6322d7d3963276a0f9dc61fe568d296d73758c946669891277d9eb886110bacb | Triage™

Login
Reports

Overview

overview

7

Static

static

3

HexRays ID....5.exe

windows10-2004-x64

3

HexRays ID....5.exe

windows11-ltsc_2024-x64

3

HexRays ID...er.exe

windows10-2004-x64

3

HexRays ID...er.exe

windows11-ltsc_2024-x64

3

ida-pro_95_x64win.exe

windows10-2004-x64

7

ida-pro_95_x64win.exe

windows11-ltsc_2024-x64

7

kg_patch/keygen.js

windows10-2004-x64

3

kg_patch/keygen.js

windows11-ltsc_2024-x64

3

kg_patch/x...da.dll

windows10-2004-x64

1

kg_patch/x...da.dll

windows11-ltsc_2024-x64

1

kg_patch/x...32.dll

windows10-2004-x64

1

kg_patch/x...32.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
Hex Rays IDA Pro 9.5.261026 Full.zip
Size 732.4MB
Sample261102-p35dfswv2l
SHA256 6322d7d3963276a0f9dc61fe568d296d73758c946669891277d9eb886110bacb
MD5 92533819de0cde6d7ca4b4e520839f29
SHA1 4bfe38c1d55a8eb9cd2fee6f2132e94374da5905
SHA512 1ab1b184f7c5c54d0549ac60fa23ecacb7c2f71d8e0208eaf0df4df100b613f23f76c756c6f906e6201a047646dd1a0ed38df7344e93a8002523b4981ba437cf
SSDEEP 12582912:NnRkHRDbbGP3cLRAcyFAkTGjPPKVpbimEheeT2pJvXzraBQgLRCQ7DeZ4sbDK7bc:TkH9GPE6c3ky7K5YeZnnItdnY4qGFT5s
TLSH
T1D28933F270078F00D760BC3F8C24A225CA1548E7A51ECEB7EE056B9C17AB4DA697E15D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

HexRays IDA Keygen v9.5/HexRays IDA Keygen v9.5.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

HexRays IDA Keygen v9.5/HexRays IDA Keygen v9.5.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

HexRays IDA Keygen v9.5/Jasi2169 NFO Viewer.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

HexRays IDA Keygen v9.5/Jasi2169 NFO Viewer.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

ida-pro_95_x64win.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

defense_evasion trojan

Behavioral task

behavioral6

Sample

ida-pro_95_x64win.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

defense_evasion trojan

Behavioral task

behavioral7

Sample

kg_patch/keygen.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

kg_patch/keygen.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

kg_patch/x64win/ida.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

kg_patch/x64win/ida.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

kg_patch/x64win/ida32.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

kg_patch/x64win/ida32.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  HexRays IDA Keygen v9.5/HexRays IDA Keygen v9.5.exe
- Size 164KB
- SHA256 6f8846dc8f24b5d490f0f761a8e2950112f80b9b1ebecf503e7d4d9befb3a511
- MD5 ed9a022dbd1aecc45da53651b004e4d9
- SHA1 ca46e62f3c4185f8dcc6b901b3ffb932f2f9332a
- SHA512 374107e1f1858873bbe7016ece1080fa138f47139e5254e1dab232ead9c3bee795983096aa8327c6e9b06c6b9ccd8b51605441b2c950269cb1ab41108680ded7
- SSDEEP 3072:f7YUuz9YL1i7F2zqISzHiVvqjFwBohIN9UpCwnUBcQamV3aoYZs9BYQDiSDiXtNX:ngFwBowUUO/uEEiXtNX
- TLSH
  T1E1F329217B4AC833CD45FBB194BA9BBD9534E831DBA611C373804EB60A149D72E3DE16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  HexRays IDA Keygen v9.5/Jasi2169 NFO Viewer.exe
- Size 355KB
- SHA256 eaf1b52b5b1f64025239b73c39b56817d24b5ca268af800ae33d3afb7b2a67b3
- MD5 805087bd08724209b6608aace4044123
- SHA1 2ae0cc1713cabe2a92883c13ae5150a7672f79d2
- SHA512 b4e2e5efe662017ec0e576d476ddd5b90fd0a1b67bf0767aa5955e3591e40a1a505d98bdd84bdbab8d420c63a6b349a490892adb95e7cea9f544811bd114a6d6
- SSDEEP 6144:DrRl5P7KYkhCvt1A64IFyOaRVVNnPMhERJkjDjnqD5Y93KCnJ9U+Vr:D9K5Cvt3zFZazVKjDyq9vnDU4
- TLSH
  T1677412ADF968D440E22A7532BC71CAF0874A1D58F9180B9F2AC33F1F75B9E80D975416
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  ida-pro_95_x64win.exe
- Size 723.5MB
- SHA256 0f03b636ff57a9b2a85bac5320d9cbf9917200fe5929a06b8c99effe72370ea3
- MD5 f221fe329ba89d0296f1a7c0b9f90a23
- SHA1 f96d0702621099188487a12eebcc9bbd9521156a
- SHA512 e2948cfe6b83aedd992b8577af1b6d01c4838df54bb20eea1f5d36217d7891c241ef9273b9eeb2e119d657e9eaa33206cbab6049d6a5e814f91db9f13d52fdbf
- SSDEEP 12582912:ILZU+ZFTWawfvMu5QODf3QNF1Z37a4QqSfD5YCpOdVMfFFFQvK5Q0UO0CwGXFZCS:I1U+aaoHT3kVOf75bSuFUK5PUO0+FZCS
- TLSH
  T15A793352E171C4D8CE6B80394F131B769F327C6A60249A3FBB54BBA42F72D746B6520C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral5 behavioral6
- Target
  kg_patch/keygen.js
- Size 6KB
- SHA256 973600651ff039164ac9c3c23ea3089d8f00a55a8f8cfa27e953d9c8c5b41d47
- MD5 a1415f47b7cee1fedca7e4aa3a3446e5
- SHA1 3c26ea17701245e62d0abef72bcfa99d48e59aa3
- SHA512 ecc54dd5666d9b6e7815e07e9f761fc450d4b44a9ca4f2e388061cfcd7eaccc0f5de932fc2cfe00a9fe55b08912de5c0c066bf56cf01f9a4daaffa9eed2c7e0c
- SSDEEP 192:y7vKh6tniKQzuSGYfyJH1IcDpP/mrRCDj:ybY6tn0uSyIcD5/mr0n
- TLSH
  T174D12AD91AF549329A1360536D5B844F32A09603355CF218BEACA39A2FD8C2DCAF55FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  kg_patch/x64win/ida.dll
- Size 33.4MB
- SHA256 263633a896fc04f832ccb8854da42a48d97f9f01c0d7630ceb4c1e305f8b8cd3
- MD5 115524d1468147b32b4a5eeda98c62f3
- SHA1 8a0e6645f5a58b81f3b8bd296f43b0f6543d50dd
- SHA512 be314854e29eadad30c9680b846d4ec24ec0dea3c3786f351639bb4748c5a4c0f21046e31ddef7a7afa2445b5efdfc497d72fe6d65116c948f912c688e69c6ce
- SSDEEP 393216:FLR29fvSfebjkPV5mhRAXRf3O6y+ivsPCg9Lzf9NcIRMUYflB1ALRAs:gfQe25mhRAXxxf9NcIRMUYflB1wR7
- TLSH
  T115778D5B72A401D9C47FD0B8CA5B5747EBB1748603366BEB06B586623F13AF49A3E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  kg_patch/x64win/ida32.dll
- Size 6.2MB
- SHA256 1527d64a696bfa5df9b05e9815bb6aff6242e3f582e2de1ada26b5313a765a1d
- MD5 c68177e2645b3f7b90c1d165b91aad7f
- SHA1 1493517c63a1daf66026c507b71e4000e4461925
- SHA512 273435575a1a874776ce86f30fa7c58d59292ac847b1a0cbdc61e0ba3b40a0a39a69f5c318822cfb08ee25e3fad8ea3c469201ec085867ec1f35e6dd57cf4d77
- SSDEEP 49152:2NXtOu+Z9jQNTyooSne8jbpd/K7E7n0kBmh6YgvkT1L4Hf43ZiXVn8hCbltp6bHn:Tu+4Ve8vBAYJtbji9fYs9O
- TLSH
  T13C567D6BA3A811A8D1BBD078C64B5707E7F6744603309BDF15E546AA2F13EF45A3E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

defense_evasiontrojan

behavioral6

defense_evasiontrojan

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

© 2018-2026

Terms | Privacy