090de427b11345aa07f86a2fe91cfd86e36ec491737fa0066b12099f951a3e85 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

Launch_MUL...mp.lnk

windows10-2004-x64

3

Launch_MUL...mp.lnk

windows11-ltsc_2024-x64

3

RUN_LEVELUPDIAG.bat

windows10-2004-x64

3

RUN_LEVELUPDIAG.bat

windows11-ltsc_2024-x64

3

RUN_LEVELUPDIAG.sh

ubuntu-18.04-amd64

1

RUN_LEVELUPDIAG.sh

debian-9-armhf

1

RUN_LEVELUPDIAG.sh

debian-9-mips

1

RUN_LEVELUPDIAG.sh

debian-9-mipsel

1

RUN_ORGO.ps1

windows10-2004-x64

3

RUN_ORGO.ps1

windows11-ltsc_2024-x64

3

RUN_ORGO_UI.bat

windows10-2004-x64

3

RUN_ORGO_UI.bat

windows11-ltsc_2024-x64

3

adapters/diag-step.js

windows10-2004-x64

3

adapters/diag-step.js

windows11-ltsc_2024-x64

3

adapters/n...and.js

windows10-2004-x64

3

adapters/n...and.js

windows11-ltsc_2024-x64

3

browser/te...ing.js

windows10-2004-x64

3

browser/te...ing.js

windows11-ltsc_2024-x64

3

browser/te...ort.js

windows10-2004-x64

3

browser/te...ort.js

windows11-ltsc_2024-x64

3

levels/n00...ity.py

windows10-2004-x64

3

levels/n00...ity.py

windows11-ltsc_2024-x64

3

levels/n01...ext.py

windows10-2004-x64

3

levels/n01...ext.py

windows11-ltsc_2024-x64

3

levels/n02...ory.py

windows10-2004-x64

3

levels/n02...ory.py

windows11-ltsc_2024-x64

3

levels/n03...ene.py

windows10-2004-x64

3

levels/n03...ene.py

windows11-ltsc_2024-x64

3

levels/n04...ery.py

windows10-2004-x64

3

levels/n04...ery.py

windows11-ltsc_2024-x64

3

levels/n05...ons.py

windows10-2004-x64

3

levels/n05...ons.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
baseline_snapshot.zip
Size 165KB
Sample261113-nzxc1aay91
SHA256 090de427b11345aa07f86a2fe91cfd86e36ec491737fa0066b12099f951a3e85
MD5 54268789260a00a93d448f3f5b57f100
SHA1 1a7455dd5639596ced80a4cf7f42c2422c8da729
SHA512 afb61b0b89228524cc8706a66eafbc0b8297e9d6ca5b072dce626a841a79abcac63238ba066698f9a3b058cd4c99deabffd1645689a1fc9511896b69102cafbf
SSDEEP 3072:lRkp3P9+1ZcrOwua/citokx8RaOjMLdzrPenkeScPNwNfhf72+/a8WD9z:/kz+e3lEit5YoLdfukV6Nchf7f/a8WD9
TLSH
T139F3F124DA2B0597D6A6A0702A2FDC52F85DE7C9D955B0DF8C5782DB6F221E04BCE00B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Static task

static1

Behavioral task

behavioral1

Sample

Launch_MULTiSmartDump.lnk

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

Launch_MULTiSmartDump.lnk

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

RUN_LEVELUPDIAG.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

RUN_LEVELUPDIAG.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

RUN_LEVELUPDIAG.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

RUN_LEVELUPDIAG.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

RUN_LEVELUPDIAG.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

RUN_LEVELUPDIAG.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

RUN_ORGO.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

RUN_ORGO.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

RUN_ORGO_UI.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

RUN_ORGO_UI.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

adapters/diag-step.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

adapters/diag-step.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

adapters/npm-command.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

adapters/npm-command.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

browser/tests/login-pacing.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

browser/tests/login-pacing.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

browser/tests/support.js

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

browser/tests/support.js

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

levels/n00_diagnostic_integrity.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

levels/n00_diagnostic_integrity.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

levels/n01_target_context.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

levels/n01_target_context.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

levels/n02_repository_inventory.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

levels/n02_repository_inventory.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

levels/n03_repository_hygiene.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

levels/n03_repository_hygiene.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

levels/n04_tooling_discovery.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

levels/n04_tooling_discovery.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

levels/n05_declared_validations.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

levels/n05_declared_validations.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  Launch_MULTiSmartDump.lnk
- Size 1KB
- SHA256 597cb480ff60a1169b72f50df355256fefb23e5bcc03b382b1be07428b14821b
- MD5 a30e358fa27b45588a5476c123b5d870
- SHA1 0a087bb1273cd2ccd1d0eddc4f74d69d93bb34c8
- SHA512 17609510b7fc64333eb417e5b4278b48e41899acb7ff9109fa911d5137a1967d54d7761f5283a4d841e7a547cf026c12178fab150b217d36e3113d3157d10bc0
- TLSH
  T19E210D23463D2716D3F73273176650410B33B667B665690E8600520E4CA6EB07C6932B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  RUN_LEVELUPDIAG.bat
- Size 259B
- SHA256 e97de4c6b68004e04961cb94bc1c31db4effeed7c7e87d28c4e1b088d2214811
- MD5 5b21e9e524990b8244b1d6fa2a6676df
- SHA1 fc08a3382934c993bc6e8a663ef8b1f2ec8c92a9
- SHA512 67825da5d8a03b280d575f8e26b8df68633bc130092f104381449476562885cf37a3696ca7742e3a80e38db0155baf4034093c3b36545ad20567b4f35922556b
- TLSH
  T14ED05B0C46581DF6E007D81D52448410D715CEE8F647E9EC1C9C174816DE9D64D43354
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  RUN_LEVELUPDIAG.sh
- Size 247B
- SHA256 ceb05a7c06da595cd4a386789edbb1ec48c513ab4d3074f693586ad34f9bbe6f
- MD5 a9f5595ad08a97496262e36674b90566
- SHA1 50552ff84e647b870b2d9f6f9f71459093862ab9
- SHA512 ee06d9c5c59263e50deee566b5189639abe29155b178f9367a370430a69e7062a2cae7dec86ee7bf84142f7a663fa0ddc8358bcb6058c6c68c8c90324839aece
- TLSH
  T1E4D0A736EA3546FC8141D27CB2290000C7F614ECD940646C6940BBECF6B4ED5E8D3A34
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  RUN_ORGO.ps1
- Size 683B
- SHA256 de617e9ee5d4da3e3e2882f6fe6b051449b9e143a03f86be5fbca1ab038afdee
- MD5 275109c18d301d7a65635eb0e9d4e748
- SHA1 0f556c7e63bfcb3c6f5d5df806fd5265d4c23b62
- SHA512 dad56bcf35a96ff0b574e3757b30eb3455602dd7287a12ae0ab8307a17d066f21e3fea3365b8bb5728d6221007f5c6011fed2119833c546072d9690df752f8b8
- TLSH
  T14101F41633E602AF4986685BA8E38348B22D38F624CB9AECC41671C41097C74DAB7009
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  RUN_ORGO_UI.bat
- Size 160B
- SHA256 cada12bd6dc8d9a06a77b99c6d64459033d906182119f510af61811a1084af6f
- MD5 45edb4a99d71fc6fb936c0c40446c113
- SHA1 34a8b1533bf24aadd412ff4b56ecc23f98d4c129
- SHA512 08cb5f2fdeb2ea1a0835a308ff6d8e54eb27affab3f2e4afd438c9d979f93b3159e42e0ca1f3d150150f2960f8def8d23981bb77ee3cfc6453dea15102a78535
- TLSH
  T1B9C080169177233A72F548056F8D1558752C46A55155F8943565711C2187C5B9C8E091
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  adapters/diag-step.mjs
- Size 1KB
- SHA256 6641c4f4a10f651e03750385db62d02ea67a18b89094fd980490f196c9806f1f
- MD5 a65757552600a2f5c7222a951612ee8e
- SHA1 b4ed08d9ba326ea571e9a85f327d27c457ebc797
- SHA512 d5cefaaff30411e9808a0099cbdd1d6a8f270967648166d8003240c643117f16aca085d348d914e81a9483b7e8aab9258a383c3ab653e9ba2f2efe0d85dfbf3f
- TLSH
  T1E231554646EB4F7902F60A869800DA338A73D500E75BF477D55DCF15AFC401C6A4EB97
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  adapters/npm-command.mjs
- Size 1KB
- SHA256 1a64fde9a2d5b6530ef0550a6461e4a0bb3fe4e7b6b32890f2846c4cad28dd35
- MD5 5a783bc0795c5bb9363e00b9ebee043a
- SHA1 4d93f5c59f04054be9a1340f6c6c6a3715aa1d08
- SHA512 48be77be794af7e1d24f6b39abc7f4afdebf0ce6657fe8d853f810e158e69424f274f77c4258bc85179843292fd9737c850d7132a325ed58ac639d92ca6b1051
- TLSH
  T1C241766476F956668543AE613113D1028FE680A337D4CFA0710C47E62FF02B68A7DB9B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  browser/tests/login-pacing.ts
- Size 347B
- SHA256 da7ab8b56c634fcbb2c842143055cd91fb6375198c1b978ee2eb68bf3db5a651
- MD5 66af89923d930448abefb0a81899a8ac
- SHA1 f00c5466518af3ea8696cefca5d03d6fe87d615b
- SHA512 e3bb4dcaeb83766d4911c2c8d9979f08ec7b90ae9bb3049e2fced727d3b1299982dcb8ae40c2488d5cd48b248a52df371ae7ab1ddc97db01a4c43bbe78585435
- TLSH
  T18BE0C609223E213284246236C738900323FEC3444832CA2CF30E0740BABC8AEB00E642
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  browser/tests/support.ts
- Size 4KB
- SHA256 54f93e019f6cf550985cf530c88c0c0e7edfa1e469b9fdcfd9f80b7a57b1e76b
- MD5 f83d590c9b4872f0de3564e48abe1acf
- SHA1 dc23f3a6620fe3bca45870567bf92bd30d99860f
- SHA512 c1b94659139c756550b66ddec9206b60616f803a68c88023c03ae5c4e1771c5ec04422c18709c099670ff495cc9675424d94a08ae952fe1d6f493a478dfa8c1d
- SSDEEP 96:fIycv1/jtdKJ0ALcemcdf5gwXKPfqmKpzbKkKSR9KLFKAVdRUFnBoE/s9KH3fKXn:kALbmcdBguCFKArRUF625q
- TLSH
  T1D0A13445A87A3526C6B270EAF493F8A61714C4083389C3B1FA8E51501E9E41AFE67F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  levels/n00_diagnostic_integrity.py
- Size 1KB
- SHA256 5c9426bfa1b8ba98add2ceb02de565dadbd9734de2947ef11fadf670818ead80
- MD5 c5631abe0d6b2443785dd49cb70997f5
- SHA1 ab973fd86e0a2fa78bae66ec433f79f4e6c16ff0
- SHA512 80cb78b01a7c508dd31dff13a9410e018ffaab03d73c195525ed87c72f053bd429e0680f3b0e89b5ca62e2f8113518350c36c348d7fbec3b7ba504a7728dc8f6
- TLSH
  T1CA31FE79FD6862ABAF55B0EC781404912F320583151272BAB96D43EC3B9D8360DB3975
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  levels/n01_target_context.py
- Size 2KB
- SHA256 f310ecb34ffc573659a22d09a956c87e50f9e4683f44d893f4ad23ff01464acc
- MD5 32ceeec39a840af68a58ac06c49641e5
- SHA1 81b5321d3220fba5765943ac1ca02819357283cc
- SHA512 705d0f7a68fbfc472600c4d0c7ccbf710e5aca4acc20e5e30530e64ea4f81ed11cad49d5f93a5a889b04c5b04dd2eb2b66d50c3284f6e520c1e247796b51b720
- TLSH
  T1EA4151A29FB92BF347A3E6CD7D11C402673583828F45A16E3C0C5BD06BED077095329A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  levels/n02_repository_inventory.py
- Size 2KB
- SHA256 b08685a674ec5fa647984470127a65b4c3caff84177a5f050257cd6cb7d0ae95
- MD5 48716c14cd204f7bbf8cabe40a813b04
- SHA1 cf10a7564ba967e39caf466770ab2d7040de6c66
- SHA512 3e5ceb8e2f2547a5524023817cc39b89b904d8318d1dc2a5bc22df74c9a59da05b2528bdb8cdeac07fdb9a618dae878c5e400b80a3d5e93f9764450a3feb34de
- TLSH
  T11C4175248A8688CEDFE6D2CC3B6A0907B377A5E30D413561B87E975057EF079056D23B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  levels/n03_repository_hygiene.py
- Size 1KB
- SHA256 df66597f468c798f42e50270af823566bf92111d1533151a335c5b1c3ddadcf6
- MD5 21fc0fd1665bdc3496e0fbed7edf8492
- SHA1 25450d59193560e604a6401f8e7833836a40e373
- SHA512 c6110eaa7b1e36c7ef14b1e2d6e9f02971e2843e05db96b655469582ca63ae0f1c0a3ef0d755d9a65f26a58415bfb17ee2d17bb15bde96adfe42ab04c70622e7
- TLSH
  T1E541304684A52C6B9323A2CC6DC675A0670E44870C8820B2358D5B987BEB5F509B7AE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  levels/n04_tooling_discovery.py
- Size 2KB
- SHA256 3cbaa8ec24d3502b06889ab31bbcf7695e3d930363aea8b6c94c9d02c739f10d
- MD5 5e3cb33089969032ad52d55e2a100af4
- SHA1 592bb4e5112615c5dc308455b5d19b051cc9986c
- SHA512 6e0a46a5241501d40f0c3b154b49f6850310114d96be4c9016bd31c854c5df7f97704d085989769ea26ded4b6e551c3aff2c67a862353356ebeedad5019364fc
- TLSH
  T1054194D3C1B7294BAB90C2DD2C605A003F3295524A1421157C7C9E683B9D5A335F96F8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  levels/n05_declared_validations.py
- Size 2KB
- SHA256 3ce0f5fec69a9e87b7d664d25f7bc530374519cbbf277f484c6fce5a34dfa543
- MD5 abbe098354726f2704666a4e35c39701
- SHA1 11b5549e33256c4313d86aa3f6c84fec4f14cb8d
- SHA512 c9975a774905d9f7b5e66bcb82f13d47bcee5d5b9be617d3d84cde4c19877c169dc95388f1c1b686c1fff64935bd0134a086fe3dcfaff688945f1c20635fc0a8
- TLSH
  T1FA5100FB4AE854A14F5255F425E186C313E66209910165D47CCD03E43BDCBD3E772AAF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy