230C0EEA2EC57F864F2B540BA42183725D2F3B23DD297161D65BE5C0AEC44EE1D68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SecurePortRedirector/python3.10/_compat_pickle.pyc
- Size 5KB
- SHA256 7d39a914be63a538fb5018f5741f8e9b72fd8c76a26f90a50bd7a1201700e5b2
- MD5 14bbc5a7ebbfcfc679bd06af37d623da
- SHA1 be51bfb695e20f8d2c283ec457a9c908319f9fe0
- SHA512 7e457de9290de61394a8a8286feebcd340104a1ea901f787bd884c3df42cb3622f0f7702f210e2fea6dd6d6c407836610a6055834e82ad3f42221f1755fe964c
- SSDEEP 96:ZPgbkl/+DrxavOvdq8PJOQwEqatORY7ve6xTP0jJhzA8qjhxCj/sQLIKL7KaQ:pMDVzNcQ9kRuGiPCtC0PL2aQ
- TLSH T1C1C1E601361C24D3FFC9F7F36BB1672156AD24412341D5858B6892E30D99B42FD6A3BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SecurePortRedirector/python3.10/_compression.pyc
- Size 4KB
- SHA256 64e00258fb8ae2b8b2401f851696ae9b8bde4dc376eacfe60ff23f026fe8bdf6
- MD5 2684219fd90c4dc8a00badc305fe0553
- SHA1 d69daf2498f0377ca9aed403c8e6280acdacc734
- SHA512 6bcbfa0fe60e26e511269aad9a80ffee14ef50a99d4e3282909e72a3e20f4dda89bbb6d60c31f13f39cef44468b211a3942c5f87684f35154d249c9e86bf6ee7
- SSDEEP 96:Uwc+SHmtMu6JEf9j0K5eFIPmw4gKoTNWLiq+Rq3/SF36:UsBMCSIOH0NWLwRq3aFK
- TLSH T11F9175DC9602FE9EFD64F3F98A04777023E086727745A3029506804FAD5D7C69EA7984
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SecurePortRedirector/python3.10/_ctypes.pyd
- Size 117KB
- SHA256 35cdd122679041ebef264de5626b7805f3f66c8ae6cc451b8bc520be647fa007
- MD5 79f339753dc8954b8eb45fe70910937e
- SHA1 3ad1bf9872dc779f32795988eb85c81fe47b3dd4
- SHA512 21e567e813180ed0480c4b21be3e2e67974d8d787e663275be054cee0a3f5161fc39034704dbd25f1412feb021d6a21b300a32d1747dee072820be81b9d9b753
- SSDEEP 3072:SHcKPoHQUCFN1KQDCVPJGltBfrShpl7PFIABPI:ShP0ChjCxJGl3frSVzo
- TLSH T1A8C34A1B635400EAEA63407CC5B35E87DB71B859172183DF02A4C69E2F637E26E7E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SecurePortRedirector/python3.10/_decimal.pyd
- Size 241KB
- SHA256 384993b2b8cfcbf155e63f0ee2383a9f9483de92ab73736ff84590a0c4ca2690
- MD5 1cdd7239fc63b7c8a2e2bc0a08d9ea76
- SHA1 85ef6f43ba1343b30a223c48442a8b4f5254d5b0
- SHA512 ba4e19e122f83d477cc4be5e0dea184dafba2f438a587dd4f0ef038abd40cb9cdc1986ee69c34bac3af9cf2347bea137feea3b82e02cca1a7720d735cea7acda
- SSDEEP 6144:xJADMQRl2npdNqRb8o+wmxYk29qWMa3pLW1ALH+4t4g3:IDMQ2Nqi02/U/+g3
- TLSH T134346C56A2490DA4DE73807899974B57F7B278940360D2CF43A4CAA73F537A323BE748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SecurePortRedirector/python3.10/_elementtree.pyd
- Size 119KB
- SHA256 16480ede0430be5249481a9bfb843eb0ef98f93b467a5428352fc23cc8c9051d
- MD5 1fecac327fc93fc161833ad709336bbb
- SHA1 c755ed4ff97eb2f1c73659322430c60de253b732
- SHA512 003d9ccdcb68f5876aad4cb39fecfefd043e70d1fd6ccfd4d672924ae96d69eb4f32dfcd1a643b3a60f0a60c051714c64436e0f6d09a784dd2f92b0800bca067
- SSDEEP 3072:Mx2ad4Xjfa7B5RQo/jmISgUjeuvZpmn9iPfxrrNobnxIAkf+:pm7B5RNiISgShKQxtobnz
- TLSH T134C33B5B7165C0AFE462003CA2668F5AD7B2FC900E4183CF6254F5AD9F737923EA9315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10