a1ecab9fa75cdbc7c59829b0f5d9a7a2c104ae2f0987f7888c0abe9e173f2c96 | Triage™

Login
Reports

Overview

overview

8

Static

static

5

_Previ-Sio...ZE.exe

windows10-2004-x64

8

_Previ-Sio...ZE.exe

windows11-21h2-x64

8

dupfdll.dll

windows10-2004-x64

3

dupfdll.dll

windows11-21h2-x64

3

mingwm10.dll

windows10-2004-x64

3

mingwm10.dll

windows11-21h2-x64

3

~/jgcaho2.dll

windows10-2004-x64

3

~/jgcaho2.dll

windows11-21h2-x64

3

~/jizh1.dll

windows10-2004-x64

1

~/jizh1.dll

windows11-21h2-x64

1

~/zyqu/kuv...t9.pdf

windows10-2004-x64

3

~/zyqu/kuv...t9.pdf

windows11-21h2-x64

3

~/zyqu/kuv...y5.pdf

windows10-2004-x64

3

~/zyqu/kuv...y5.pdf

windows11-21h2-x64

3

~/zyqu/kuv...s1.pdf

windows10-2004-x64

3

~/zyqu/kuv...s1.pdf

windows11-21h2-x64

3

~/zyqu/kuv...q8.pdf

windows10-2004-x64

3

~/zyqu/kuv...q8.pdf

windows11-21h2-x64

3

~/zyqu/kuv...g3.pdf

windows10-2004-x64

3

~/zyqu/kuv...g3.pdf

windows11-21h2-x64

3

~/zyqu/kuv...s7.pdf

windows10-2004-x64

3

~/zyqu/kuv...s7.pdf

windows11-21h2-x64

3

~/zyqu/kuv...m6.pdf

windows10-2004-x64

3

~/zyqu/kuv...m6.pdf

windows11-21h2-x64

3

~/zyqu/kuv...j2.pdf

windows10-2004-x64

3

~/zyqu/kuv...j2.pdf

windows11-21h2-x64

3

~/zyqu/kuv...h4.pdf

windows10-2004-x64

3

~/zyqu/kuv...h4.pdf

windows11-21h2-x64

3

~/zyqu/kuv...10.pdf

windows10-2004-x64

3

~/zyqu/kuv...10.pdf

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Prvis141245PBALCPH8B_0166.zip
Size 4.3MB
Sample260428-ae4dxsew9p
SHA256 a1ecab9fa75cdbc7c59829b0f5d9a7a2c104ae2f0987f7888c0abe9e173f2c96
MD5 ea94b293d95295a9002a7e11f3ac585e
SHA1 ccb8ee2e8b6acc467e0c47415c4d92df4cb25e64
SHA512 565c91c4ea9a47c3a5e94ad44e2400af538c693dcaca5f789191bb25924eedb2b051c995b663f48bd3306534e0ec99da3e13ee4345e49df9ebcf574a6d05fe76
SSDEEP 98304:qIDrDyIR7ihrAYe9QXdrp4WHIRpo0HmJrjJiZOr7gTKr6jR+:q+yQN4r4Wi9mJroG7gg
TLSH
T12026334D5B91E8EAE72B90339CD3A9616EF194618F9DF52B8E6C00141752C2E3337D2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware defense_evasion discovery link pdf qr spyware

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

_Previ-Sion5128JLFAERxtgoffFK83R0_2586DFGZE.exe

Resource

win10v2004-20260130-es

windows10-2004-x64

5 signatures

600 seconds

defense_evasion discovery

Behavioral task

behavioral2

Sample

_Previ-Sion5128JLFAERxtgoffFK83R0_2586DFGZE.exe

Resource

win11-20260130-es

windows11-21h2-x64

5 signatures

600 seconds

defense_evasion discovery

Behavioral task

behavioral3

Sample

dupfdll.dll

Resource

win10v2004-20260130-es

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral4

Sample

dupfdll.dll

Resource

win11-20260130-es

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral5

Sample

mingwm10.dll

Resource

win10v2004-20260130-es

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral6

Sample

mingwm10.dll

Resource

win11-20260130-es

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral7

Sample

~/jgcaho2.dll

Resource

win10v2004-20260130-es

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral8

Sample

~/jgcaho2.dll

Resource

win11-20260130-es

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral9

Sample

~/jizh1.dll

Resource

win10v2004-20260130-es

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral10

Sample

~/jizh1.dll

Resource

win11-20260130-es

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral11

Sample

~/zyqu/kuvgqr/pnua/yorxq/bhat9.pdf

Resource

win10v2004-20260130-es

windows10-2004-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral12

Sample

~/zyqu/kuvgqr/pnua/yorxq/bhat9.pdf

Resource

win11-20260130-es

windows11-21h2-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral13

Sample

~/zyqu/kuvgqr/pnua/yorxq/bttcy5.pdf

Resource

win10v2004-20260130-es

windows10-2004-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral14

Sample

~/zyqu/kuvgqr/pnua/yorxq/bttcy5.pdf

Resource

win11-20260130-es

windows11-21h2-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral15

Sample

~/zyqu/kuvgqr/pnua/yorxq/gers1.pdf

Resource

win10v2004-20260130-es

windows10-2004-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral16

Sample

~/zyqu/kuvgqr/pnua/yorxq/gers1.pdf

Resource

win11-20260130-es

windows11-21h2-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral17

Sample

~/zyqu/kuvgqr/pnua/yorxq/huxpq8.pdf

Resource

win10v2004-20260130-es

windows10-2004-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

~/zyqu/kuvgqr/pnua/yorxq/huxpq8.pdf

Resource

win11-20260130-es

windows11-21h2-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral19

Sample

~/zyqu/kuvgqr/pnua/yorxq/odrg3.pdf

Resource

win10v2004-20260130-es

windows10-2004-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

~/zyqu/kuvgqr/pnua/yorxq/odrg3.pdf

Resource

win11-20260130-es

windows11-21h2-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

~/zyqu/kuvgqr/pnua/yorxq/sncnss7.pdf

Resource

win10v2004-20260130-es

windows10-2004-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral22

Sample

~/zyqu/kuvgqr/pnua/yorxq/sncnss7.pdf

Resource

win11-20260130-es

windows11-21h2-x64

6 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral23

Sample

~/zyqu/kuvgqr/pnua/yorxq/tgircm6.pdf

Resource

win10v2004-20260130-es

windows10-2004-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral24

Sample

~/zyqu/kuvgqr/pnua/yorxq/tgircm6.pdf

Resource

win11-20260130-es

windows11-21h2-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral25

Sample

~/zyqu/kuvgqr/pnua/yorxq/xdpj2.pdf

Resource

win10v2004-20260130-es

windows10-2004-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral26

Sample

~/zyqu/kuvgqr/pnua/yorxq/xdpj2.pdf

Resource

win11-20260130-es

windows11-21h2-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral27

Sample

~/zyqu/kuvgqr/pnua/yorxq/xpdh4.pdf

Resource

win10v2004-20260130-es

windows10-2004-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral28

Sample

~/zyqu/kuvgqr/pnua/yorxq/xpdh4.pdf

Resource

win11-20260130-es

windows11-21h2-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral29

Sample

~/zyqu/kuvgqr/pnua/yorxq/zgcvnc10.pdf

Resource

win10v2004-20260130-es

windows10-2004-x64

7 signatures

600 seconds

adware discovery spyware

Behavioral task

behavioral30

Sample

~/zyqu/kuvgqr/pnua/yorxq/zgcvnc10.pdf

Resource

win11-20260130-es

windows11-21h2-x64

7 signatures

600 seconds

adware discovery spyware

Malware Config

Targets

- Target
  _Previ-Sion5128JLFAERxtgoffFK83R0_2586DFGZE.exe
- Size 2.6MB
- SHA256 98e56c5f902fb825f6f122122ba6a2a0febee1e582a462f74dd1d99b018bf7c0
- MD5 cfbd8d062e9baa98737a0260996f48c6
- SHA1 7bc79e8bbff363b41fd73f9bea102ddc4a404cbe
- SHA512 4335a0e58eb853c6b113f28f306acf2e4cddf130f98e10e1e85e6df65addeabee422530e46ceea07a50119de8f9ef48a1ea9a1c6ebd7e46ac5d35af46ce98b9b
- SSDEEP 49152:1jPP4L8GNZGMyYDSHolOO7oxKQx9Ov9MAo0wqUh9YGnbAYpkQKDLk9KNTY6pbNns:1zQL8GNZGMLDSHBEGK+9Ov9MAo5qo6G4
- TLSH
  T1C2C51A1DA34141B6D97304F156AB2BFB8B346A395420D50EEB80DE1DABB7DC1FA1A313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery
- Looks for VMWare Tools registry key
  defense_evasion
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2
- Target
  dupfdll.dll
- Size 985KB
- SHA256 fad1e9d507c7021a62998a547ab53b3ee438846f7ae753285fdb3917dd2dcdfa
- MD5 e882ee4a643b00871c98bcfe4b4d7cd1
- SHA1 e6ae8be61928e1279190b0df28ac8ad94f3ac29d
- SHA512 f7e5e8b7cb8a74d502e3853abfeb9eedb4ae8486a5656226e92b48e6af1fde6ef31bec55d4d4bbdc28bc4496999e95eacbbceda7b1fa9000e59e491480ecae9d
- SSDEEP 24576:NULN6sC5vqMYmVsMKJhG+8cYtd8J1sAN703TnPNJS:yLN6Z5vassHJhG+R703TnPNJS
- TLSH
  T1C7251A5DA34241B7D9B301F0165B2BBB8B3096294424D91EAB80DE5DFF779D0F92E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  mingwm10.dll
- Size 109.4MB
- SHA256 0cbc543e586c5fb93c4f7899f0d280964fbb9f0e9bd128795398fddecf944c83
- MD5 dcc48e38d9a98db4305aa4659f2e68db
- SHA1 f457f4c3ea2bfcbc99427df77ab9e00a965d0b54
- SHA512 3479800be230ee528b0b68ed05ce839332c6bddf8b77a27fa57ed1f1a1ed796c661ec8587e5ffe70abadfc48afea9dee567683c0c81445022fad79d0b5f20187
- SSDEEP 98304:sSiaItqfJDzYvVgjTb+g3UubH+/BBiyM:snrtbuaZuAb
- TLSH
  T120486C23B284A53ED4AB0A3E5937A6149C3F7EB13A128C5757F4388C8F395417E3A647
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  ~/jgcaho2.xml
- Size 20KB
- SHA256 39768457bbeb5af3d537b8311c73e2d5dffc4a6e9a29ab5077341a951f2468d1
- MD5 1d93a7ab93e4b1e7233e77523fcc676d
- SHA1 a0b3c36c6df20ea5c705669756887c3eb74f757d
- SHA512 3b0a9564639a0c796ee6ae382d851da7fdec444c7203dd9155ed4773620ba1724106c679a29e9e4c47d739f627879c6b01d1c667d2e7de4526d226cd8fc1d80d
- SSDEEP 384:qkqM+ObiQVns8VBSIRw/eDX9OUOZ2OPVIdvYuYJL+mcXfeMQ:qkqM+uELKX9OUOZ2Od+g3LJp
- TLSH
  T164924997BB048072E9CD4A7450B7D23B487977411FC120E3B7E80A5E5EA87E22B74A47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  ~/jizh1.xml
- Size 16KB
- SHA256 7e8913c753fd035d4227ef802a40f96062acf84da852dab9b918d461bc13648c
- MD5 cf85da27155fab5dd459b3bcb37dc189
- SHA1 013c0e6b7cda58fee5db7f5c2b2223191e07d682
- SHA512 38c227fd1d8491e2fc83b908455b0d6735921d29ebd08508217e7855a445b927894eafb24bbcb11115500da38aaa4bfa8868c2f2f2e78739ee6b2d62229ed300
- SSDEEP 384:YgD9nm/ugB3IYiKbB0ry8RbmL4nNySQ11:tMuLYiQ25ALv
- TLSH
  T112725B63CFD81812DC2B5E30FDE087276D72F2941AD2C6CB3188C15A9F813452BA97B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  ~/zyqu/kuvgqr/pnua/yorxq/bhat9.pdf
- Size 20KB
- SHA256 889ac18f93e4ddb0cd272bfbf1e9d77b58d82d938eb3e9625a7ec8d475b8e8be
- MD5 e67b506558447624f9c34dc897981a0f
- SHA1 8112806872e5a5bf4a765541a0d88ed07261f1f1
- SHA512 f18a32fc564734b39edc258abe4e28cff6367d43cd2ba41b64999845f03a1ebb00c4007ee2bed40ab3800c2c1d262b42aebaaf5b06acad4ca0718f6abb1e61b3
- SSDEEP 384:8stfGOgTdDm03wj/hSlBaDEXbGpWl127vwc35g:8dOgtxwVuUrD7vN35g
- TLSH
  T1A1928EF3E5A45C8CD8828B868D943DD4089DF123E6C83CD1247D87857685FBCFA226DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  ~/zyqu/kuvgqr/pnua/yorxq/bttcy5.pdf
- Size 12KB
- SHA256 0e65316295a1d7edc7ff02ee398cb972e7e59b3c3ec6b319313683aeee889cdd
- MD5 4c079a927ddd3f869ce13c1c3ac82390
- SHA1 54bbe0f62daa71ba67922c4cb3379cc878cc343d
- SHA512 15a378c7fae7e28c06333369b4c2f75bc54cbd13bd0b709285c3539a1aff1fbf0635496f71ad6cdbe75e91503edb95b9e0fec13e0f3f1a8c94f9c088242067e4
- SSDEEP 384:4WUf0b0S/EJv679LRa/tpOdNG0qLLx2OU:NmgEJv679LktmG0q/x/U
- TLSH
  T16B429DB0CDD57C2EE85B2C50897D3D29419EF19281CCEAC13BE659CAC618A14A5A1FF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  ~/zyqu/kuvgqr/pnua/yorxq/gers1.pdf
- Size 1KB
- SHA256 e1df5b5e2bfa2f0c1160ed2b1fa9110cb86e6d36e9e997cae7dd8b4958f41eb0
- MD5 a16c9e1ba83a082b34631e3e024f7aaa
- SHA1 3dea6bc373eed612fcd4ec78be1db91ebac14396
- SHA512 15d7390dc0a0b559921b9beb5cc126d6fe5c30e48b7349194e9553b13b9da818678a53f75fa3e2fd019dcbc354bcbd85c733f2e842294dd852f683cd5eacd246
- TLSH
  T1C841325995CC4DCCE9A68282BF1A7983B66D710305E8A4C211BDD70FC48AFC9AD62727
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  ~/zyqu/kuvgqr/pnua/yorxq/huxpq8.pdf
- Size 1KB
- SHA256 a13380c87f31b47c1b292d0a942ac548412798bbe80ca9bb0c3ecc27c2cf2b44
- MD5 3a29b8f490b3bc6a9f1023f0eed12d55
- SHA1 ad32c4a3b97ab417222b3e2f9877d25d3c3ed058
- SHA512 5869f38c5c413e872bd7e1bd84487a176711ae33a2e553eff7121386026f07f35fe00b3b9b5206360b8dfe1cad8ef861de585df3118770d39ae3b939201d8e5c
- TLSH
  T173310E2495CC4CDCF1A686C1BF2F7886A47AB00352E8A8C111BCC64FC18AFD5AC53B17
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  ~/zyqu/kuvgqr/pnua/yorxq/odrg3.pdf
- Size 16KB
- SHA256 38cfeb9428f722cb728f361b07f893e7be4759bc6186dc999dc222fe02e5222c
- MD5 18c71bf18b7e4ee6d6f4c3d958988439
- SHA1 a02df90c592a9bcec37d1b1892ad33fa82e50870
- SHA512 ed8ad3af68117e87d8b5da336c3b2a9e7ee8ed9aecc51744a5db9e65528fb5dd0f4efec13f0994c4b8b6de16cae35065806d05f07e991119a4e575b7f4f22418
- SSDEEP 384:D7j0aLDyJcC0IJIqBYb3UxU5Rcqz5LcU1RiSC:D3v6cg6nb3UxU5RVz5IUPiSC
- TLSH
  T17B72CF90DCA7081DFCCE58C99B5A3E5C424C728AC4DC2529213946A5F215CA377A7BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  ~/zyqu/kuvgqr/pnua/yorxq/sncnss7.pdf
- Size 1KB
- SHA256 d31a553c04df59d2ffcbf32c7df25dd393f754a37adca8ad4f829b065485201e
- MD5 d07b20b6cd1ec6922d5e298c030dac02
- SHA1 1bb6ddb83f150ffdfa4fee6efc94d0c6330714d8
- SHA512 53d62252f7334de61ec142b13a8fb0b2a31d5a727c023e8470f92abdd46caf16f0c40762d07b7bc58e988605376c7b181d10be012585c53993ed8d8dbc34491e
- TLSH
  T11A41442089DD5CCDE876C6817F0ABCC7696CB15366E8B8C2102CC24B818FF96AD53627
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  ~/zyqu/kuvgqr/pnua/yorxq/tgircm6.pdf
- Size 24KB
- SHA256 50acc09a144f3858cebe79d2ec1be67c0eb50ee09408fdef69b94cf601e163f4
- MD5 45fc91f31e62900d238fb056e8082321
- SHA1 613d563d263100b2203ba250d3e8652dd2fe4c5a
- SHA512 29c5605bcc41747175e649ae531bf90af84dead26053a0ce6dbed1d6a2440d9ea8bcf05f0d15af70a79828aafde95fbd70aee2d7d49282dbd1f1323872f94a36
- SSDEEP 384:s0RqLiQDCpLjmlx8eUBgUntKKc82JFThmp9rd5XD06lgmUHKzba9xLCa:T8L5DCpPm38e6jcTJF4p946lPm
- TLSH
  T1E4B2BF834E464D6BE8F18740BF03FF0E6B5B7A88744B77D710A2A8C67B14AC15C1A22D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  ~/zyqu/kuvgqr/pnua/yorxq/xdpj2.pdf
- Size 25KB
- SHA256 e559f4b59ab4c35282aee6583a608ff959b6a614b2148d363b8ed92bc169def5
- MD5 cb59261ca7e61ed089645142bea0f83f
- SHA1 2eae893946b5e6d8e7cbfce40f1188d4519e05d3
- SHA512 884094a9eff66412f0f019a778cc78858f581634d3844b341b6950528dc1dbf69ed696f4310cd385260d30d4af39b1a7eb7377bed920bfe86b46f4f9be9f2401
- SSDEEP 768:UAlXBsKZ6AOruipbxHMM7AMVkSI6eStFDdIKRgaw89oGiqKIA+hi:vxsKZNOrxLsTGI6dtFDd4LAte+c
- TLSH
  T18FC29D2D1147D874DB9386D6FF2EBC86919AB31F51A4EDA21E2C0C614B67EA4F44E0C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  ~/zyqu/kuvgqr/pnua/yorxq/xpdh4.pdf
- Size 37KB
- SHA256 f6c20d80ac3d84183942ef81df6303179e857170c6dd98e3a826b8d273ea230a
- MD5 e612fad48560de720f78648b001a8c21
- SHA1 06070fc3c2bc1060f03922c13536c5dcc722075d
- SHA512 d8f1c98708e9b584d0ef3a8d7993547fd471d252918dd67cf973a681e6ce4b9d1af8c3662e619e1b4fe1060c94bcddedf67158ead27ab8c2a6b49bff0d368d74
- SSDEEP 768:J5q58ro0irYoFD/2i3BjdqCP2Qrvh6glaX4VJ1GJM17K8uh9VN25WJ43TmYY1:J5A8cHNd3Bj5P2IQgMQJ1ECK8aGO1
- TLSH
  T19203AE178902924DD88995D6BFAE781D9B1E333A79C4B8D63C7D0EC39F108A4EC5B067
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  ~/zyqu/kuvgqr/pnua/yorxq/zgcvnc10.pdf
- Size 28KB
- SHA256 a8615be4e1917b9858c3513d4fea57077cc2cd3b6352f888a708426d535e55f1
- MD5 1ce3c58d905c00897efc393861de3326
- SHA1 d72cf3a40f58e3c24b0321f26894fc07e4736a77
- SHA512 fae48d9910567de73d1031d4bcbb3087b0af0144352009420a85ebea1b6373cf3d24187e3cee0b811a4752944c7c3fd1660c03fedb7b78971bc2978a48134515
- SSDEEP 768:MU1T5Ioz9EFtKGItrh43I7vszM3iaFt+NyCzM+b4qKIA4p7:RmostJEh4asbK4I6M4J
- TLSH
  T1E5D2AF4D14A6C8A4C713A7DAFF4DBCD2A29DB30F61A496515E2C8E02850BFF5F92D0C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

adwarediscoveryspyware

behavioral12

adwarediscoveryspyware

behavioral13

adwarediscoveryspyware

behavioral14

adwarediscoveryspyware

behavioral15

adwarediscoveryspyware

behavioral16

adwarediscoveryspyware

behavioral17

adwarediscoveryspyware

behavioral18

adwarediscoveryspyware

behavioral19

adwarediscoveryspyware

behavioral20

adwarediscoveryspyware

behavioral21

adwarediscoveryspyware

behavioral22

adwarediscoveryspyware

behavioral23

adwarediscoveryspyware

behavioral24

adwarediscoveryspyware

behavioral25

adwarediscoveryspyware

behavioral26

adwarediscoveryspyware

behavioral27

adwarediscoveryspyware

behavioral28

adwarediscoveryspyware

behavioral29

adwarediscoveryspyware

behavioral30

adwarediscoveryspyware

© 2018-2026

Terms | Privacy