d1a64f8b69e5793cceb24a803fcb136dcf082e0c0a6c99eeccc56ef143912211 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

GTS.rar

windows10-2004-x64

1

GTS.rar

windows11-ltsc_2024-x64

1

README.txt

windows10-2004-x64

1

README.txt

windows11-ltsc_2024-x64

1

Untitled.js

windows10-2004-x64

3

Untitled.js

windows11-ltsc_2024-x64

3

app.js

windows10-2004-x64

3

app.js

windows11-ltsc_2024-x64

3

download.py

windows10-2004-x64

3

download.py

windows11-ltsc_2024-x64

3

engine.js

windows10-2004-x64

3

engine.js

windows11-ltsc_2024-x64

3

engine.js

windows10-2004-x64

3

engine.js

windows11-ltsc_2024-x64

3

engine.wasm

windows10-2004-x64

3

engine.wasm

windows11-ltsc_2024-x64

3

game.css.txt

windows10-2004-x64

1

game.css.txt

windows11-ltsc_2024-x64

1

new 2.txt

windows10-2004-x64

1

new 2.txt

windows11-ltsc_2024-x64

1

strings.json

windows10-2004-x64

3

strings.json

windows11-ltsc_2024-x64

3

unpack_gts.py

ubuntu-18.04-amd64

1

unpack_gts.py

debian-9-armhf

1

unpack_gts.py

debian-9-mips

1

unpack_gts.py

debian-9-mipsel

1

Sharing

Copy URL Twitter E-mail

General

Target
GTS.rar
Size 4.7MB
Sample261102-zdrfeafs8l
SHA256 d1a64f8b69e5793cceb24a803fcb136dcf082e0c0a6c99eeccc56ef143912211
MD5 c2063ffc306b6b48f7a3cc9216508756
SHA1 1a67b55a0c575a418cc8355c9f99afa1f4b85b12
SHA512 28ab24b482fabf152fe43ad1a738d2680939f8055e3dde888973088a3d26f42bdacea4bee70552311c7ab13fba2c0a8d35da6187f909c31d7a1edfb9697b3f34
SSDEEP 98304:f+Ogaj9ql4RKTtL3h9H3gaj9ql4RKTt4X1TFqHU+AZIt1JCm89+njTZLn:f+2j93C3hdzj93fdFcUkq9+n/ZLn
TLSH
T10C3633A6B63102D21FF0316FF60060922DCEDA9B4649AD572D5437533CCAD97BDB3A28
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux ransomware

Static task

static1

Behavioral task

behavioral1

Sample

GTS.rar

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

GTS.rar

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

README.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

README.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Untitled.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

Untitled.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

app.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

app.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

download.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

download.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

engine.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

engine.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

engine.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

engine.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

engine.wasm

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

engine.wasm

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

game.css.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

game.css.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

new 2.txt

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

new 2.txt

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

strings.json

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

strings.json

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

unpack_gts.py

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

unpack_gts.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

unpack_gts.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

unpack_gts.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  GTS.rar
- Size 4.7MB
- SHA256 d1a64f8b69e5793cceb24a803fcb136dcf082e0c0a6c99eeccc56ef143912211
- MD5 c2063ffc306b6b48f7a3cc9216508756
- SHA1 1a67b55a0c575a418cc8355c9f99afa1f4b85b12
- SHA512 28ab24b482fabf152fe43ad1a738d2680939f8055e3dde888973088a3d26f42bdacea4bee70552311c7ab13fba2c0a8d35da6187f909c31d7a1edfb9697b3f34
- SSDEEP 98304:f+Ogaj9ql4RKTtL3h9H3gaj9ql4RKTt4X1TFqHU+AZIt1JCm89+njTZLn:f+2j93C3hdzj93fdFcUkq9+n/ZLn
- TLSH
  T10C3633A6B63102D21FF0316FF60060922DCEDA9B4649AD572D5437533CCAD97BDB3A28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  README.txt
- Size 649B
- SHA256 96352d8489555b6eb7c5da940baa2af714f9eb7eeddaa72950c2c3fec9792657
- MD5 1cd78cf40f9d84df356404d72c67bad9
- SHA1 c9f29f9dbae793d2cd11669256b4e85e022b5fed
- SHA512 d07ae784cabc7ede06bc93b9c0bd4ae76b55c1707910fda7bd37c86a8a6249323c3b7b647186d869ff4368adbd5e2f0d5ad6a5b7475c7d48a85027830eaf1c2a
- TLSH
  T1FDF02D1F3B63C3B2A9602BACFF1023C7B71895E07151F6252CA180CC3B64A4C92E5A08
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral3 behavioral4
- Target
  Untitled.txt
- Size 760KB
- SHA256 743a5489027620101c746a3df8918b486aa28f1aed82058f0a430155cb3cfda5
- MD5 b09d89e04f88e3aff07f6cd6abcad8dd
- SHA1 8b504fc6da8a868d2055c2742355bd7346f71729
- SHA512 70716ad4ad6eda71ae3fe43f15f25d12b1bbf8789950e2e01555dfe0b5507b1f0a45301d9b1556ffeef926110a61765440a6911fa63bc149efdd0a62ca73272a
- SSDEEP 6144:yFK7XjUGFOlGcX3AD9Vnlm725vc1dXmPWeS5+mj8q8GbM1eB1E1xDblKCsEkoNpl:ASzUGFlX+eS0k6TdHN7
- TLSH
  T118F4722D60B719378167707E1B1F90047A30150372AECE587EAC82DD6F4A9295AFBBDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  app.js
- Size 709KB
- SHA256 ac87af0ad294b79db6e1d2b595027d22564d915fd41a9d828797db69ec36c9ad
- MD5 03c970e37dc760716cc3a66f46cfeda2
- SHA1 0ad86dc191aee13fb66edd1e114bd3fdddb76df6
- SHA512 42b62f6ba3d896b92917a21f8244bbfc8bfeb8ece9458dfa11a902857fa3187f1992a74f14e0151ff2dc95b3af3d26f76a3921fb1d8fa5d08d2ac848421b22b9
- SSDEEP 6144:WCDKx5sLrSrxotd53RJoP4xIyoflJz/BhoSxVn4Cx407zkayAWLmHu5o36S4ZzSF:WCDYq/SGtd53RyM6JvRUIANELDR
- TLSH
  T119F4802B21F3103A8177606E2B6FA108763561137549CD483E9CCADC6F59C259AFBBEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  download.py
- Size 2KB
- SHA256 1fa35180e3374828dcf2b7ce2b515cbe16ab41cc49b95964929a6f66c225d232
- MD5 4e35a1f968042ead07c155ede68c9dad
- SHA1 957116eb9404ea5293e07f92763fc01db84415f3
- SHA512 50c5c373893d0c8369b68d8bceca5064ee08984fad7611efeb2f0f9ac8a737dae90096603bfbdcad9df9af48a5347b250e4dbaba376ec2c49aecb590d97f36ad
- TLSH
  T1AC41E9B7D8119C0251B876C4DB301CFBE882232FA555D03BB174AB5C7F32D298192EB5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  engine.js
- Size 6.5MB
- SHA256 c5594d9d51c8ad67cd25175d0d8dd615ea44b11de02d6e41e94b888fc7e75b07
- MD5 8ff8919c2c85a9e5799aa872aca5614e
- SHA1 019c213aed1bd61e1175a03763342584030e9fd2
- SHA512 c3a1b7f238ce6091d72b97eb13ca66aeeb5a270b108ca667a6b7489e70d3742d80cc565adfba10f35332460686c94ecf7508b8c008b3ed7748e30c9b5b27acbf
- SSDEEP 49152:Qw4wJzUZ2b4xemIk7mIkPFi5lBRwXhMwXhXwawtwXh3wXh1wPwXhXwXhnwXhKwX7:hUJU8rjiamzxqNUEkE7
- TLSH
  T19D664CD5FBE4B5374A77B3A4A3AF738D353A187494180840E790406A35B398FE637BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  engine.txt
- Size 6.5MB
- SHA256 c5594d9d51c8ad67cd25175d0d8dd615ea44b11de02d6e41e94b888fc7e75b07
- MD5 8ff8919c2c85a9e5799aa872aca5614e
- SHA1 019c213aed1bd61e1175a03763342584030e9fd2
- SHA512 c3a1b7f238ce6091d72b97eb13ca66aeeb5a270b108ca667a6b7489e70d3742d80cc565adfba10f35332460686c94ecf7508b8c008b3ed7748e30c9b5b27acbf
- SSDEEP 49152:Qw4wJzUZ2b4xemIk7mIkPFi5lBRwXhMwXhXwawtwXh3wXh1wPwXhXwXhnwXhKwX7:hUJU8rjiamzxqNUEkE7
- TLSH
  T19D664CD5FBE4B5374A77B3A4A3AF738D353A187494180840E790406A35B398FE637BA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  engine.wasm
- Size 644KB
- SHA256 0734155c83e493983d1f2ff5b09a4fab6e35a32e9449c7e4e545756439f62d73
- MD5 adf3b772bd5b646d050ce90d58b3db23
- SHA1 83257e7ab17cfc63abcfc7a89a0da9e37668b791
- SHA512 67f518a173180a44a5d93b4d8b9f7d1c5b48e2ab4f96b8eb8936507f4ccf24f9f46da4a2d85d8a9caf4b6e5bd2c39b5ad1cb9897e26be0dd5d41d2a0bbe78414
- SSDEEP 6144:tO/71yepTqeD2Ut+8bLcU3YdQ/Sn4gb3VRGxC5rwY8cnebaZb3QDW5cktesJ8GKK:tOYe06Jj3uQ/EFgC5Ul+fcEewKI2r4
- TLSH
  T12AE40902F61B68AAF400E9770A0CE1376BA79D807064B0B5DB9D25B77CFFC46259A770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  game.css.txt
- Size 48KB
- SHA256 3243ad15c789403122f22ac97671fbd686ca2bd8f829fac49ecea80e10a82e86
- MD5 8ae734d6f533f5a1a5d67ace556cb9b0
- SHA1 ad2ae92c136bfc4da0ee25733e7c3a91e10912ef
- SHA512 66fcf3f1f3739fde58376e25fc9bfe8ece7d4ae1f207edc8201f7aea59956b4fd907850b6a21d6379ff110394adaa423f5317a87258302b98ce19e82f5109417
- SSDEEP 384:k7IlI83H/Vo41slHLi+Y84n+73ztJ4MnP/qYgaTZ8S9rg0Gr+d9CuXZRxdNkVHqC:k7KI83k5m84MFjZ8j0GCXtdNkVf
- TLSH
  T12423D826F441207DAC1BD6397B99F76DB238F450DE034BE9B51341214ADB2FB253A68C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral17 behavioral18
- Target
  new 2.txt
- Size 6.2MB
- SHA256 b123885faa7ded078a27d053cc227f2ce0255822703fb918617cc0c345d9658e
- MD5 963d68bb5c0dbc50e4c35c66ecb475b9
- SHA1 0c850139d06aebbda098a37650ab215d7981db84
- SHA512 b94236a93d9d9c3873af69a6c5e419d709871d126beea02478b5f5952eef40c364c55d518875d97e0362f4bb781b14d2391dda0b1a27574ef2c711aa6c3d4686
- SSDEEP 49152:dJXQw6Mt0vFNL/eqei5Xel5Xe8GTnZeRoXZLECdXZLZ0kucuwXZL3XZLO4uaXZLA:8/PbW00cw04L8/vRZNM
- TLSH
  T10B66E723C740CE767B9793A214DE2186B83C0E24B2D04589BF6CCB6EDFE56436535B89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  strings.json
- Size 6.5MB
- SHA256 1e5b8583e54c7c1fcde069e98ced9251dbbe1a6f1d734021d896ad7e4c1ea21e
- MD5 890bf512a2c605dddbebad2bcad42554
- SHA1 c9ae329bfcbf87ac97e2e2c74c2a0864efd147f8
- SHA512 4660789424486d491a72f4e0f33262ca79750d73ef34e691c2b693d280232813d3ff532dc4a8b0525ba14a415a180d42a3bb4a960597a7a03b52ee1842b6d32a
- SSDEEP 49152:YBXKwQAx49nTR/euisNjExNjESg5ztUXmXZLaQVXZL/yquuuaXZLPXZLgiuQXZLp:3/OQk+WCSRsR/lSo
- TLSH
  T13C66D8ABD310D961B6C3679C32FD2C757859C8A831C005A87F6CCE2A97E10778BB5789
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  unpack_gts.py
- Size 3KB
- SHA256 04f65c8b16de2ec1f5d5710c93b927fbcb597c91a29dc128a836677b797a203a
- MD5 49cbd04cf689d32812399320f7c81002
- SHA1 b3fa908c138d5aefb5d697968201f40820926278
- SHA512 b549e67495be5924864784b8eb8a90585cc97dfb68fb4f6e25fdf1308d63e7ceca9dfd7164c633e31b3fd90ecf5667eeed5b788b766ffbdc545e93a0f2cfea8c
- TLSH
  T113717626AC6524A5C3744D4D9929C141F739F32B7930A246F9EC87287FB1C18C3B99B9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24 behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy