6714e49ffcb28f0ef94abbb43c60014785c554ceda3bdba1e5f06990066245ce | Triage™

Login
Reports

Overview

overview

5

Static

static

3

DistroClient.exe

windows10-2004-x64

3

DistroClient.exe

windows11-ltsc_2024-x64

3

RegistryGrip.vbs

windows10-2004-x64

5

RegistryGrip.vbs

windows11-ltsc_2024-x64

5

clsTCP.vbs

windows10-2004-x64

5

clsTCP.vbs

windows11-ltsc_2024-x64

5

frmMain.vbs

windows10-2004-x64

5

frmMain.vbs

windows11-ltsc_2024-x64

5

modDatabase.vbs

windows10-2004-x64

5

modDatabase.vbs

windows11-ltsc_2024-x64

5

modGlobal.vbs

windows10-2004-x64

5

modGlobal.vbs

windows11-ltsc_2024-x64

5

modWIN32API.vbs

windows10-2004-x64

5

modWIN32API.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
funky.zip
Size 48KB
Sample261102-ls6a8avs3n
SHA256 6714e49ffcb28f0ef94abbb43c60014785c554ceda3bdba1e5f06990066245ce
MD5 416e0163e4bf5238c71e7ec84587c943
SHA1 18e635f17d2fea694d5f5ae3334308a74cf5c91e
SHA512 c0e114da665d19cdb33ad9c0136032914e30f3eaa628b07f6f816a858d199f49a787ada8f9441942f1b73775a4b0597e615258b41782d59476357f8c2ac413ec
SSDEEP 768:F2FiHkM8flHSrPpJ9W2h1u+/pwbDisQeiUbTwTYQpIE2RaAJ:F2bdyPlT/pAmv8w0Uc
TLSH
T18333F1EC8E1185E9D2E813FD5014FEAAE13F48181699730709B1D5FE3E17F4B8E2A295
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

DistroClient.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

DistroClient.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

RegistryGrip.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

RegistryGrip.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

clsTCP.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

clsTCP.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

frmMain.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

frmMain.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

modDatabase.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

modDatabase.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

modGlobal.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

modGlobal.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

modWIN32API.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

modWIN32API.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  DistroClient.exe
- Size 88KB
- SHA256 f24ab8ecc786414bf8c30226d1c4950e5147e224df61620406ea5fa2d8e0f12e
- MD5 e043b06629612662a6901a03ded0d3c0
- SHA1 e8138da5f2fd229f5e41820beee6d7766905a7c7
- SHA512 eadae0ee8093a68974f78164d0e37c5535dc41e02af47946e70626357eb030bb01d8677bb4f63d1e06851feff3af997104e6b2d0f781fa5793fe3fea776e1e1e
- SSDEEP 1536:eveDjseVFWu8/LlQ4+4CPqYjTsP/4W5rL4CC7yO7yk:emc6Wu8/LlXxYja4p7p7/
- TLSH
  T17B93FA23BFAC1111F26B5971197965728D237C352822ED0F6346EA4D1A71A83F9F132F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  RegistryGrip.bas
- Size 12KB
- SHA256 0ac463eb05332866e944da68203a18258f9b1aaf6716d45ccb202ad82af42ecd
- MD5 a2f57fb41d045f889e2fd6f6bceded7b
- SHA1 6a51e23d0431c0abc0273191f5bc3f0d85a496fb
- SHA512 be4662f76433d13907c91026bc3356c1d5502c55223dc33ddfa7cf66de267a37a191ed3ea31ff5d2f63cc9ef1c0baf6975a956b5d6125f316e5d9da6fcad1753
- SSDEEP 384:RxR2vYE2lEZCEYUOopxKpZs7isLs3DJ2bgb6k3N08k0:XRCYhlcCtUxQZgi4GR08d
- TLSH
  T10342659AFC07C63449BAE3245C67C5E7D8E97D4632385B40B81C56C99F728DE72E02B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  clsTCP.cls
- Size 9KB
- SHA256 f197e25466bffe4e8fd12061d22be9e811be199a99ca69dd52b76b9b8e914030
- MD5 344b9a3f6221055d01ebde7feabf2373
- SHA1 1cc9f9747ccfcf32bd68eff922157a282b9df621
- SHA512 e166883e27b172af7bccb2b525b761bd8502a2355f84be9e86f82cec2f7d2ce328ffdbe4e98ab521039c9d74fd72f91fa04263ea0f880adc04842c12388fa7e4
- SSDEEP 192:aAcep5JSslhETfeuR5oSHgAQW+X3s53WH6n7q8wL/Q+IlwK+/g6Js:1cefMah0f3hTQWqcBII2JLxI6KMS
- TLSH
  T17822A98DBA447D355CF18904A80A941ADC6436AB0BB308F7F09C95BD4F7616BE1F07EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5 behavioral6
- Target
  frmMain.frm
- Size 6KB
- SHA256 9a9b8d4d96eefe47316e400e8863c075019ad2dffabe599d34931424b9f3e362
- MD5 eb39ac39208cd670a492b919020f2ade
- SHA1 5da68ba8bb59a038c289c7547a60007f7db52df7
- SHA512 5c0edb5d2b6eb398b2e953324d481ee6d3afa531e75a94389ad9f31c22c9fd4a8eeff0c272e07d1abe102425ec8b9a753f31d8c9c232770441d74e1135b4a1a1
- SSDEEP 192:WF2pu+/lFJmvkjEd7K5aaBwdlfAsKoAWe:WSHMv+SdlIKe
- TLSH
  T140E123057F8183309577D525AC2BBA16ECB5151368932C30765CC0E54FF1BAA62FD3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  modDatabase.bas
- Size 11KB
- SHA256 ce466250e72e1ad7ee5ba4495ed3a96777466dc3d2d47aa1dcae8750b087d1de
- MD5 9da422e13a534e80e49f3fac63b9ab0e
- SHA1 e11a507eaa7198e6b3061179cf5b3a6cc31796d4
- SHA512 19de1c74005c7202f8eb04022cb54ead9639dab2a647582b7145ecd21b434a7c887c962de480bc0e4bacf391d9fdbdc12345b24381367173841faf7b6a7bee4c
- SSDEEP 192:fc3fNaNotlkR2SYLj/tPeE1DqLXr2gk2CIpLG40pagn06ToEUb5G/aB4nk4pb6fQ:fXNot1Bk2gZCIpLGwgqxxu1L
- TLSH
  T11132612A7B00F231683B4DB9D89B941E6CB17B16A04A44163C1CD6D04F70BDDEAB6F6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9
- Target
  modGlobal.bas
- Size 10KB
- SHA256 82f78721a491f1297b2b0ab2494e7ac1bae528ec477907def102fd3f71585b16
- MD5 22afa834347945259f3b1707b274c9b3
- SHA1 3409be55150c9087c8c45fd4d8be013297da5a1a
- SHA512 694ca0b33008a747393cdd598f6ab6bdd23e43412005f704692126a8d33b4fb76d441006299e9c506d5f566ef3a5150ef340041129124153d904fba1ccac67cd
- SSDEEP 192:db19iuFLR0yJV3P0a9pJltOWJyY7/fQ4/ryT+mN3WHi0vKeKvM4oQnAS7LmJQXRZ:d90KMa9rXQBCmN3YiyQXRfXh
- TLSH
  T131226429760421B188FE5D3CEC09E42BD8F41A23A17B5422788CC6D64F75BCE67D1EAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral11 behavioral12
- Target
  modWIN32API.bas
- Size 10KB
- SHA256 dad0704cd8982360d34cb73e403b3c2ea696f50824b386fbc226948af86b51bf
- MD5 389676f73a61596e9616890139bbd6b9
- SHA1 a04481e18da3b0f1038af8044fa7bd14d9c9066a
- SHA512 208414c324b16a032380cc68b19cb881bde65c1954eab2a1ac13ddaff6ba927f98f99486b38754864a2f2a46ae53986c9bf79dac197e4b35be9f80d35a40137f
- SSDEEP 192:FnWrVr1df7+g9FxXIy9VNjGypgSZsByqL4jBm29nR7OnwD/r:MlFVrGQdLOiE29nRKI
- TLSH
  T17222649FAD4E237184B96272B98F78BBDED85018307A0771746CC2DA0FF56CA13E2654
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

© 2018-2026

Terms | Privacy