e6c444630af01c1a8e70c3ee2146f0fab5a1f71c9ea9093e36efe11cd242cc5c | Triage™

Login
Reports

Overview

overview

Static

static

attached S...es.exe

windows7_x64

attached S...es.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
attached SOA & some Invoices.r00
Size 2.7MB
Sample210924-ckec4afeg6
SHA256 e6c444630af01c1a8e70c3ee2146f0fab5a1f71c9ea9093e36efe11cd242cc5c
MD5 f6d10c2eeb2936aa864e337cab27300a
SHA1 39dde3665ea8e65202e8e071234fc6174f8aee29
SHA512 f652c71e39e74b95a1517b8c447c19183dce5aa687a2b0cebaf4513b3260f8f57c846e0a2beea08bde541b8761202dea54ce1ca62871262035857fda5d7acfdc
MD5 SHA1 SHA512

Score

10^/10

evasion trojan

Static task

static1

Behavioral task

behavioral1

Sample

attached SOA & some Invoices.exe

Resource

win7v20210408

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

attached SOA & some Invoices.exe

Resource

win10-en-20210920

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  attached SOA & some Invoices.exe
- Size 3.2MB
- SHA256 9af4529917fe99ddec31841af17f0391908bc9b68d387f8ae3a9899cdbcb2315
- MD5 69191806a98abe8a9433a13c213833dd
- SHA1 5cc575c1aff0296b87ab4010d3c1c3f103a0d5b5
- SHA512 4d9446b178d70b11a48f91f47103f8aaefc3463dbe029c1d776535dcf3f94a5de8ca821bd12ec12ccc387f5e3856f8a1995c8bda5b44bb2a8495a66030324768
- MD5 SHA1 SHA512
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2026

Terms | Privacy