4b5febd808a71beb48cd221e85a6b139381bd8bdfecde5923a56566209ba2a36 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

LoadTester.exe

windows10-2004-x64

3

LoadTester.exe

windows11-21h2-x64

3

RTCore.dll

windows10-2004-x64

3

RTCore.dll

windows11-21h2-x64

3

RTShutDown.bat

windows10-2004-x64

RTShutDown.bat

windows11-21h2-x64

RealTemp.exe

windows10-2004-x64

3

RealTemp.exe

windows11-21h2-x64

3

RealTempGT.exe

windows10-2004-x64

3

RealTempGT.exe

windows11-21h2-x64

3

WinRing0.dll

windows10-2004-x64

3

WinRing0.dll

windows11-21h2-x64

3

WinRing0.sys

windows10-2004-x64

1

WinRing0.sys

windows11-21h2-x64

1

WinRing0x64.dll

windows10-2004-x64

1

WinRing0x64.dll

windows11-21h2-x64

1

WinRing0x64.sys

windows10-2004-x64

1

WinRing0x64.sys

windows11-21h2-x64

1

i7TurboGT.exe

windows10-2004-x64

3

i7TurboGT.exe

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
RealTemp_370.zip
Size 323KB
Sample260504-ff2jlsf18j
SHA256 4b5febd808a71beb48cd221e85a6b139381bd8bdfecde5923a56566209ba2a36
MD5 eeffc3332c14d37b3d09c0f79607cc08
SHA1 0e2f60080cadd1a3ae82096fe40d40b0e43640b2
SHA512 4711d949fa5dd2495450d8ebd293b7c0acbce10c2064aeade676c5e30339a1af35bdb5f74edbf27353dcf936e6679c191d4fde67240d4aa2d6cc8214041100ad
SSDEEP 6144:YokNKrcL36oF0YL6weRdjDJQ2YqqtzxwYS6RuEBnwj44:Fk8Svajw4dj9oTxw8hnW
TLSH
T1E464235957F13FA0F901C6760AD6DF32A28347570E71B60B84FB9AC7144B41BAC43ABA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

LoadTester.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

LoadTester.exe

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

RTCore.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

RTCore.dll

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

RTShutDown.bat

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

RTShutDown.bat

Resource

win11-20260130-en

windows11-21h2-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

RealTemp.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

RealTemp.exe

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

RealTempGT.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

RealTempGT.exe

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

WinRing0.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

WinRing0.dll

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

WinRing0.sys

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

WinRing0.sys

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

WinRing0x64.dll

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

WinRing0x64.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

WinRing0x64.sys

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

WinRing0x64.sys

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

i7TurboGT.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

i7TurboGT.exe

Resource

win11-20260130-en

windows11-21h2-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  LoadTester.exe
- Size 31KB
- SHA256 f2b70ede45489d35dd32ad61af5ed87b7995a368282770c7a9c41f39ede6f81b
- MD5 a488752b6d5c1c0cad74f9b39a144d0a
- SHA1 a8f435466209690e9f3489b79187ab13c0298dca
- SHA512 011b66c1e1e14ef6edda19ab84cd4b47dda62c463f892760b0da6e24836561dab7fb6d542caad4aea0a8d7fad73d14ef607827399b2aea011634e947e1435922
- SSDEEP 384:UiiiBvafI5w5G1g7blp8pK5+Vj3ZYhcdUb+nmB:UiiiBMIl6hpg4+9Z0HinmB
- TLSH
  T1DFE2FA075F7A5C62EBA5877662BF93379D70B9D20DB8820B0B10ED1C7C313616E9512E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  RTCore.dll
- Size 39KB
- SHA256 6f122b89698a24e29196eb3fd8075b8fdaf5f775fb885de3f1b6f5e678c2dce7
- MD5 11433ab1222cd76c632ba4e2281f88a9
- SHA1 747285c5de346b141f1c0624116b0c1abc7077e1
- SHA512 34cb659c4dfefb057ca767deeeb59aba3b9611862529dd59e8a04ab1230b0693b92cdd18e7d4b507de3295f7036f5f0690e3a66fe86b1b5bd1554f4c60d3001e
- SSDEEP 384:sTqzM4I6C6+SfEg+BMeJzj8pK5+Vj3ZYhcdUb+9AMQR:sTqrC6+SfEg+Bb9jg4+9Z0HimMQR
- TLSH
  T13B035A531B5E2861EE501B7460A9573F5E36AFE158AE10C74F53CC9C0C5A3733B28A2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  RTShutDown.bat
- Size 53B
- SHA256 6c23356aa95edcb13f35bb793e31c41a4c6032ed43eff8a429e193d57d7ac4c4
- MD5 d41751f0c2a76575363d0ae048400953
- SHA1 8be972fa6bd14e253618df7966f50d5ef670b11a
- SHA512 e52a2bfc45682c8eddf77325dfd95567e2fbc820b6f4c6e66a641fc0ae1eba4e0e4e1e40808c1a40d939a714c80c8519ef357c3b9457c221dcf795e95dbd9a9a
- TLSH
  T148900244C035172261019095CE0A824BD027544424D0840C0006949D26F156093742CA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  RealTemp.exe
- Size 211KB
- SHA256 bd1a78f05f208e116a644c1f27f6dc518898afcbea0cf0eb7d1ba3f2b4e9cad9
- MD5 d6a719d22e180fc1aac49d3b8b7ee1e7
- SHA1 7581bbeae184772bfe6474fe8ed083bcab9c38bb
- SHA512 3eaf03ea1730f9249b7ceff4d5ebff590e6075e7a1c894ff866680c931813e3f03066edbf0d3b1fb312c62d00c5aee360605105455cbe034f81136d92b039fa4
- SSDEEP 3072:6RMg9Y1MsPxAKEXtvtYCKvsSYrn98YYKIlxCIKvwxpgP4BQ8oFz8SK9Qqc:sM5MUxSpbPTjIjCI+V6e
- TLSH
  T14C246D30B9E944D2E241673088F963F646B6F9464B318F7B0364D92D39AA2C1B95D33E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  RealTempGT.exe
- Size 215KB
- SHA256 47cf3475cda1b1d94f640139f228d96fd80fb5794ed865c32bfcf388950a6711
- MD5 65a2c5f28207f5cb52d048bb5ae3f3b4
- SHA1 9a36bdbd3b59d8854ed5aa09751635b478550db8
- SHA512 59e73570167d1f8f5026a9f9d6382b793d3d229aedacb667e55c987286207064da161b8a75b84b18ced06d1c0b209aceb7db572e48761e6dfd9440d6ca48ba64
- SSDEEP 3072:tWFzubkKWNvUl88Fe0qjTcLDS4hmWfVDjMbwJ3lm4BQ8oFz8S59u:tWa+UlhFe0sAGUVHKVpU
- TLSH
  T185244B70BEE94095E25A267044B563F65374F8965B314B7B0368DB3E38B7301F92A32E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  WinRing0.dll
- Size 64KB
- SHA256 2a2a466fbe05c6293c442429bad45b223f5742eb0ae254204bdfbaeee24c84d8
- MD5 6fc52a8c0cccd5f9b1cdb3de99cb3d3c
- SHA1 f15af33a43d6af621159ec0d74a7a7b09cb28a73
- SHA512 8b56ffec3d1e7455f09a09c441c002018649310d107080fb8cc3f74d67c893712e1edbc01c14f9a53d230994e499a2434d43449e888493e0daa858359ee1b2ed
- SSDEEP 768:gRP1qwVjsRDoomqfLYowvIay/scqQOTtCPzVMei:UP1Q0oQway/Cntezk
- TLSH
  T1E4533B18BD9380B3D5094B38A6D247C14FFE5D0337E660EFEF96090A49E12C896B96F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  WinRing0.sys
- Size 14KB
- SHA256 206ee7a7c3f4d9496f742ccb84718f556ecb4ba2a95fe7e0cdf3a003ffbe4597
- MD5 845af1ba23c8d5e64def61bcc441604c
- SHA1 8ac34eb21b9b38f67cd29684c45696c20ab2e75a
- SHA512 0c2d625bbe5b1902cd371f4e1a3dceee6401aa9fa0b25f4720277eaaac3576c2029d7db3ae9983382e4ca8f0415ccd4b0e6c1eea864e7886276f93047258475f
- SSDEEP 384:zkg+wW5QDV08teHn+EgTWGYOf2OJ06dUb+m:JDV4+ECtfSJim
- TLSH
  T161523B875B3D1926EF968F7091EED6531C3EF2C09FAC659B522285DC2C103E06F2865E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  WinRing0x64.dll
- Size 56KB
- SHA256 dee350ebaa93f8c0510d61dbe95a3e33ea68c49058c7120e1fea5d987f9921dc
- MD5 b197b687ebdba80f965335483d178efc
- SHA1 e6dd89bd8e29c66be84b00154998046fff3ffa00
- SHA512 718bb7b14a5dd9981226cba24966fb92061643c42c241096732dc6354b24619f17160a1a8aba35d04b5934079c7637f8479b3f4def76245443f230ab32b622c6
- SSDEEP 1536:PabN1P2LlFWUgxhL3CKwfEQuTrbrjbKE:Pabr+LlFWBx1wfHuTrvjGE
- TLSH
  T18C43499AB39320FAD866C238D9E37A4AFA71B82907B51BCF4624845B5F337E0553D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  WinRing0x64.sys
- Size 14KB
- SHA256 11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5
- MD5 0c0195c48b6b8582fa6f6373032118da
- SHA1 d25340ae8e92a6d29f599fef426a2bc1b5217299
- SHA512 ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d
- SSDEEP 192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ
- TLSH
  T1096218874B7E1906FB969F7592E9C7936D34F6C0CFA825CF421299982C413E0AF2861C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  i7TurboGT.exe
- Size 55KB
- SHA256 357da77e83c85cef0b930547c8a0c8662829fea0befeded0f7e3949474ecb94c
- MD5 48e61f94beb8b46a906ad7e95b38e73f
- SHA1 6b01513e77ac25630d5976fa7044eca3496af856
- SHA512 8d7f4a7621e36e8dc0d7080fe2d08b1068d0327076e343090dfec6537ecb5dc86e45cf6797cd1aaf90c8ded8fc683b2f3f5c1db7d8902201702963ec8a71ee9e
- SSDEEP 768:KMgzGjiO9raKHWHS1EhmsTJa3W94OVEZBtoW2AgSbtFDW5Yg4+9Z0Hi7FDK:1nH6S1EhmZ3WCjt2AxtpWaD+9WiBDK
- TLSH
  T146435CA35E56C466D300887041BED3B6CA72F96225258B1F7BD8DD3D393AB42ED1832D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

© 2018-2026

Terms | Privacy