eef75a3801c7541ced20b46776adafe981cf1a885d913f4a66a7455b7d1c481d | Triage™

Login
Reports

Overview

overview

3

Static

static

1

bk_client-linux-arm64

ubuntu-18.04-amd64

bk_client-linux-arm64

debian-9-armhf

bk_client-linux-arm64

debian-9-mips

bk_client-linux-arm64

debian-9-mipsel

bk_client-...x86_64

ubuntu-18.04-amd64

1

bk_client-macos-arm64

macos-10.15-amd64

1

bk_client-...x86_64

macos-10.15-amd64

1

bk_client-...64.exe

windows10-2004-x64

bk_client-...64.exe

windows11-ltsc_2024-x64

bk_client-...64.exe

windows10-2004-x64

3

bk_client-...64.exe

windows10-2004-x64

3

bk_client-...64.exe

windows11-ltsc_2024-x64

3

tools/bk_m...t__.py

windows10-2004-x64

3

tools/bk_m...t__.py

windows11-ltsc_2024-x64

3

tools/bk_m...ter.py

ubuntu-18.04-amd64

3

tools/bk_m...ter.py

debian-9-armhf

3

tools/bk_m...ter.py

debian-9-mips

3

tools/bk_m...ter.py

debian-9-mipsel

3

tools/bk_m...ore.py

ubuntu-18.04-amd64

3

tools/bk_m...ore.py

debian-9-armhf

3

tools/bk_m...ore.py

debian-9-mips

3

tools/bk_m...ore.py

debian-9-mipsel

3

tools/bk_m...t__.py

windows10-2004-x64

3

tools/bk_m...t__.py

windows11-ltsc_2024-x64

3

tools/bk_m...ase.py

windows10-2004-x64

3

tools/bk_m...ase.py

windows11-ltsc_2024-x64

3

tools/bk_m...ile.py

windows10-2004-x64

3

tools/bk_m...ile.py

windows11-ltsc_2024-x64

3

tools/bk_m...aph.py

windows10-2004-x64

3

tools/bk_m...aph.py

windows11-ltsc_2024-x64

3

tools/bk_m...sal.py

windows10-2004-x64

3

tools/bk_m...sal.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
bk_client.zip
Size 25.6MB
Sample261113-tbe2psds71
SHA256 eef75a3801c7541ced20b46776adafe981cf1a885d913f4a66a7455b7d1c481d
MD5 20f45538fbc3b0e4d69af00c878cd5ab
SHA1 70efae88f665c7104cbb9595fdc207a0d79702b8
SHA512 3df40e03c57948a716d06dbacd765092455038916610db67cf61aeb18c4cdc9137fd455dc13d9d24d6d67b779b08406fc9f2b8ede496d6a05c9d4e4942656b84
SSDEEP 393216:kpxW9vKLa16mkUUKmc/HWUIsFM41lnYGygGpuQABmv6XWVDfYD9eEnVSbzCxbZyx:hPrcc/bLL/4AA9VwBpA+VPnCK8
TLSH
T14947336FD2349609A58BC87ABDC3A4D473A6C60480EAC89150C973554B5EF731EE3F2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution linux macos

Static task

static1

Behavioral task

behavioral1

Sample

bk_client-linux-arm64

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

bk_client-linux-arm64

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

bk_client-linux-arm64

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

bk_client-linux-arm64

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

bk_client-linux-x86_64

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

bk_client-macos-arm64

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

bk_client-macos-x86_64

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

bk_client-windows-arm64.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

bk_client-windows-arm64.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

bk_client-windows-x86_64.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

bk_client-windows7-x86_64.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

bk_client-windows7-x86_64.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

tools/bk_mtlx/__init__.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

tools/bk_mtlx/__init__.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

tools/bk_mtlx/blender_materialx_exporter.py

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

tools/bk_mtlx/blender_materialx_exporter.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

tools/bk_mtlx/blender_materialx_exporter.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

tools/bk_mtlx/blender_materialx_exporter.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

tools/bk_mtlx/materialx_library_core.py

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

tools/bk_mtlx/materialx_library_core.py

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

tools/bk_mtlx/materialx_library_core.py

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

tools/bk_mtlx/materialx_library_core.py

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

tools/bk_mtlx/mtlxutils/__init__.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

tools/bk_mtlx/mtlxutils/__init__.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

tools/bk_mtlx/mtlxutils/mxbase.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

tools/bk_mtlx/mtlxutils/mxbase.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

tools/bk_mtlx/mtlxutils/mxfile.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

tools/bk_mtlx/mtlxutils/mxfile.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

tools/bk_mtlx/mtlxutils/mxnodegraph.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

tools/bk_mtlx/mtlxutils/mxnodegraph.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

tools/bk_mtlx/mtlxutils/mxtraversal.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

tools/bk_mtlx/mtlxutils/mxtraversal.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  bk_client-linux-arm64
- Size 10.0MB
- SHA256 b281db67ee3f7418bb1ac26d63a1e38bd3abca9b3832eaf294b3867ded4ba58c
- MD5 8b0f46505acc7a8e519251e7de008f1f
- SHA1 a4d722f403fdce282778d71a3d4505db066e2494
- SHA512 39c1344d03b75f78a99f83632844ad10eaff39ef7307fdc8aead07ae0ca641912c2a56741e71fb1820fe91da58f87b206a250957f047ee0ae1157dd2153361f7
- SSDEEP 98304:h6/GMFezXcy1PVug24ztqYJYVUc0U/8CMj1tEE7:wuMFezj1Ug2XvVz/IjT97
- TLSH
  T131B66D65FC1C6462D6CA7A741F665244723CB8494B82C723365CBB3CABF37988F27261
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  bk_client-linux-x86_64
- Size 10.8MB
- SHA256 7accf00638f5a5842996e010939876125331e3aa37591a95efaa5200d5ca4980
- MD5 2983c23bc9009f4ef01007001ce9fa34
- SHA1 20700cf747d2a0eabdcd142426ff3f9635abdbd4
- SHA512 9dd9da7268386f89ae15eac678fc5adb3c42eb93baa5082c1a5a3e8f5aea49f23cf41871665f79d1ad07f5ed07e607fae12703aa28285e07342f4690dea20fff
- SSDEEP 98304:O7T317a4lZbmrSAlAVQqszigC00+QpDqLvZMNvDN68lD7Fi48C4ZmzIgji+Qc8Qg:KYYOzoszR0+yD8gEm35UJ
- TLSH
  T15EB63903ED9515A5C1AED2308A769113BB317C8A4B3027D73B9CF6282F77BD4A6B9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  bk_client-macos-arm64
- Size 8.2MB
- SHA256 cb70b3b6cc3e9e24ca708d4a8aa5ea38729d5dfd35ad540eb8d1e0db6e212522
- MD5 3808cceafcd814d32ce7b42e851217af
- SHA1 dd0b5e21cddf91f4145c4e3a8cf2814919d7869d
- SHA512 69b982cf08339e2029a5487cd1f42050ad3f91fecf88f88e2402e077c33098318693fed9edcf709403d3be3b2a8d90164cce4d741d9ed00238ed2818e2461acb
- SSDEEP 49152:36QM8xBOgYKCeaKQrzLVuQJCS6e5q2dbyoLaACypD6U4hHdEBSm8p81ZN7m5Er0U:3ZM8jOPtXrzLcfeNamgh9E6pREr0
- TLSH
  T120865C95FC1D2432D6CA79301BA662857239AC495F91C7227A0CB73CAFF27948F32761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  bk_client-macos-x86_64
- Size 8.9MB
- SHA256 dce065a481847d2605297ea4b4e9e9628de7ab54dd1bd4e3938323b61444c6c0
- MD5 caa9f2c9ac301b2f66e1de25132cd762
- SHA1 b664ac5c0f631efc0baf72534035aae9f8746784
- SHA512 27aa5dd328b079a5b311ee7eb346878f2cd42d3a4bab80db00fe3cc899ad0d7eba4744b21d347aa98036b8e0321194f814a3671ef52b7d769100d912b5368b4d
- SSDEEP 98304:UKCrndulukUQcLbbY3HrYR0AdVtzhJ0J26ImnShx2rfTezGHQBtM8B4gOHdEPi1r:d8I8QYYbMhzhD
- TLSH
  T115964B17ECA514F9C1AED13485A29153BA727C4A4B3023D33B9CF6342F36BD06AB9B54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  bk_client-windows-arm64.exe
- Size 8.3MB
- SHA256 fca341b43c6587085c13bff8eee458fbb81cb4af7ddf60c8a20ee3a0a6194fe0
- MD5 ad30ec5c38c2154782b6d51a91d777a0
- SHA1 d9c0a9da7f33e1510c99779bce3fee3cb192fa65
- SHA512 84d9482811c731c56568fa28b6ac6ae72d80b346e52dc43872ac78b380448b65569fcefc57118e86e57fcab09c532c52928a1a20c0e5d28d1de3d0b6edc7e524
- SSDEEP 49152:l4zmwnt0h0EkuurVgDcOK1YifAAbh+4WiTrCNVJ1o2QpCa6uCb3vxcDMIE+ZGL7S:Szmwnt0CEtsgDcOofXh8ercdvDIUE
- TLSH
  T113965A99BC1D64D2D6DAB5342F6201847728AC594F42D3237A1CBB7CEFF27448F26262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  bk_client-windows-x86_64.exe
- Size 9.1MB
- SHA256 a3550a17fcacd9cec8d5823b0f8ee74d706d0c5a5b9b75c89ebc4a54e218ac7a
- MD5 d8534bfc0b1c3c6cbd72028ab2093c44
- SHA1 ea4db52346f65b2fe87a64b28aa9b00cbd984ade
- SHA512 47a8f94c1e322dee4f52cf93cd106738988a44f01b48b618f138aed4e40ea3b2f91f313b447d105cb4367fdbe13ae53ace4baa222e4fdba67576869a506a7dca
- SSDEEP 98304:vwILn5pawqTuOjo6u3aH5glFQ9ohd8zEY:NL2TXy3aHilRY
- TLSH
  T1C1A63903ECA514E9C1AED1748566A513BB717C8A0B3123DB3B5CB6242F37BD0AEB9714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10
- Target
  bk_client-windows7-x86_64.exe
- Size 7.1MB
- SHA256 8cc23ec8a9c33899def338b152f8a9522f52981b47eff9caf8c64fe6d3951746
- MD5 72a56eedded601760581ffebe9d3a076
- SHA1 4e1cd79ba9c62d971892fa59583588e324fbc65a
- SHA512 f7c588acc3bdcfda185b15942cd715cc93b5f6cea943797dd0db6d365e0cc09f45812885c877ccbc504e0901e5c0ee4b14354a433b23066e9eed4e181a6b8dc2
- SSDEEP 49152:QsBfKaDfBj87VKrb/TfvO90d7HjmAFd4A64nsfJJ02pB+x0xCvvw0V4GhSNciOPk:el7VpnzxA5P84RosFCPEayM
- TLSH
  T15A762907F89151A9C1EAD1308A669213BA717C9A4B3073D33B5CF7B82F32BD46A79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  tools/bk_mtlx/__init__.py
- Size 698B
- SHA256 7d10b9fed5007157cddb726c4174f18c2cd89fdc2e7d3c787c9673f67e3c2225
- MD5 27a620b2e93b4e9bdeb7e6cd380e3885
- SHA1 03d53c764a9a7c41890825d540396f91539d2095
- SHA512 816637e592cc6ed37690b31c64b3b1a298edad8dedbb3d0625a7b0e46afc92e6667799d47ce884e9ca24929ad809bb633f8b3cc7f5e05eb384fdfcc4d762ccbe
- TLSH
  T17001FE790B55733F48E1845AAA18D6E34B5DD01F671B40E8986D019FA183052E3FE7A0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  tools/bk_mtlx/blender_materialx_exporter.py
- Size 142KB
- SHA256 74fc23cf631eb8160346b4bed09cb3560a55878bfb0f8097005b99a3cc2380a7
- MD5 f3f4a54251448ed1c96fa91744340ac0
- SHA1 6fbf8af3d5bcef561f203aef5cd30a9b5a8138c3
- SHA512 f08e7e084d04e3d8ba224ce832d5e3bd97d32b56cb55ff15c1329386708aab68c1c5956a08910b924119f25df1c55cf3ea81a13782a6802fdbc9864dfacc51e8
- SSDEEP 3072:R1M2W1uUfVmDdbyzbH54ex2A82fzAVoI5FU4Atw:HM2W1MdbypC
- TLSH
  T14CE3932AC5666C1B42C345653CDA8C03B62690775F883E757B9C422C1F4E52E93BEBCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  tools/bk_mtlx/materialx_library_core.py
- Size 76KB
- SHA256 b5e8e9e756293f4f9d7cba70d87ead9403db396eaf25dc25597d461209def976
- MD5 f5daae3aa1aa3a1f52d563accb6907a7
- SHA1 9046250bfa5aa640cbf9e98e63a1f9b71cd17604
- SHA512 ce15a7ecbe70df382a2c5810f59b5f3dd902078ab2b0117091532d52ae55bd0716a39081c9eae741536066fd46e083dec63a783c77a96d172d92c66b3e2c5f80
- SSDEEP 768:duKZI7q8S1fAEYyd9PptT0sBMNy/hKS0PJLuoJK/b+kEd67+I7+N5:AKu7qjUyXsy/hKS0xLuoM/b+kEdW+Q+r
- TLSH
  T18D73B755E501585B8BD384FA28D7E00365AAEC43560D19B8B9FC406C1F82E6AA3F7FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  tools/bk_mtlx/mtlxutils/__init__.py
- Size 73B
- SHA256 7678d0f0c467c88e0bd38c8ea38b99dee53a49cb7a5bd6a4d99d19d04b742dcf
- MD5 8f33e22b45126e2e7abe3d6d0a526b06
- SHA1 68174055312ce24a4c56a614f102582a1adbdb9e
- SHA512 7cfeb0c7d9c8322c7dd42b9871767ffc31d123ffcd8422aac98ff4fb4bdfbed8302018f393a154743b12c459b426586bbd167396e5f3ff700a7622f96905fed8
- TLSH
  T111A0223002E2300B0F23F2000208C0A282303A0B02B203FE002C02BF3C8A0B0800C22C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  tools/bk_mtlx/mtlxutils/mxbase.py
- Size 517B
- SHA256 4a1fef90987bb86c0279561a8bd3c1f3570220f684e115f68819fae5b0c809c8
- MD5 74d4167c4002dc46e4746596402c911c
- SHA1 5de15d3583421a64cea21e9952ae94f29a8174e3
- SHA512 5eaaee20dab77b73ae5a685e9c3aa1887d59226c6076d56b947ecdabec71ed7ba1874681a041c6b832d78155841e404b184921a59942a24d2e91750a02c350b0
- TLSH
  T1D2F027D1A486C622C015BA194E87D0481FA1BE9BE34A1AF5B86D40603BC22CC83793BA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  tools/bk_mtlx/mtlxutils/mxfile.py
- Size 3KB
- SHA256 46ea8d2a6a1f5e27ce6ff72f2ff54c725befff122e8df9462c0a79ac8f7fc53c
- MD5 475ebbd564a021e06f68030787ea8659
- SHA1 369bd2a05fcc19e773c83e77ee1752e3550026e3
- SHA512 ecf29f91f47e5681dab6cbb63d2efa868651f2769af641bac6301ba59f794b64ce86c813ea0893d49051b43c846c3aae9027c3b88c2ad754f1990e419f5d26ce
- TLSH
  T159610027E2161E067BE7857A91A7C84E2D52842F62133D317CDE814C2F63E9C90FB6B0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  tools/bk_mtlx/mtlxutils/mxnodegraph.py
- Size 12KB
- SHA256 7f84563971a1f0254e33a992aac7689c5ebb549f1333d696f6d3137a2f05cad2
- MD5 5cc45c3e101745250dfba49fa3e3ab6b
- SHA1 cfd3b35cdc17020cc6c1d5515dccd6c840cd85aa
- SHA512 08d8f4d9f9dbcb6dd980b59d526cf629fbb3af80240faf00f6fc13be84b9715925cecfc0a0050c3dc9627edd26abf196387e00caa66f29799f3c589ecdbcf174
- SSDEEP 96:drW+KgD+zmlcI9BZqGNF0B6JNjF0BreR/F0grsSF0xFbmUaw3yp0Mn6PjdpUkN+S:dtixnPn8YjQ48lxSzzPcFuJwmTSVuZqq
- TLSH
  T1F4422F2A69033E6E7A03253459D39A4669D4A03701870DBCF8AC8D712F86ED1E37A7DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  tools/bk_mtlx/mtlxutils/mxtraversal.py
- Size 35KB
- SHA256 d26475cf559cc31594772cc55857cd2fc7150dbd3dfb9ea7afa8add6409ea397
- MD5 8ff1c028e7374064ad73e4453bf9002a
- SHA1 cd39ff9ce7f7168bffa5741437b27036660df27c
- SHA512 9a806494c661d310ffb3e14fd14066e33924ba0ef7d4f0d294be4e380dfeb17c421b017ace2df3995fb5c7e309906d64c2f5862eb787bf7465006894e92df2b9
- SSDEEP 384:CAX2f38UKliTc5D48+W3doeaH31Cfmq3CrXtGn0w6A:C8UKdDp+moeaHUc4n0w6A
- TLSH
  T119F26416F8493A5592074A3D64D7A00B66169C130207297CF9EC88592F27F92E2F7FFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Python

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy