a6f20e138af5fd4a578ec3400709a39d58032096ec104f62fa9db1244ed00357 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

CheckERB_download.7z

windows10-2004-x64

1

CheckERB_download.7z

windows11-ltsc_2024-x64

1

Custodian.txt

windows10-2004-x64

1

Custodian.txt

windows11-ltsc_2024-x64

1

checkERB_d...le.exe

windows10-2004-x64

7

checkERB_d...le.exe

windows11-ltsc_2024-x64

7

checkERB_w...le.pyc

windows10-2004-x64

3

checkERB_w...le.pyc

windows11-ltsc_2024-x64

3

chromedriver.exe

windows10-2004-x64

1

readMe.docx

windows10-2004-x64

1

readMe.docx

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
CheckERB_download.7z
Size 37.7MB
Sample261027-qq67ysdf69
SHA256 a6f20e138af5fd4a578ec3400709a39d58032096ec104f62fa9db1244ed00357
MD5 d0ab6d76910a247c161f9617b7ff58a6
SHA1 9c7d6768f26dab389f7f43b6ed97f9c24d800edc
SHA512 d19e44faf7b28b9bdf29ac4bb8950eb9c98fa743ebe778fdd1b493e7171608b970a163793556ad377c1354b9aa5ec78dc17dc5cfbef641c38e48d713ec2dfee2
SSDEEP 786432:bu4d+Rls835Cq8RXuobiaVXrdduNtdULyYcJOeiFuH9LirH8hbytg/L0h:ATpKpbiaVXsriwHI+agAh
TLSH
T1A68733BA123E7AA148FDAEB05F831E6BD20DC5DDF0BEB1F60694773014867976134688
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution pyinstaller ransomware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

CheckERB_download.7z

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

CheckERB_download.7z

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Custodian.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Custodian.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

checkERB_downloadfile.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

checkERB_downloadfile.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

checkERB_withReport_downloadfile.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

checkERB_withReport_downloadfile.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

chromedriver.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

readMe.docx

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

readMe.docx

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  CheckERB_download.7z
- Size 37.7MB
- SHA256 a6f20e138af5fd4a578ec3400709a39d58032096ec104f62fa9db1244ed00357
- MD5 d0ab6d76910a247c161f9617b7ff58a6
- SHA1 9c7d6768f26dab389f7f43b6ed97f9c24d800edc
- SHA512 d19e44faf7b28b9bdf29ac4bb8950eb9c98fa743ebe778fdd1b493e7171608b970a163793556ad377c1354b9aa5ec78dc17dc5cfbef641c38e48d713ec2dfee2
- SSDEEP 786432:bu4d+Rls835Cq8RXuobiaVXrdduNtdULyYcJOeiFuH9LirH8hbytg/L0h:ATpKpbiaVXsriwHI+agAh
- TLSH
  T1A68733BA123E7AA148FDAEB05F831E6BD20DC5DDF0BEB1F60694773014867976134688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Custodian.txt
- Size 14B
- SHA256 63a6c8c4d0102f0cfbd914c279a0cb8bb626fffe1fa8c85e488f9de563c10441
- MD5 b3fc657f6d2a914989711269792d298c
- SHA1 c144ab5913b9b95772d7b68c2376cc0257fc3d72
- SHA512 2d80f561730563c2cab26b93d327b8cfaacc9b3b5349fcd079ab43f8bf01fd85b74aa424846522abc56b0dd5bd606c83d5c6bcbdc20f451064fbf5f31d894ad7
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  checkERB_downloadfile.exe
- Size 31.3MB
- SHA256 a3b2ab11ee973b4f2e75c50edabe3715fbc86edfd9d76d9b34f3bb4fa5eb8236
- MD5 73457add0d069ee48670a75a596af3d5
- SHA1 e4832434318b4fb46976c35c649a2dfec6285a29
- SHA512 5008d02c12a4bc0b4c63f27c79492777d910f11c7e2bfd6b4d58ce482f0332c81f11e89df384b9b8b342a8e67e99338a8ed192ac785b4e58b4b70ade2bbdb196
- SSDEEP 786432:g6BlcT8yk8pFdCrG2qnucT3qmM+HZBS336YnczZwt7k2+ZOhpA:hYwyk8rdCrGF/zqyHD8369lwNuip
- TLSH
  T1117733D8E2A502C9F0AA423D69E195B7D3F0F5110363C48F47E56B263D6F1E0AF796A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral5 behavioral6
- Target
  checkERB_withReport_downloadfile.pyc
- Size 21KB
- SHA256 523010d6b1e7f3e0fdda379b7881fa9ec394cfc4e8b44e33563e0e7802ff68f2
- MD5 3aaf47621983c1d3cfab771c171737da
- SHA1 9eca099eddbc5286068dda5610651f3d7c9b6d6b
- SHA512 504d1b39a9c512e51e2103570f24d7ad08b3968e5128a19c812de697366215f3ee2f003a6bc1a3b0029749d9567864dd05c3944c7a8b4e8bafe1dacb046435d8
- SSDEEP 384:1x1OesifUNxuQdRIWeTdi3sU10N53Kj+NViZx1:1x1lTfcP6FU1i3Jqz1
- TLSH
  T17BA2E871869424DFE9CCF07AB4899D443F3283BEB7629307F1245D7DAEE4329925821E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  chromedriver.exe
- Size 23.2MB
- SHA256 ffce245136a0c6b444ecb91976e95ccdcf90843ecba7d94546c1c70d9b118157
- MD5 425fe180d59e8fcf44cd751054892ff1
- SHA1 296d13400d3fa419013474d9164dc96564feb03b
- SHA512 965e78afeb1456c80bcb6a72f3413f53cb66d17c331eb4e844488b3c62b1c19c9bb629c2d9166ba161efefc6f0eac9ae1f585702cf5f192d02111d5e3609423f
- SSDEEP 196608:jMkrSqyoDD9zMGACy4O0zGMZ/8kJXNSr4dTkQA2vEv3Z:jMXqyyDeU4SZEoMUj+3Z
- TLSH
  T13C378E13F29611E8C01EC5788B5A9233AA70BC594B35B2EF1A5067911F7AFE47B3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  readMe.docx
- Size 19KB
- SHA256 f84cee1c71a37478fcf6efcc761b53d566b1b72d6e8ad9e76d474c653323d742
- MD5 6bb909cd07e99d3ce5eb97c6d4ffd180
- SHA1 82daa3682c34a14e9b1613ac0563b84f1958b0a3
- SHA512 b3ce33f3deb1e0b29542ac5eb9fdd98f9234b0d3517229985b57638b7454ce4999be8acb225f7a8a3810f471b9e6f1cf2c8d65bcd9c1f97af3ea8ab4d951fb38
- SSDEEP 384:d3VEJuTmaJqisrV6QxeSTGikLRHgmnJK/2n+Itllo9E:peJuTmaYis4S0pn+O+ItXv
- TLSH
  T19892CFFACB08BA16C273ACFC002515B6DAD84196B3A13A1F5505CBCF42A499347FADF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

© 2018-2026

Terms | Privacy