Overview
overview
7Static
static
3windows-is...nd.ps1
windows10-2004-x64
3windows-is...nd.ps1
windows11-ltsc_2024-x64
3windows-is...er.cmd
windows10-2004-x64
3windows-is...er.cmd
windows11-ltsc_2024-x64
3windows-is...er.ps1
windows10-2004-x64
3windows-is...er.ps1
windows11-ltsc_2024-x64
3windows-is...er.exe
windows10-2004-x64
7windows-is...er.exe
windows11-ltsc_2024-x64
7windows-is...on.ps1
windows10-2004-x64
3windows-is...on.ps1
windows11-ltsc_2024-x64
3windows-is...ds.ps1
windows10-2004-x64
3windows-is...ds.ps1
windows11-ltsc_2024-x64
3windows-is...ct.ps1
windows10-2004-x64
3windows-is...ct.ps1
windows11-ltsc_2024-x64
3windows-is...ts.ps1
windows10-2004-x64
3windows-is...ts.ps1
windows11-ltsc_2024-x64
3windows-is...ng.ps1
windows10-2004-x64
3windows-is...ng.ps1
windows11-ltsc_2024-x64
3windows-is...er.ps1
windows10-2004-x64
3windows-is...er.ps1
windows11-ltsc_2024-x64
3windows-is...he.ps1
windows10-2004-x64
3windows-is...he.ps1
windows11-ltsc_2024-x64
3windows-is...on.ps1
windows10-2004-x64
3windows-is...on.ps1
windows11-ltsc_2024-x64
3windows-is...ss.ps1
windows10-2004-x64
3windows-is...ss.ps1
windows11-ltsc_2024-x64
3windows-is...on.ps1
windows10-2004-x64
3windows-is...on.ps1
windows11-ltsc_2024-x64
3windows-is...ol.ps1
windows10-2004-x64
3windows-is...ol.ps1
windows11-ltsc_2024-x64
3windows-is...rk.ps1
windows10-2004-x64
3windows-is...rk.ps1
windows11-ltsc_2024-x64
3General
- Target windows-iso-builder-v1.0.0.zip
- Size 56.6MB
- Sample261027-weax9seb78
- SHA256 3b455cf3527383b1a97908b25ba1b69a85a4cd18635d03df9b0007f39250e852
- MD5 88a73718f02d2046b709d1aedf3ad93e
- SHA1 b15248cbc581a98a2ddb873a79543738738b6e60
- SHA512 d9a1067d88016cd7f705c2e3e4567115ce7a2a72812a1fe16c4a77448edd34c37668cdc6431cef5036d216eba70e5c4c55d1dcb3b36caf5f15775f3f56a58a53
- SSDEEP 1572864:F5NwLAvseSXcm4//1Akj9A32GaQ8IUu4XJ80fKf:F5NoAE1S//qkBA32GaQ80qC0c
- TLSH T1F5D733EA81A11CFDFBA8C5DA85DA8FF03C10D01B661FCC59ED22931524F768983A2D5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
windows-iso-builder-v1.0.0\Invoke-WibBackend.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
windows-iso-builder-v1.0.0\Invoke-WibBackend.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
windows-iso-builder-v1.0.0\Start-Builder.cmd
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
windows-iso-builder-v1.0.0\Start-Builder.cmd
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
windows-iso-builder-v1.0.0\Start-Builder.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
windows-iso-builder-v1.0.0\Start-Builder.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
windows-iso-builder-v1.0.0\WindowsISOBuilder.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
windows-iso-builder-v1.0.0\WindowsISOBuilder.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Application.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Application.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BackendCommands.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BackendCommands.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BackendContract.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BackendContract.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BackendEvents.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BackendEvents.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BuildReleaseHardening.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BuildReleaseHardening.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Builder.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Builder.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Cache.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Cache.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Common.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Common.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\ConsoleProgress.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\ConsoleProgress.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Elevation.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Elevation.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\ExecutionControl.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\ExecutionControl.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Network.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Network.ps1
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target windows-iso-builder-v1.0.0\Invoke-WibBackend.ps1
- Size 1KB
- SHA256 7cf8f27763d09192517a3d3d8341be7288cc3846edafd2d1d563bb05b4636b35
- MD5 7939aeea9001d3b366db81888af7af68
- SHA1 d9bcc0c1cde352f8ea8b831f0077453a80ea5980
- SHA512 1c2da091e6265e08bd2672ab5865cc8cbc6d3988fdbd9585cc56e9562955f48bf6fdd2d22faf4246a101da1e5d3f8c9cc2192d5ee39580b1abc679ac51951eee
- TLSH T12E11EFD61F024240DAF93F486C954E89F60EA0F331294034B4ED1E841F27924AAD8FDD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\Start-Builder.cmd
- Size 453B
- SHA256 3c5f6d0f829fdebfc689deee09ade3761b1f7acf7f40cd212e111883be908fbb
- MD5 340766d09573bf2c3edf767e88da75c2
- SHA1 45d063cb07664d2ef1e1b90bb51801a532ce5839
- SHA512 9799536f89c068f2b2e3b6f5d92b53a4381da51841e60c8a6d3ccabc303ad944fafa35b3535cb2d3040156644e92208e96dd7dc337f1099fa32ce891d1907bdb
- TLSH T13DF0DC6A706B272A007AA46000AF521BD80B805B11075BF03052CA287F38203C9EA5CC
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\Start-Builder.ps1
- Size 9KB
- SHA256 d3f9a783412848f8a9d100646be741cfc13b1c29c4b008a69237d65e307ab160
- MD5 451c74c6eae9b5d31d7e5b1752d69923
- SHA1 3849fd5b5d75263d0f29c3d9efbee76ded4895cd
- SHA512 4f40476aad7261dcd2e38f7619c1fc31787a7ba856950f45ef2c1f992b4b12d35aa8c3c787909ed60ba2c1a09863c8579a63f4d5d4ddb90f0b4143d616693aeb
- SSDEEP 96:sCwHJ1pmtmsBOuJizZLy2vqJpGitd8IXiMXpMQuW:sCwHJ1MtmsBbJizZLy2vbSdZrmQuW
- TLSH T1B31232580305176A49B613F8B8F44129EF7B01E7202C15B0FCDD49902FF6C65EB66B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\WindowsISOBuilder.exe
- Size 61.9MB
- SHA256 1cafc23d1d0eb57d41ed506073c6413188d64e2b38724d9854ee0b7aee631590
- MD5 473c21149608fe2e8ca32d3dcf68f611
- SHA1 b67dd046f0f8b3670780efea8c4d8cf061e1ce15
- SHA512 f14644affeadfdfda6c030a6735a1144fda51511792127f2ac02087ba1c67bd70a6725c8a9c78f3368be744bbc208eee93fc1bd74c7d6b6c8c23acb53f7edbb8
- SSDEEP 1572864:nMWhjegUm1Jhb49a0eavlL6zMRYzA2RKda7FgcgU:nMWhjHL69ZXWoRYzA21nR
- TLSH T1B6E72356E2FD00ECD4BAC0B8C6574627EBB1345513309BEB65A48A292F37BE16E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Application.ps1
- Size 10KB
- SHA256 bac1326d13aa45113cf68aeb463ef07e9bd2be20c5f9a76faa3ac2d992b2c7a6
- MD5 d218ac5cea136d318fb007def50fa250
- SHA1 84cc96d2fa247eedb0a1c24df559b1a420f79f9c
- SHA512 43dd52c13d4a293bd8b1d5e11ef6d3ad13034d2e3eaf9033ac52185d58681309f4e5170401d70fe3ac76d5d0c0cf989a9c6c2bfaf6a45adb23b31f9178f02948
- SSDEEP 192:PE47UCoqr95I4h68Ki5PTDMZhIs3XJpspojqc8:8ud+OCu4XJpci8
- TLSH T121325434658E242A127793BBCCA8670CFE9111FF561D18D8B59D1A687FF6008C3A4F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BackendCommands.ps1
- Size 16KB
- SHA256 6c87c6b1661425444f63f691ac11dbe6dc912ce20507dbfee1b1e62dc22844f8
- MD5 b037074a0c24c242de031e690d63043b
- SHA1 3ff3ac0fedc9a521e59407706db473218d0c47fa
- SHA512 e5d269323b8104aadf9e9f441d839bea2d47d311b47718f2b37c9b4116d14529de189b3f64abc698eea830aa4e89de17eb1567e4408e1035f45f670d986dc0d2
- SSDEEP 192:kMK/LeW8qtN+5NCWeNcKTicei0OE9L+LAiOxcNBrlDamCLqop9BorApS7tIuoaqV:kHFQNCWD+MUNBdamnophSZIuPz3vi
- TLSH T17A727316224866A747B347B9F8F9E71DED2A01AF221404A8BDDDA6C43FF4914D370E87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BackendContract.ps1
- Size 14KB
- SHA256 393ceca3bb6992bc96df1a71d3ab8b31f1c35b72837fcd0b3790c40edb4d92ba
- MD5 c70a2234fd8d1044f1047a9f2f7926a4
- SHA1 5c422120d52f40a5ba3779080e990bb544ead9f9
- SHA512 0090b376f1ba6f2ce6d35808192008124dde76efd863882676b3eefd5420c31d82b235b880cd10af2ce82cc3d09e18abd9f0e3e7514e474218548e1c531b35a3
- SSDEEP 192:ofbyZLTscDL12ueNnUebhkl1s1UuL6pAvHdIdxtR8z2CFhvyo2SKEai4c:ojyZUY9eNnUe2X+zgvclyo2BPi4c
- TLSH T16D522355688695921B7267F9FCAB350CFE1D002F563405ECF8ECD2A43FB250483B9A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BackendEvents.ps1
- Size 6KB
- SHA256 e9cb3d54ddee2b08b3c371bba18155f0b4b560158943ea3da7c4f259991e2bd0
- MD5 90806e04aa15d06a12a54223d4284f37
- SHA1 5fd3b177858cc9f3795d4f1530dfdae4c4a45e80
- SHA512 17e2acaafa9894aff25a4245795c01bd8f5090b9fe9e288a9d6999364aa0996c0a9b7b93e53423502239db122b6f8ec513704a89b66101706f893b4e7f0d8c7c
- SSDEEP 192:OsXlY7YcA0KBQFKmS5LjTn1sMh1ss//LQM:JlbcyhjTd/V
- TLSH T199D1AE4D3D079614C2BEA7B68E56D866EF3950BB6248552474FC088C2F30B54CBBCEA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\BuildReleaseHardening.ps1
- Size 3KB
- SHA256 21f35863624a2a1d436d8df8a52f2d58d212a57c794d7d2728be1d9ad0176b2d
- MD5 5ac05c3da30003dfee18066b64a2e099
- SHA1 381d11988e37a58c55feb13bde37195feb7a77b9
- SHA512 b9d3c31967642209001f23c9b4ee2d04df3a1b2078b3a44719335d87d40370d9f0332b5a609945e88e81bb9717fdb22e3a1d64383e025ba761bad891f9b4a540
- TLSH T1B16153056E81466791B71B983D9BC538FF3A102F8A1502A2B4EC468C1F74E541EDFF96
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Builder.ps1
- Size 22KB
- SHA256 55d6656b27d1507fe015eb7dc7c010823e093f990ff0264c9f8b75867983f619
- MD5 8171e10a80df26e6dbedf818d40e2e94
- SHA1 4ac0458e750a0cc5c1db52eb8d37a66e3ddeb76b
- SHA512 83d7e6f3bf77825001bb80ce9b4a2ee3335c47b8e5aecb36752617f855968ad5d1d633b61a25e70f4216c3ff85a07bb37ecbad7d6dd4bb81a13db5dbe136568d
- SSDEEP 384:xaqkh4Jcge3F2k1Q828/9KWYbbs6PD3a9kDaB5:xaqa3F2k1Q82w9J18KCE
- TLSH T1C2A2B8557945656F027313B6787E4019EF37406F84080694B1EC528ABFFA93CCBA9FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Cache.ps1
- Size 3KB
- SHA256 d331953927631d9cb8ddac8808ea158a8a52aad6f2a74dba38b2d5d2a27b1675
- MD5 ca54b1ffea3052af84abf5dad1de860d
- SHA1 175d610fa927f9e6b37546a1416d076e8dbf22a0
- SHA512 cff1c987174359767840438a39e6cab0ddb958c6db7609a99486a8d560ae44798da3fa9f5b62ce7c5cb97bde41beaaf7e8c88ff6caed5102412efbd0e64e7ae3
- TLSH T17351D419366E319012BA63B8EA9E851CEF0700FF912C0558F9ED87402F71569DF6CF9A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Common.ps1
- Size 11KB
- SHA256 1bba5b6dbea4b16ae58babe88a32331333ed606d4610d03eb17322c48f8f9987
- MD5 8747dd3cd3299e8d9ec6cf8cd78aeb74
- SHA1 870114cd4021b1893ae777df079f147ac893600f
- SHA512 24b68c22490a18e4e9512ed5bbf110a2e5f5427e5348983a94deca6b61598f3434d437ef69586436508e959fdc5b9bd5dbdbcee64b4d4cb9cc8d62f51bca73f0
- SSDEEP 192:dzCsEDKHhMMEjqH/fKkrd6Sob4uKtL8ihB9z9pMjTU35GfzRN9obNdchEr9o1DlS:dzB/sUqoGi9z9pBW/6u7hA
- TLSH T16A424158255361550677ABF8AD5A9819FB3F007735A80120F9EC86C83FF6D28D378F8A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\ConsoleProgress.ps1
- Size 11KB
- SHA256 d96e788bd049d714c36c1833ad42ca26480a39af33feca80948d8722a9d773f6
- MD5 6e7d0ac0ecf73eb5a905a3033dce758c
- SHA1 6213623d2b66fa8977b98e163bfbabc1f324dc3f
- SHA512 7de58c232a1b813212d78b219d26f28286efde88b52dc5b02ed9f8ee7628c09ee889679cdb194566c0d505d158b74f4399167b9762f2561f2036a1d753ad7f51
- SSDEEP 96:gNxRUTBuzvK1GKY0KEkgRgqElHLO+1I04KoIvJZZB6ERIKyARGKom3I1/CRe/soO:g/KXY0KEkPZw+1I1KomJXRIKylKo4Rl
- TLSH T1453232162C419D1D836B167A481AD454DF1E80B393AD038074FCDA5ABB32EED9778FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Elevation.ps1
- Size 14KB
- SHA256 af031debf075fe78453f78a718da5b7d23089586f52f5bdbc0e700c4c6f04d00
- MD5 002cc6190050a7d876c50187b29dbea5
- SHA1 5268f95e483e32363681ad84578f76d1831cdf44
- SHA512 f38699617d971e67519325ec6792b51999a4249af32d60e8c3fb8c4695bb5ce8024a27ca0b8a7b5ce2208e6d6002ed04fec3c35423859053f07aa8fb0b9971b7
- SSDEEP 192:DG8hPMN86FHXQPcIjSsjIbsKUs9OTte6ApnIpAPmHpTEYNQNgjvKBwoY+VX/4:qIbCbnUUdCw3BG
- TLSH T1806269242646666697B323FAF8D9540AEE37119F522C0074F5ED42847FF0824E7EDB87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\ExecutionControl.ps1
- Size 16KB
- SHA256 6b41b27407e4f051a332fa6f0c99f98fce46840c6dcc8f6c1d3560f28e766186
- MD5 095be43a5a4790660784b4b3b16276f8
- SHA1 4d70a564be69c85bfac5b8561d30bda8423658e5
- SHA512 97107ef2935974d282046754260bd07feb755ddd5c774d60c19748409d46f304a5f660c87c5bc558b1d5e684f5eb3d35f27282c1eea2a05874bdeca0d9656392
- SSDEEP 192:kvMyZDTUcdUWzxZ5x72IaIhvyXjQfDPjfuPAFVvcJq8KBpxUbhOEfJu6sPlYpJyM:kv7Z0cySxZ3rfV0jQfD7fujKSU8L
- TLSH T1E672D8A567053229D2BA53F6BC46AF1AEF5A00A7612D0035B4DE86842FF1870C7B5FC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target windows-iso-builder-v1.0.0\src\WindowsISOBuilder\Private\Network.ps1
- Size 38KB
- SHA256 15cca459fbed37603463c30b899b49f59444c5f38b25f434149824e69a35d6db
- MD5 2454dc0253b1cb9853547e380e4c5e05
- SHA1 05cb5d7112e6f015c06ed4f1a91e4571c23566f8
- SHA512 56e3d4693d8ed7ef1595edfdbfd837ccb2e419d8eb71d3109935e9b2fbdb6250319009ba6654433d212f7a0d8528ecf70401f6dad8108077cfca30c00ff2297b
- SSDEEP 768:5of3YH7kdqEmmKmT6GuRECkYPDOlAzUyuQ/JV:5K3YTmKmT6GuREwPylAz9V
- TLSH T14203A50469429926477B63BCEF9B5A08FF67512B105A10B4F9EC87C56FF0468C338FA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10