403ebb72661a6f0eb4eeab8e4f27a8c37f30c64e6e456eb6ee0e540f78830d64 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

DocuSign-D...4A.exe

windows10-2004-x64

7

DocuSign-D...4A.exe

windows11-21h2-x64

7

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDIR/INetC.dll

windows11-21h2-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-21h2-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-21h2-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...ay.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...ON.dll

windows10-2004-x64

3

$PLUGINSDI...ON.dll

windows11-21h2-x64

3

$PLUGINSDI...rk.dll

windows10-2004-x64

3

$PLUGINSDI...rk.dll

windows11-21h2-x64

3

$TEMP/$R0.exe

windows10-2004-x64

1

$TEMP/$R0.exe

windows11-21h2-x64

1

$TEMP/$_65_.exe

windows10-2004-x64

1

$TEMP/$_65_.exe

windows11-21h2-x64

1

$_34_.exe

windows10-2004-x64

1

$_34_.exe

windows11-21h2-x64

1

CBBackupPlan.exe

windows10-2004-x64

1

CBBackupPlan.exe

windows11-21h2-x64

1

CBFS6Net.dll

windows10-2004-x64

1

CBFS6Net.dll

windows11-21h2-x64

1

Cloud.AzureClient.dll

windows10-2004-x64

1

Cloud.AzureClient.dll

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
DocuSign-DocuSign_o_backup_v8.3.0.85_oid56f276e1-bc4c-4284-a5ee-24c354e20059_fidBstz7oUXMUmco%21SuD2Kl4A.exe
Size 24.4MB
Sample260429-ammq5sfv21
SHA256 403ebb72661a6f0eb4eeab8e4f27a8c37f30c64e6e456eb6ee0e540f78830d64
MD5 42503693c15326ab9add71f615f80e20
SHA1 3c0ba355d3c2ae4253e84488634fec75d454332d
SHA512 544ffdbfce79a3a7ff7a90b51352c90ae6a008dc2257a9ab976a1b844157b27c53bb2128bae281bd4fd7eab3097f30da53e940084fbe356ca7b6161db404afba
SSDEEP 786432:o3j+Q4HYqwhuVgW2v1fQRNobsf+BT26LkGkPRM6znBIdfo:o3Sh49hHv1IPT+1wZRvznBKg
TLSH
T14C472377E95654FEE47D43F269DC8FB2088C8D1F18C219D456ED2291C283BAA63E7234
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery installer spyware trojan

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

DocuSign-DocuSign_o_backup_v8.3.0.85_oid56f276e1-bc4c-4284-a5ee-24c354e20059_fidBstz7oUXMUmco%21SuD2Kl4A.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

14 signatures

150 seconds

defense_evasion discovery spyware trojan

Behavioral task

behavioral2

Sample

DocuSign-DocuSign_o_backup_v8.3.0.85_oid56f276e1-bc4c-4284-a5ee-24c354e20059_fidBstz7oUXMUmco%21SuD2Kl4A.exe

Resource

win11-20260130-en

windows11-21h2-x64

14 signatures

150 seconds

defense_evasion discovery spyware trojan

Behavioral task

behavioral3

Sample

$PLUGINSDIR/INetC.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/INetC.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/NSISdl.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/NSISdl.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/System.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/UAC.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/UAC.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/nsArray.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/nsArray.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/nsJSON.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/nsJSON.dll

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/processwork.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/processwork.dll

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

$TEMP/$R0.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

$TEMP/$R0.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

$TEMP/$_65_.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

$TEMP/$_65_.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

$_34_.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

$_34_.exe

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

CBBackupPlan.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

CBBackupPlan.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

CBFS6Net.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

CBFS6Net.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Cloud.AzureClient.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Cloud.AzureClient.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  DocuSign-DocuSign_o_backup_v8.3.0.85_oid56f276e1-bc4c-4284-a5ee-24c354e20059_fidBstz7oUXMUmco%21SuD2Kl4A.exe
- Size 24.4MB
- SHA256 403ebb72661a6f0eb4eeab8e4f27a8c37f30c64e6e456eb6ee0e540f78830d64
- MD5 42503693c15326ab9add71f615f80e20
- SHA1 3c0ba355d3c2ae4253e84488634fec75d454332d
- SHA512 544ffdbfce79a3a7ff7a90b51352c90ae6a008dc2257a9ab976a1b844157b27c53bb2128bae281bd4fd7eab3097f30da53e940084fbe356ca7b6161db404afba
- SSDEEP 786432:o3j+Q4HYqwhuVgW2v1fQRNobsf+BT26LkGkPRM6znBIdfo:o3Sh49hHv1IPT+1wZRvznBKg
- TLSH
  T14C472377E95654FEE47D43F269DC8FB2088C8D1F18C219D456ED2291C283BAA63E7234
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery spyware trojan
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/INetC.dll
- Size 21KB
- SHA256 5520208a33e6409c129b4ea1270771f741d95afe5b048c2a1e6a2cc2ad829934
- MD5 92ec4dd8c0ddd8c4305ae1684ab65fb0
- SHA1 d850013d582a62e502942f0dd282cc0c29c4310e
- SHA512 581351aef694f2489e1a0977ebca55c4d7268ca167127cefb217ed0d2098136c7eb433058469449f75be82b8e5d484c9e7b6cf0b32535063709272d7810ec651
- SSDEEP 384:VpOSdCjDyyvBwRlX+ODbswYM2s74NS0v0Ac9khYLMkIX0+Gzyekx:rdCjW/lX1PfYM2X1
- TLSH
  T123A23B5253605FFEE3D71938B8B7773745EAE76464178A8F06732E8918B2352B930382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
- MD5 d753362649aecd60ff434adf171a4e7f
- SHA1 3b752ad064e06e21822c8958ae22e9a6bb8cf3d0
- SHA512 41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d
- SSDEEP 192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo
- TLSH
  T1F0623B51638888F3DBD6013EB4523707AB595126B4925DE2CB271FCA6D3B18E3EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 14KB
- SHA256 6d95897f302bd75a8aefc8db32a826393bd52c30057bb157fdc68d97c47bb919
- MD5 114e8d7f1eb28894ece784c8d1370398
- SHA1 4858085fb0d3f4e941b237e483e7d9c69f3bf9eb
- SHA512 41cf4fc9b7287c64ff036b7a347363a4a36d7feeca7f39213a358cea2d3c7e3cc2c28d406d2984300e6897187d9b88f423846cb2a4a20aaa7e1cbc93dda910b5
- SSDEEP 192:tQpTobBDV6g67UmsEw9E5aZxwXTBa1uayR/H3p+57CvZZ2DDFVnF01Dwn2GRbgso:mRoT6gw51IE5aZOjBaAN/XpWzqNw2io
- TLSH
  T1AF624C11A92008F6C761153470E33BBF6BB34E72571481C3ABE3595EBE25703AA71AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH
  T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/UAC.dll
- Size 17KB
- SHA256 e58884695378cf02715373928bb8ade270baf03144369463f505c3b3808cbc42
- MD5 88ad3fd90fc52ac3ee0441a38400a384
- SHA1 08bc9e1f5951b54126b5c3c769e3eaed42f3d10b
- SHA512 359496f571e6fa2ec4c5ab5bd1d35d1330586f624228713ae55c65a69e07d8623022ef54337c22c3aab558a9b74d9977c8436f5fea4194899d9ef3ffd74e7dbb
- SSDEEP 384:59TzaeW+WyB8c7LX+OGkrwWvVrkUiEMAWm5nskAvXkq:5ZaB+W62Mr5vGUiEum5sk
- TLSH
  T16F724B25ABA083FFC5500571A6E1672217FA98301979586F8E73EEC62FB59436C3E703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsArray.dll
- Size 12KB
- SHA256 81745087f193b6fa131189f4b3ee9caa93e9692e408d3955fbcb9a4ec8516e2f
- MD5 0917ee492308b691326e6581e8c793c9
- SHA1 ff689c8051ffca7657461ac828bc46e303ab8e59
- SHA512 2a4ae4b93b0eac113a0e65f459798466120f1af4605a82a11f9022d790fe0b4f7d368b312f8a073b1dcfe8760e529ea56a5b5d4289321dc9f2fc8a22691b42b5
- SSDEEP 192:L+QMtjhIz23Tv7QpAXXcxwtXexpnGOO81h2xXP:SQ6nDv70AXXcWtXexpnGIhW
- TLSH
  T1C642090A1F6082F5F8F201BA557A2B355A1D7E19971E1EEB07A314142E209C73F39BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 3b15c6e4ca42036d7424f93ea0806a2d35220d65faaf2bd2479a54258f631b55
- MD5 428c3a07fba184367a5085e46e4a790b
- SHA1 f2de6cd4ec99ab784d18914a21de9d919a450089
- SHA512 b34e1266e949d7cc5cdb7a809c3ca42652a1bb1ec72d83218604cb01b3118bbb42bfcaebc6134c4e6eb43fb566539414a49c1a0cd23a6c84da7c1c4b56ba2ab6
- SSDEEP 96:L7GUeYNrwgcrEzyKwZxW4JxNABWweYkZleOe4I9d0qqyVgNr32E:XGgrwgcrEzylQBHkZwd0qJVgNy
- TLSH
  T1E1D1E93D76C33DB3C54ACA753C65292F0FB8D8261B540211AB5716C279D5AE3FE29382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsJSON.dll
- Size 21KB
- SHA256 15b527ac5d224b2b684ef07fecd6d71d61f05955e3a2bd3dd1de6378e927b3f8
- MD5 b7878c46c342f851d35fb2dbc898a593
- SHA1 dd0ebd231edcfdc0a561cbda733c58e22ce3156f
- SHA512 d7f179d33695b62da5fc0643fac461129975e78a8694c02e8c8d74471d0ee4061b92f1010401209605146861b259d34079583b2080c8ba69382c2122d9b969c2
- SSDEEP 384:QYUEEoUMA9RoB+cq4OJTv/ldPWUn2kaVC+DEbXG989qX6rMIZy9RrT:PeRoBXHoTXld3n2XubXf9+EMNvrT
- TLSH
  T152A25B566170A8F1F92618FAB9D26E237F7DF90834745897CB23056D2A91863BF3C312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/processwork.dll
- Size 231KB
- SHA256 27329ea7002d9ce81c8e28e97a5c761922097b33cedeada4db30d2b9d505007c
- MD5 0a4fa7a9ba969a805eb0603c7cfe3378
- SHA1 0f018a8d5b42c6ce8bf34b4a6422861c327af88c
- SHA512 e13e29712457d5e6351bfd69cba6320795d8b2fd1a047923814f8699f7188ec730ec7f0d946fdff66c8b430fef011415ed045b6ea56e4cc0b1d010171ab88178
- SSDEEP 3072:n/93Fm9hfGIGjk1qc55CDoGowH6Fb/CcXwuCoty1IKYOlIa+zUk9sfqQAPfujRzS:/94yj9c55CDorNqot43ndqQpzjIKW
- TLSH
  T1F2343B36E1C0CC76D5672B7CDC49E3D8556EBA302E2898866BE91E8C9B3D391351C287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $TEMP/$R0
- Size 47KB
- SHA256 b3076560d5321b9d8d99221194376241e5277957c8eb4b0eba689b616e803ac7
- MD5 4a545dc7605e6bdf8e107173e5eba69c
- SHA1 cf45cf7594e9970b4ffeda48ac728556e3d232cc
- SHA512 3be7af94fd0b20ddfeedf3001991280e2da7a4c48763e6dc55ac8f3461ed4a200773cdb6f3b6cee47abd49680acd9377ddb6d539e2fa604da0b9df390de11fa5
- SSDEEP 768:/T8ZI9YIHMfndz2dgKCsUoEBLhpX8Mmg2EIEMmk2Es:/TEeYIHMFydgKCsSLhpX8Mmg3Mmk+
- TLSH
  T1DA238D0277E84546DEEE4FB974F449390A71FB836D61C5CE16ACC0894E62BC16B603BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  $TEMP/$_65_
- Size 47KB
- SHA256 b3076560d5321b9d8d99221194376241e5277957c8eb4b0eba689b616e803ac7
- MD5 4a545dc7605e6bdf8e107173e5eba69c
- SHA1 cf45cf7594e9970b4ffeda48ac728556e3d232cc
- SHA512 3be7af94fd0b20ddfeedf3001991280e2da7a4c48763e6dc55ac8f3461ed4a200773cdb6f3b6cee47abd49680acd9377ddb6d539e2fa604da0b9df390de11fa5
- SSDEEP 768:/T8ZI9YIHMfndz2dgKCsUoEBLhpX8Mmg2EIEMmk2Es:/TEeYIHMFydgKCsSLhpX8Mmg3Mmk+
- TLSH
  T1DA238D0277E84546DEEE4FB974F449390A71FB836D61C5CE16ACC0894E62BC16B603BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  $_34_
- Size 2.6MB
- SHA256 c49239aaae1f352f8d831aaafcd51c697a2bb2e0043fc02d521a82e01e00bbbc
- MD5 cb01447edb7fdc8a2f14c26488147d7a
- SHA1 e31ac1c14de1b2c7768c43f14fed65a4308da70c
- SHA512 0eaeea341f8f5afeac67ae820659d1389a83098900577579bc0cb8e7da8c71ac6173813ca1ce3a800d0e906d47b0bbe7a167ef6fb6506c21db6ef2833cb8c3df
- SSDEEP 49152:y1q5jMJn3urQLgwxjwwH+wiQYp+hPqlpZwGjqSOMa:EWjMJ+2gWKt9CPyZbROMa
- TLSH
  T119C5BE973F41D139F4B7E5B22E88519016933D6A9767741826E2FC8E85F1BC20ECF226
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  CBBackupPlan.exe
- Size 1.0MB
- SHA256 7e8cb5d99ce3c7e16c2a9d645a1ef6c791e307a4ad4108b01a2580c2c09dedfc
- MD5 609ea116c2cd8cbcacdb3f4a5b56988c
- SHA1 ad93422f2c5d6f7078d9a8283b77ec0d35f00de6
- SHA512 8efdac2a7be9a0001a1c2f6ed757b6d3fd4f92c272441d297647197b22ee15c9d520e7905853922b7147b33bf6b59d8116213063a9413dc74abc7f241211828a
- SSDEEP 12288:SPmZh1mPOyD9yxP97/CSkROcI0Z0R2M7pA/+aaz2CC4e6/V3fDDUCwfB4MLREdAy:SPM1mPOmUP9GSpWGXxHrbIqwjArMwN
- TLSH
  T19D356B67BF259929D47F46782612004043F22CAB97DAF61A16F5FED921F23861CCF0A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  CBFS6Net.dll
- Size 336KB
- SHA256 2ad750b27fdb15dd5ccd5a08d2e13d7ed844089f00482850cc6edfaf4c2726bb
- MD5 1fc9aee5d9e43546fb263d0aea020822
- SHA1 8cd4383cd578fbeda464166c14e36bc597d58081
- SHA512 402953480a999b73c4763f4b9f1ee745ab57c03ad1cf41ccf893da4dc67399f067d51ee6c2088702b59bd8846811bc8a1a3b0868e9b646814e3fd40c2d31f107
- SSDEEP 6144:OnO5KGJCY2iOEwuCeHPOLQDACVw7l8dWZNTDBVA0G8kpCe:OOQU2i8uCsWLRewxRZNTTA0GFC
- TLSH
  T1B4745B59AB200199EAAFC27C9473D603A673B1D9635B53CF4138CAA41F277C9B1793C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Cloud.AzureClient.dll
- Size 353KB
- SHA256 8ab396a5e64e5a5404666eec185c33d49e48723a0e5d0528608f9a05fae24a39
- MD5 14fb627b506d9fe993d36cda13c7a1ef
- SHA1 6f5e7ee1040fa93fab9f9f8f9a8a48d93948f92e
- SHA512 4a580fa74550cb83fd552d2761844070411d21140a7b82a44b366b072370d62acf925bdba796e7219eae4e10124b47f174d1e1c601f08a31a3eb7b75fc685d54
- SSDEEP 6144:OVlle5Jtn+rBjCo3gGLSVrv0CNj4KSHiReNjK3d0kLaOysrFZd:Elur+Z/+Bv0CNzvRDLByW
- TLSH
  T1CE745C015B708A1ED6AF4AB8D233050CA3F05D4B77B9F79B6AC29DA69C497CD9C011E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryspywaretrojan

behavioral2

defense_evasiondiscoveryspywaretrojan

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy