Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

background...st.exe

windows10-2004-x64

1

bash.exe

windows10-2004-x64

1

bcdboot.exe

windows10-2004-x64

1

bcdedit.exe

windows10-2004-x64

1

bdeunlock.exe

windows10-2004-x64

1

bitsadmin.exe

windows10-2004-x64

1

bootim.exe

windows10-2004-x64

1

bootsect.exe

windows10-2004-x64

1

bridgeunattend.exe

windows10-2004-x64

1

browser_broker.exe

windows10-2004-x64

1

browserexport.exe

windows10-2004-x64

1

bthudtask.exe

windows10-2004-x64

1

cacls.exe

windows10-2004-x64

1

calc.exe

windows10-2004-x64

1

certreq.exe

windows10-2004-x64

3

certutil.exe

windows10-2004-x64

1

changepk.exe

windows10-2004-x64

1

charmap.exe

windows10-2004-x64

1

chkdsk.exe

windows10-2004-x64

1

chkntfs.exe

windows10-2004-x64

1

choice.exe

windows10-2004-x64

1

cipher.exe

windows10-2004-x64

1

cleanmgr.exe

windows10-2004-x64

1

cliconfg.exe

windows10-2004-x64

1

clip.exe

windows10-2004-x64

1

cmd.exe

windows10-2004-x64

1

cmdkey.exe

windows10-2004-x64

1

cmdl32.exe

windows10-2004-x64

1

cmmon32.exe

windows10-2004-x64

1

cmstp.exe

windows10-2004-x64

1

cofire.exe

windows10-2004-x64

1

csrss.sys

windows10-2004-x64

1

Resubmissions

09/07/2024, 13:39

240709-qydwdayanf 7

09/07/2024, 07:52

240709-jqdr3swdle 6

09/07/2024, 06:42

240709-hgkzcs1bjl 5

09/07/2024, 06:34

240709-hb2d6azhjn 3

09/07/2024, 05:47

240709-ggxgqa1crh 4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    application.zip

  • Size

    199.1MB

  • Sample

    240709-hb2d6azhjn

  • MD5

    3ff2cfb0d40a8d203dbc8e7e213abfd1

  • SHA1

    51e29901a0e5f7e7c93b22ef07f9ecbcf038fcea

  • SHA256

    9df41ebe1a2c61bbc382a85a7788e127e4dafada4955a1b6c3dfcaf460bd714f

  • SHA512

    a8ca689dce70cad02d3a438fab918b143699eb27c22f7fa40418ea26b154f93db4f99b4611a597720bc0c72933f458c98e3793af800e991ecc783a21da4c466a

  • SSDEEP

    6291456:UOriWJ0ns9w5OrSTi87nm1o/h6aXXRhevjJiEmRA:UOri2qnmwHhhXilixK

Score
3/10

Malware Config

Targets

    • Target

      backgroundTaskHost.exe

    • Size

      41KB

    • MD5

      0130864049ea1deded8df354dafca2ae

    • SHA1

      e3ce7157dc3334a1d95f2aad137d9ca66160b71c

    • SHA256

      4c8915e07be1904a3bc02e4f8db0a80bb932ce610d97eabb9151b4e51f449980

    • SHA512

      6006ffc4ce93e59a6004f6207bc28ee9b64594e30161bfd91ead1ab3d86d1a1ec72890bd38f26a060144d2ece5583f950f9e22fe44a4b06e14f1fb3b4259b6f5

    • SSDEEP

      384:g4uJlxkv2cHwXDWKGWXDBRJA2LCFYj9R9zLm5:rScHwXhP1PBQYj/9zA

    Score
    1/10
    behavioral1

    • Target

      bash.exe

    • Size

      132KB

    • MD5

      eb5125a7992dbc1abf82391cd0a02671

    • SHA1

      9d28610e0827e9283a94fcff8dcec638f870849b

    • SHA256

      52d3874427ae0a4904bd65ab97af74155896b00ccb25f0f8362861f9a2065445

    • SHA512

      dff30d0bb0d992950886df660d55408cdc448b7dfda69881d9b36b7387fee2686f17fc09c8bee3f5037489a8af4dd366686746c9fec402095c7a6e5597abb31c

    • SSDEEP

      1536:nF7QQfz5VPSOhXRk+woV4io4CoHVpBxtee6i9EZ4U5FNCsyl1qcAuqVYlH08ep33:FFSOXVwoL093s40qqG3Rdj

    Score
    1/10
    behavioral2

    • Target

      bcdboot.exe

    • Size

      260KB

    • MD5

      fafe59ccb8834b0235988d9ca110bdd0

    • SHA1

      5a7e7ac0fe95a2d16734e1773ea40b0dbfe2e692

    • SHA256

      54f7fa09e805f9b1ddd36069a7169d9d1e58f4a2206e8c69eb072bb34c90c4ee

    • SHA512

      4cf4cb629e42e3f6abc545b03d3974994087cc23d8b7855c8130f5f05a8c478cf39592751482d1adf6d65573868b8c4388600d704a3582e2e30720b1fdf68d97

    • SSDEEP

      3072:vm0YrURvhjckbPeGQgsq+MWMdJgpDOm+Q6FeAkrR9TAU502mgCF5uzwlm:vSrS5jc+fs7MdyJOm+Q6FeAkcczw

    Score
    1/10
    behavioral3

    • Target

      bcdedit.exe

    • Size

      489KB

    • MD5

      9351315cf99b7d3282d455a480e4309d

    • SHA1

      c38edd89bfc8cbc8ffa6512d78f5f8fd7e666ce2

    • SHA256

      dac99fae6da15421f9d61bbd3cc18d459177d5a8169671e572948f0cea8318dd

    • SHA512

      e8ffc0e657aff9186c768b6a410baf4342813a14dcc7d21d33727f1cffbf258e8b0a8e76042e678a92d5a29a1fa5759c8f9f9157f1a7df4bc1357b91d38c1c2e

    • SSDEEP

      3072:sBzD0KM7tMuSthiacYXLRf708VbW1zNjlJafASifZaWWHzKi0G7N1fjJU8q0gntZ:sBzoKM7tahzLdo8hGzNZ4HoZC5f7cdp

    Score
    1/10
    behavioral4

    • Target

      bdeunlock.exe

    • Size

      312KB

    • MD5

      a4fccb35a09c90e7e0cd2a789aed9e2b

    • SHA1

      61e11e564fa6239ddd9529b35bd1087a20503dc1

    • SHA256

      f52e19ba4da44ab3ca36ffd388a8af158e15d48351f0dafd9edc5394f78c2fc0

    • SHA512

      85abd2f6cdd9cf567d154e8ca5bc18c6a28f5c46af9387b448d9bc815a22d121eee5673cdd9c54cd50b897c977a31cd8eb715ee8b320e5fa01ecdc4f99dfa5b7

    • SSDEEP

      6144:Rs+fwkS6CbJkDyVRXvaD5FaWQllgRbPD/pyul933EZGzkJT/NeB8wZ2Vs7nyatGJ:Rs+fwkJCbJgyVR/aD50WQllgRbr/4u94

    Score
    1/10
    behavioral5

    • Target

      bitsadmin.exe

    • Size

      232KB

    • MD5

      c62b04c717a3ccf25d0c44ba97c2a6aa

    • SHA1

      650e20291e029626e76551fb8e92da75fbb1eec5

    • SHA256

      7c2365b752f8d2708c737bc34260d5f3d1568fdd2e12892d3ca3e4952add0230

    • SHA512

      ae8c403cd2733e610c27aa77ed2e8281219f547dfa85f4e305d9cff4e98c20b7793b06dcdffcc60a6bf17b124e0b3301c86357daae862628de0feb4ba4208cfd

    • SSDEEP

      6144:wje00Ti+0VrfulK78oTK+JK0v/VysZ6UT:wq/W+0VrfulKYqj

    Score
    1/10
    behavioral6

    • Target

      bootim.exe

    • Size

      48KB

    • MD5

      7bc9fc5bd560b3a28f32372393f94c44

    • SHA1

      4d2ecf1eeefc5cd161dcd4a8160cb5b35bf932f9

    • SHA256

      b5390d893f01239dd03a331e882c570277a7d6d82c3ff7dc07391401160644e6

    • SHA512

      a344e5a876e060dd71f2899a6ce23e58d49ba9a5c0c4390e2a335eed8fe105ffdb07c48980b85e97624503889937d734e9c99db8e5606f24398b6ff7e34d04ee

    • SSDEEP

      768:B9sPpumPNYqamVO/hnGNeoMU12ETAAR2UrwG/i:Yp0b/hnSeosETd2UrwMi

    Score
    1/10
    behavioral7

    • Target

      bootsect.exe

    • Size

      105KB

    • MD5

      68c39a577225aeb6b28ea3558e683c19

    • SHA1

      0504785549d7a3ac936c425b14253f779e580bc3

    • SHA256

      6a4e0396657ace212c955b4c95ddc357be66c2c9968dcd7a909bf4cc32f59841

    • SHA512

      fdb7398aff07be9630be5f8d6e8f415c22fc363fae9f6df816a72c6fbef7b93fe3def26a2f7dbe755a5035fb8efa912022eb80a514f8f04a0a9b25c90e8b557a

    • SSDEEP

      1536:0jzmAqtyFjEIPOhHK6iSlrKcBx5kIc3JGP1nXzMR:kqAqtyFjEkAqclrJdF6UdXgR

    Score
    1/10
    behavioral8

    • Target

      bridgeunattend.exe

    • Size

      44KB

    • MD5

      64873a6f5d4fe7f753fff7027eae6c18

    • SHA1

      0d083a4c649aa0bd4e1ce43e5224a65051dc9507

    • SHA256

      e0fa354b86b09593c572782691bccc4a1908826bff7bf163890fa96294876ff5

    • SHA512

      e91ba40235f40833efed0cc9aa06cb67f4a74a5b8a56fc9b1a16217da1a34e8bcd50c8e3e608ff7e6570eecfcf606a06d0925616f441d1df07348e87e8a25d58

    • SSDEEP

      384:FeChSiai5jda2QgNwhJ/KX6Vd1On5l2RZypTnXfY/ki0TWkfWps:5KWWywL/KXm1On5l0opTnQ/mb

    Score
    1/10
    behavioral9

    • Target

      browser_broker.exe

    • Size

      65KB

    • MD5

      a086c8f3e50316a6c8de68d5bb04e44d

    • SHA1

      719e3a8217d43ea44c0f53f583afe1a899205ac6

    • SHA256

      30e612e91d30055e66e7b6d1b1054e283ecbb229621ccaae304192f94c4226f6

    • SHA512

      b1418b667d2019dab3c4d070a85aa1f9996f49287596e665893e5c577ba94c60c21e3a99b2f40b1ae749caefc9e0df8a80cf276c5ae7cbd1344b8d9b7efb789a

    • SSDEEP

      1536:d+3jhnW3pG3AgqCXsRf0tgnNIgmQPtIGRwsLPvmVzQ:M3jx3uDJmYNIZqt9RwIkE

    Score
    1/10
    behavioral10

    • Target

      browserexport.exe

    • Size

      152KB

    • MD5

      3ba96dff77126450742ad98c9a4182f2

    • SHA1

      13858a746641602fc842a354b553f459055e5fad

    • SHA256

      72409ff79f3fc66ac6aab5dbc3979ee25f5af8d34860d03fe9ede7de76bdc7a2

    • SHA512

      22c6a203f92a27fe76139b90b4da044bea6c564f9f1f0364eca806e32e8047ab787e8dbab16d6152067638b90db6ee1327f7eece1b221b2504f4cbee06294e6d

    • SSDEEP

      3072:fl7v3zsq2rCFA9e+jMguOQ7r+PeaIsbNbPbMsaJ9ayl5FPF5:VgqtA9e+j/5Q7r+WobPbMsUb5FP

    Score
    1/10
    behavioral11

    • Target

      bthudtask.exe

    • Size

      64KB

    • MD5

      fb8820ecbd54852073128db33244d171

    • SHA1

      498bca20ffe2084acff7e0d09c9eed979b74459b

    • SHA256

      7441be48fa70ff34284db20b44780daec8ac9e1d706c397a2062c44deb36f36f

    • SHA512

      db5a31cfcf1fb279fdf7d991d3bdc2992079afe59fd00589fd2b28d30c525cf1b3defe38bf5cdf98efdbf4d47926f963bd828284786601e16711ae616a8ac3da

    • SSDEEP

      384:qCdtYiBaOpBmfxgNVN/g5UsWW8HWcKJajXDO1/EagS817l:nggBmfWVsUV9zDO

    Score
    1/10
    behavioral12

    • Target

      cacls.exe

    • Size

      56KB

    • MD5

      f4dc58c6a5ba5fc7b66a7884613106eb

    • SHA1

      213ebffc5a3d101a4aaf72d6145f5aee073b4d2a

    • SHA256

      d3063cd5fe97f722c832952f027aa558f827dc53d641be599d467405671fa8d2

    • SHA512

      a5ccb6dc4e004c0b8007139c76c7590b749b084055aaace5f445545e01af0b3ed983d31060f9c8db3c32422771a5460a07f2a904290cb2cff5740ad0696e77df

    • SSDEEP

      768:33R7B6GKat8oXdKzqbaJEQ56uUtKwJPGQkVJ:3B7S6ozeHQsfJPG3VJ

    Score
    1/10
    behavioral13

    • Target

      calc.exe

    • Size

      44KB

    • MD5

      2f82623f9523c0d167862cad0eff6806

    • SHA1

      5d77804b87735e66d7d1e263c31c4ef010f16153

    • SHA256

      9c2c8a8588fe6db09c09337e78437cb056cd557db1bcf5240112cbfb7b600efb

    • SHA512

      7fe8285e52355f2e53650dc4176f62299b8185ed7188850e0a566ddef7e77e1e88511bdcf6f478c938acef3d61d8b269e218970134e1ffc5581f8c7be750c330

    • SSDEEP

      384:OtF1XO9GxgL7ol+WSvYWCiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiLiiiiiriM:QOOgL7E4r

    Score
    1/10
    behavioral14

    • Target

      certreq.exe

    • Size

      480KB

    • MD5

      c665264e47391b4d763ecd3111b1052e

    • SHA1

      22f53b823f40a1115b303f91370d07b72b72a8c9

    • SHA256

      07480dc8cad237515bcea89f8566e58ea360b57b20ad025e8aea83ec24106ac1

    • SHA512

      6c05e253867ecaff27943a71e91a027ef59f5bd4aee397fd0fa87e37d5687d1188061eb1c3e4bd3d30945c1d233507646e9217aa0a1016d68398b07df2a93d20

    • SSDEEP

      12288:vPv/eIv7RbTIDZ7i3ci+lD8c7U8WiX6qacsuXXoPu79JpJNKKY6JGyAM:vPv/eIv7RbTIDZ7i3ci+L7UKX6qacsuP

    Score
    3/10
    behavioral15

    • Target

      certutil.exe

    • Size

      1.5MB

    • MD5

      291b8c8d419bf3f836d19e165742a342

    • SHA1

      92615acb1cf78518c1e2ce470e4894bec2038a04

    • SHA256

      beccb40598d544b665f562c6ccb725d48c4bb120fa21b376487c2f5d4761dfbb

    • SHA512

      0bad01017f31257e99d630ac94599b5da466c65023a215b1c3010076ae88f4faaa6a513c990528b91beee8fa4bf71dfe8d28e3f6eae7c29cc65a1de358aa80f3

    • SSDEEP

      24576:UQVo/iVU1bR2HYfcvg6xm8bu0d96+maG4Zut+X1a1LOqGxwZRlz9ZW85xt+W0z:jVoqVW2HAH8qy96+lbVa1LOqGARlz9Z0

    Score
    1/10
    behavioral16

    • Target

      changepk.exe

    • Size

      122KB

    • MD5

      17768be79e1cd332a13d0a94a6f476e0

    • SHA1

      b5326c3987519ef2a5e8aca31b845c6bbca5f992

    • SHA256

      ab0d5ed15194ec127628595786e38a43f22238a330c2a444fbf3dc4af4cc6bf3

    • SHA512

      ad1426c2928455bcd5d50b772b3951d46202a2a79073f7f967c8595ee87dd2c26d48e342ad91f339b3ab8ba486f9aa59b0b9b7f70973778888e5158fb9eb670f

    • SSDEEP

      1536:uHpRtJQtqw51JepgpZl7gYThvzj07j5UfFLPEPyjIzl:8pSt9LepCFgQNK5UfFLPEacR

    Score
    1/10
    behavioral17

    • Target

      charmap.exe

    • Size

      212KB

    • MD5

      c316657b402dc8733b037bba2449ec5c

    • SHA1

      a6521a4b1197a950fdb4e1089654cd2f3545cf33

    • SHA256

      a111cc19ea8e47bcd86208174ee3657473ec2dff44f78a9f85442720842edf46

    • SHA512

      203fdc955a1bb5dcdc89e9eb2b13dec5e4bf05ab47431e22fdbfd83e3f2ea17be8ef947ba53393c6b9f22a6563d7005ffca1534915de349b8245d23a2d9f1b16

    • SSDEEP

      3072:Xi3EKE5rLaR4u5vWlLKdBSHovRGnMUBaGzbrLF5NUdrSO9K/tagbdDu5nB:SDEV/MvqLKd4IIMUQGXbgqt5g

    Score
    1/10
    behavioral18

    • Target

      chkdsk.exe

    • Size

      48KB

    • MD5

      ff993f905e84365993204d12d63d67de

    • SHA1

      bb36d95d805516008d756ad3ad846f0b1d177d62

    • SHA256

      b825e4bb74036156a48f03eff9244091e1fc1cfd4e183062e267a6c091b7e263

    • SHA512

      71234c990e2b1a91d5cf7a2e13b5733e8086dd93f56a353e99cc524850c77b08a7e17086feb919da61d7846605b85a57eb0d5d23f55756d29a561926dd9cff15

    • SSDEEP

      384:/CFBZQDYGPE5p12t9zG3bSzjiKsXDeGC7+JWt+VuR0EdqPNiWSFqhW:KbZQcGsp2tBn7+q0eEaq

    Score
    1/10
    behavioral19

    • Target

      chkntfs.exe

    • Size

      40KB

    • MD5

      d890c40f47d8dc19eddfc22043e72327

    • SHA1

      227f195004ed5d387bd6de66028bd0731acaf8df

    • SHA256

      ea76830f1e01378f1a6b18bff71217e856cc1c89921f682cb1d817d2f02fb5b9

    • SHA512

      cdc5a2b125adde6f206e82e3f14e1ae9e4b782cb7275345b6d9b6a51864e35814e374ceae08c630c158d0c9667b1b78acab17ba91a5ef521a471583c4381fe33

    • SSDEEP

      384:vjc1L4ej8jwkXCSzKNSPQ7HBTm7Xm+TxuNMWC6W:L3DGXsQ7Hxm73YC

    Score
    1/10
    behavioral20

    • Target

      choice.exe

    • Size

      52KB

    • MD5

      ae6dd84bc45bf46f41d511f84bdc351b

    • SHA1

      93d409d9b6aea94d7e28d192a125c51db88638dc

    • SHA256

      b6ea2f9d8f0777d50c4201d7ad30d27f75987618eb1cc0eaa7712cf268707a8e

    • SHA512

      1f3ebfa7f312499c6ef210519a57d63a455b8f00a92b42d88d880b8ff8dcb134ee27cd7de5fecd87ee5b20add5f027edfb6dc08f60e7f3edf8aad8841e6b54a6

    • SSDEEP

      768:EuwgITA7k6Prbv3OUInxzIwZtFr/EP9or/Yh4Rr9U4xoNca3/:EueA7JjzfIFhtxsPGr/Tzxo6a3/

    Score
    1/10
    behavioral21

    • Target

      cipher.exe

    • Size

      72KB

    • MD5

      aae00cbbca3a919ba67b9ce6b46f0660

    • SHA1

      6408ea817df70b287db58d4693fd45d48d05065c

    • SHA256

      8a939f48d396436c4e905f179ce961897bc552ebb818e387154f5d190f1f7532

    • SHA512

      90b72a51b07216edcbc4dce897a95b25dc476d7b9de216659ac272501092ddc4e7fd459950498e786a7ae80cbc46957decca38ba4cf51c363820b5c687d4dd05

    • SSDEEP

      768:dTRIRTMysUPAcxla6Hp5L9WLMwfULLl95yCAkmH1BhhVNa8xyY+O7EKV+7r7des:dTRy8UPHHpKIrqfVlVNhqt46FI

    Score
    1/10
    behavioral22

    • Target

      cleanmgr.exe

    • Size

      292KB

    • MD5

      598f81232e931870f68b6751bd4f7492

    • SHA1

      3e18b3db15ffcf9a2e8441426756db3f34c5be00

    • SHA256

      80cf87021dfcb4513845958e6b525a272910bb9afca853ca2f877cd25ec729ba

    • SHA512

      29921555881906f835a238f10f5115b427da2b3c7530c88c370566b215ad0588829f3a254d671464dee3697a977bc050bd9b33f799e35b140e85d38d58a1787f

    • SSDEEP

      6144:MXAX55UXr8cYEswTXE+ohSKq99UF5hvv/:MXAX5mrLlTXy4Qn

    Score
    1/10
    behavioral23

    • Target

      cliconfg.exe

    • Size

      48KB

    • MD5

      5f20521f29d5eaebd4f887a644da71e7

    • SHA1

      4fc97854d01490f3472eb28ae4c7254b2f1955a5

    • SHA256

      879e6ac418729fbec424f618633f6c4ec5af477470bc575ecb26e1669a09d1a0

    • SHA512

      0cb91f55f1f5295f4ef03875070d02b4fae619d343da85088471aa080e5cb63d38d2593ad41293284844a3850fc0b3db71d00f282a30ae76579661a1d01e0186

    • SSDEEP

      384:E1/O/S+0OmD6l5b73Lw6mwARWkwWVPXuNvBQAMYJQ2JQSkdowyo:d/iD6l5v3LcJBLuI30lJBkvT

    Score
    1/10
    behavioral24

    • Target

      clip.exe

    • Size

      52KB

    • MD5

      c2f44ea3178b834ca71418841238d09f

    • SHA1

      984dc0069d84bfe7a1f741fda6bbd7c9f7c270af

    • SHA256

      3cfc03ac663a4ea6b078eeb2fd9245294dee402376c52ebfef3a218cbbdbaefc

    • SHA512

      f2f37ae6444928716804212bbfeaa000fa5627f06a243c9bebc167d29fa4604a809f7278cd61a97320f285b37319c7648af7904bf2094cbf03742a639287cbb3

    • SSDEEP

      1536:4e9J8Ch6nlUHeGajfdsOTl87pmeflZOxscd2o:b95h6nlUHeGajfdsOT4kxsch

    Score
    1/10
    behavioral25

    • Target

      cmd.exe

    • Size

      316KB

    • MD5

      428cec6b0034e0f183eb5bae887be480

    • SHA1

      7140caf2a73676d1f7cd5e8529db861f4704c939

    • SHA256

      3f6aa206177bebb29fc534c587a246e0f395941640f3f266c80743af95a02150

    • SHA512

      509b8c138c4928524b4830488a96bd7e4bc7db2c494b10c68e1edcf7d901879126168eaa6635818d29734540f8400e376e5716a3b4dc052cba4e267bbaad7253

    • SSDEEP

      6144:R7yQ7lW6U+TSC+5EGZKScVkWIFx69gKZHhopOJ4Jto2OIuvXqmm:R7y0GsSp5EGZVcVkWInWgKhxNvXqm

    Score
    1/10
    behavioral26

    • Target

      cmdkey.exe

    • Size

      44KB

    • MD5

      9f7d571f0a641aab8871c3f4afeb2731

    • SHA1

      88fcbd42f8e56c5518e4e2c0c97380c51298f575

    • SHA256

      85bfc4848711618d0636bc03ac0bab9de7a5f01e5bc402c3c3e7bc3dd5924e8b

    • SHA512

      d57dd0698b6854265eba4a9c80cffafbd67428f38e8ed0513bcddd532468e6290b1f38655d44c375568eab9699f6e815f061921c98b231d370861c4f59c82154

    • SSDEEP

      384:DkvKugGGgU4sFq5a2odLAqb/vBYQ/OP1lDprjmxE7G49WHwW:D0PU4qd5n4lDNL7G4i

    Score
    1/10
    behavioral27

    • Target

      cmdl32.exe

    • Size

      72KB

    • MD5

      96c4b87a5097cd4292a797974c8dba69

    • SHA1

      9f6879662438ac495ca6df6d029baebf719b78a9

    • SHA256

      22d7a850f5d5e0ed28028a649bf783947c223551b24f2b3375c8169a924e2d5a

    • SHA512

      737731adb988433092b1d1914c1f016f810446b1f858f95565981e2e115b5f18927f50391eaa879871be7625c65621051aaebff978a01907bbb3bdc261eae794

    • SSDEEP

      1536:4/WilB9CQHqoFrB0Pd/afXaCmacswTeVkheKd+6s7hnKuI:4/zlBczo1B0LPsGeKd+6s7hhI

    Score
    1/10
    behavioral28

    • Target

      cmmon32.exe

    • Size

      64KB

    • MD5

      c9532e581b8bd9a403c7d40ec4470e26

    • SHA1

      0b5355bcda8834a307df7ae26ab4853c4e6d401e

    • SHA256

      8be3de85f6bb6e46a1a5be3fcd9860c6d497b2f87bc6495448a9fa622befcb98

    • SHA512

      54f0e42d5e98bc79bc362004a817e93118c2177e1c861a62efe308c45f8397f8ab535bb99a674c67f4afdbbde099b0790f5ffbf47d397e50709e0ecb094d3dd0

    • SSDEEP

      768:Ugw5KMK29X6dcyMzpY9Hq4amREwOELysHDnOHh9UASnVXjNDJiy:Ug3MK29qb9cmREJsHDq9GzNDJiy

    Score
    1/10
    behavioral29

    • Target

      cmstp.exe

    • Size

      120KB

    • MD5

      24d9c7b8857e09f5bb526e4859c37910

    • SHA1

      3e03b51266d58451336c082ad74f452dc479802a

    • SHA256

      0de12af8dda5c9cfbb0f8c399108d34a84ac8b6ca62aa40745739be3ab6f3be4

    • SHA512

      4f12f2d2cc6216e437224b84cd5465334048168cfbc7d3eaf235e51ac1aeb60d2961ef4c879829adad86ba57a0b39c13eda2d7e7468fcb3bc3ef4c02c0932de8

    • SSDEEP

      3072:ftweCFU6pxiK5eTV51vxJ7TwOOS27BMCWEj1tSBS:1fCy6pogeTVLvx1TwO07BMJEj

    Score
    1/10
    behavioral30

    • Target

      cofire.exe

    • Size

      40KB

    • MD5

      cefb8cdb524fc6d4da2bba5df695d551

    • SHA1

      bb6558c57629bc0eddab412f982ad4cbecd64826

    • SHA256

      f940989914449c633272230a78c83fa587844971075734d6f10644aa5a354dcb

    • SHA512

      0c61ee12ebf6fcb1a4093857c8982de12223b390cde8c56dc64b18d88da4a91e53b9b1009905d56082cdea20d33c411f84a05cb1016977dde18a9d66e8b5b8d9

    • SSDEEP

      384:a7/5vJBArLKvG9zoM0qXCeTvhNMlCLA8qE/704RazygB2mAicMumWEJWf:a7gLKgVXCUvU8qswpB2mEMuM

    Score
    1/10
    behavioral31

    • Target

      csrss.exe

    • Size

      37KB

    • MD5

      696fb9d7e43f428634f31cf56361d7c3

    • SHA1

      9006ccac001d1352d004788ac1d134bd266a82d7

    • SHA256

      eac814cee400a078e2d549ba6e3d7bd09d1bc9805a1c6c9ec0610a0e558472a1

    • SHA512

      da9f91fccb0038b0a06a27f1a2e5481907727fab1c963b325d4d663e351f750640c52d4d19770b7cee151d0ee3bcefaf9dc64fe8fef4f355f81a96bb64315070

    • SSDEEP

      384:eXRMI/nW58nW2eG0mBDBRJiWq0Z1Z0R9zbPpk:2MohrTDB1Pi9sZ49zdk

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks