21b3cfb8cae8ecc77349cf076cfb8218ca0dbee91ae9990fcb95b615c375e305 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

setup_autoB+3-1.zip

windows10-2004-x64

1

setup_autoB+3-1.zip

windows11-21h2-x64

1

AUTORUN.inf

windows10-2004-x64

1

AUTORUN.inf

windows11-21h2-x64

3

Licenta auto B+3.rtf

windows10-2004-x64

1

Licenta auto B+3.rtf

windows11-21h2-x64

1

ProDinamic.ttf

windows10-2004-x64

7

ProDinamic.ttf

windows11-21h2-x64

3

resurse/do...35.exe

windows10-2004-x64

3

resurse/do...35.exe

windows11-21h2-x64

3

resurse/in...ax.exe

windows10-2004-x64

7

resurse/in...ax.exe

windows11-21h2-x64

7

resurse/msi31.exe

windows10-2004-x64

7

resurse/msi31.exe

windows11-21h2-x64

7

resurse/un...er.exe

windows10-2004-x64

7

resurse/un...er.exe

windows11-21h2-x64

7

setup_autoB+3-1.bin

windows10-2004-x64

3

setup_autoB+3-1.bin

windows11-21h2-x64

3

setup_autoB+3.exe

windows10-2004-x64

7

setup_autoB+3.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
setup_autoB+3-1.zip
Size 700.8MB
Sample260517-qs8tkacw7q
SHA256 21b3cfb8cae8ecc77349cf076cfb8218ca0dbee91ae9990fcb95b615c375e305
MD5 f6fade82f6fa3d411d9ea70558ca86ef
SHA1 9c865b1d266936355f54240db91e6ac61695ffb3
SHA512 b3766f5a0ac40b516185a16a2ef3e644a72c1d084523481c22078648951abf427b8134ff50bd6b200204731490f73886acab51cb598f1a0f47c34d18fa4d9758
SSDEEP 12582912:ZClfI4L5qIzvcURO+H2bPP0uF/ProcHH9nIhqcoWE7ixES6FzoI0ZAJOPllenXFz:IlfICXzUIaP0uBn9IhqcoWExnz6ZAYPE
TLSH
T1A67933B740382C29B4FCD73BB62568547218FD96952CF7FC886AEBF18A654C74048A1F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery installer ransomware trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

setup_autoB+3-1.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral2

Sample

setup_autoB+3-1.zip

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

AUTORUN.inf

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral4

Sample

AUTORUN.inf

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

Licenta auto B+3.rtf

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral6

Sample

Licenta auto B+3.rtf

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

300 seconds

Behavioral task

behavioral7

Sample

ProDinamic.ttf

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral8

Sample

ProDinamic.ttf

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral9

Sample

resurse/dotnetfx35.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral10

Sample

resurse/dotnetfx35.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

300 seconds

Behavioral task

behavioral11

Sample

resurse/install_flash_player_ax.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

300 seconds

defense_evasion discovery trojan

Behavioral task

behavioral12

Sample

resurse/install_flash_player_ax.exe

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

300 seconds

defense_evasion discovery trojan

Behavioral task

behavioral13

Sample

resurse/msi31.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral14

Sample

resurse/msi31.exe

Resource

win11-20260513-en

windows11-21h2-x64

5 signatures

300 seconds

Behavioral task

behavioral15

Sample

resurse/uninstall_flash_player.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

defense_evasion discovery trojan

Behavioral task

behavioral16

Sample

resurse/uninstall_flash_player.exe

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

300 seconds

defense_evasion discovery trojan

Behavioral task

behavioral17

Sample

setup_autoB+3-1.bin

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral18

Sample

setup_autoB+3-1.bin

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

300 seconds

Behavioral task

behavioral19

Sample

setup_autoB+3.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

discovery installer

Behavioral task

behavioral20

Sample

setup_autoB+3.exe

Resource

win11-20260513-en

windows11-21h2-x64

5 signatures

300 seconds

discovery installer

Malware Config

Targets

- Target
  setup_autoB+3-1.zip
- Size 700.8MB
- SHA256 21b3cfb8cae8ecc77349cf076cfb8218ca0dbee91ae9990fcb95b615c375e305
- MD5 f6fade82f6fa3d411d9ea70558ca86ef
- SHA1 9c865b1d266936355f54240db91e6ac61695ffb3
- SHA512 b3766f5a0ac40b516185a16a2ef3e644a72c1d084523481c22078648951abf427b8134ff50bd6b200204731490f73886acab51cb598f1a0f47c34d18fa4d9758
- SSDEEP 12582912:ZClfI4L5qIzvcURO+H2bPP0uF/ProcHH9nIhqcoWE7ixES6FzoI0ZAJOPllenXFz:IlfICXzUIaP0uBn9IhqcoWExnz6ZAYPE
- TLSH
  T1A67933B740382C29B4FCD73BB62568547218FD96952CF7FC886AEBF18A654C74048A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  AUTORUN.INF
- Size 35B
- SHA256 bf0ec741bbfbce883effbe84372bc0f307623a799825c7587503ff9562528b95
- MD5 a288dd21f2d129ad1bdb8e661b92f54d
- SHA1 c86f478b6939419f62aa423bb71486407d260591
- SHA512 89e6a8e4b7c83a31f1cdfcf895714ca4263922fc1d30840e6f6e8f60a48e139f46611b53fadda0e01d3f84249f5a9377005e14cb17037bd68093bb3b13159422
- MD5 SHA1 SHA512
Score

3^/10

ransomware
behavioral3 behavioral4
- Target
  Licenta auto B+3.rtf
- Size 60KB
- SHA256 e61bb0ad2b491eea1923cb218e2c421df37c4286094d0d611e6408e03a41ab9e
- MD5 1c80c1cb668a28226913f5c20e75de4b
- SHA1 845bf4fa1f4d8fbb8d01f456de04edfc247d4e7b
- SHA512 d6b7f6dbaf96eef5abaff36522ceb4eff25cdfccbb26250ba065bbdfe985661a5b86e90acbf0d097a9f7cc50e3c35d3df3bf9ffb1f6446a85e189a472ae0f9b6
- SSDEEP 768:vNeLEvqoiMofZ+pG9VIbgifZ+pGZuIbgifZ+pG0v1wFe+xdtkOBY+5pe9onA1mMk:vwL8e5W1g2Y2gvrzY+Rt8
- TLSH
  T1EB5352B814069B49D36363C9E619F08C6A3BF40445FAB0ECF2FFC3FA54769A8E959411
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  ProDinamic.ttf
- Size 311KB
- SHA256 894cb6fb645da94f89bcc803eaa62cead0d87980eb370cf4f99d09fb75b8d084
- MD5 447d1c29b6910c19c65346bd1a6d8997
- SHA1 089a48bf3cfdd3bd24cf8b115198aaba172df609
- SHA512 35bc5d39c0d8365a714cd4a5abb16fbf1ddc0cf486a229363bc6b2788434c2b128a163088eddc65f1806e29fdd54dd1a434029a1c803e35139c8126fc2b967ba
- SSDEEP 6144:Fst8BzrCwy9r3bcL3pTHGp4t4UqB7msYL2nbvl4Omty:FKUzWwS7bctGpshq9S2nbvl4dty
- TLSH
  T125649E5BE3B7570FD7202B358970E765B31CBB499B11837B2B092D98ACD98D88F15232
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8
- Target
  resurse/dotnetfx35.exe
- Size 197.1MB
- SHA256 3e3a4104bad9a0c270ed5cbe8abb986de9afaf0281a98998bdbdc8eaab85c3b6
- MD5 d1b341c1bc8b96e4898450c9881b1425
- SHA1 0a271bb44531aadef902829f98dfad66e4a57586
- SHA512 6138cc7fefe7529d4b674f9b1963e529e13d59ea52b1b860b71c8f9d7dec5fd55a1826c8bce3414002925ea33c3aeda061f347730ee5d2ec7c699e5bacab0de3
- SSDEEP 6291456:ocLDZ5/5MIUx8uVIQQxbRmm/9JAmFvxoYf:HL/+IUiuVIQQN4I9JnFvyE
- TLSH
  T135A833FB50F85F78D19CE238D671714EA43499B2980960F7FC7AF7A00C8B5C7066869A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  resurse/install_flash_player_ax.exe
- Size 2.7MB
- SHA256 9ecba7f956188db16f65f3cd3092e508fca34d4b7e65b93accbc85353df3ebe4
- MD5 ea65daa3e1216f26d6c7935d39e542d7
- SHA1 07908231028f68098902d5aa52812b7e27f8497a
- SHA512 184eca0bb8359e2f605fa3bf1836bdfc9780f05c9138f1de5739921575f0696258877b589281cd21fe28db2b6cfcfd2268a422cf9cee1548a2ca956680867d90
- SSDEEP 49152:4urvl/FJeQ9FByKC3htkJbsr3n/xAodYNQTI4RiJ+K16lfviz50CQbdBqiMO4RB9:ZN/TeuryKuOq7pZWG8P0lfkgxS1R4K
- TLSH
  T1B2D53313ABE41176F0B37F706A39B46555B6BCA05A30D33FA64C38CE6E743904B617A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral11 behavioral12
- Target
  resurse/msi31.exe
- Size 2.5MB
- SHA256 69b61b2c00323cea3686315617d0f452e205dae10c47e02cbe1ea96fea38f582
- MD5 342f79337765760ad4e392eb67d5ed2c
- SHA1 8318455b36ba0a748307459279d46f2f4cdb5a0e
- SHA512 70f32d415c70a97eecf0280ee9e6b10db8f367eecfedd92fca6155a7db19a776d2a96d5fcdbde847036f4d7cf2e69b1d6df6c073025582097f28c71f607b7e12
- SSDEEP 49152:nKiC/rk62xWNol+5gOsLO66qJ6021cJjLtk4pWGNG5VGFPNqJyoTL:orZ23AbsK6Ro022JjL2WEiVqJZL
- TLSH
  T1FEC533450756A909E024017D9C832B9A3D67A4657F37AFB7A5CB042C6D38382FD2AF4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral13 behavioral14
- Target
  resurse/uninstall_flash_player.exe
- Size 227KB
- SHA256 1c9c56ef8849271ac6df841f3e14e65845200a2ab5ab17a21392ba0e84c22395
- MD5 f7d4e31914fabe1cb3bd35bd200d3dd7
- SHA1 a492e6141929a02e603b708ac09cb06406774a15
- SHA512 abe3e7ebad054661ec3e8428f0bce5a0e74ec3a855b6fdd4df0a7cccbb3287876de270f7e98fd3a8b58ac359c15e725ed84fa9e4697c18d414a52041bbdcf01e
- SSDEEP 3072:F0tNJ/69bpjrp8KVocBvovgXnsyW0U/slqpPcwDcuuhX0GJeHImIsgu:WtNJ/6n29cBzXzWIePlu5dX7sR
- TLSH
  T1B234CF1377D48676F0B22770AD3AB75616B2BCA02C31D71EA78C3A4E2D327548762772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral15 behavioral16
- Target
  setup_autoB+3-1.bin
- Size 497.6MB
- SHA256 2d6229285e57936c81eb1889697eed19cc9280ebaba868cd089790c54506703f
- MD5 1f518c47e9aff8c74d0e53024afa5502
- SHA1 3c185ac29c8e8a4af50a63a07eecba719c02df49
- SHA512 bc86a33dff4e7479e51c7d660c31c7ff26814038d0e12945c5cf4a7be6bb7282e42bfe8ff996e3eea844fcad9db4d91c0580a45f5be479969ec5abdf0bcddd12
- SSDEEP 12582912:yMzNweB164/pyIv6uTgV/3ccPjxj2Cnfh9ExOwakEdITqch:PzNwYF/YuK3cKffhixOwakExw
- TLSH
  T1D3493322062928BE7DFCDF4B256954907315BE08443DFAAC84FD5AFB57B44DA400EE2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  setup_autoB+3.exe
- Size 777KB
- SHA256 8d2efab6d2481382df309a7a54bfc008a18a21240e1e23d035c93db70eac9a2d
- MD5 950f4ae0732c56a41db8cfac5ff1c721
- SHA1 102c20126ec1b5a3ed96e8b101a89f954df7d61a
- SHA512 486c924350fe3d60b2807b148963acc374d728ba820a5bb17cd56bab148c4b54f037ee09c80413a88849b942c4af1270420f4c8ef7e0305d5e79715606f830ea
- SSDEEP 24576:hQiQZXgD0rwcC4dnArDoRvgld9lVl5OrxgLS6D:h9QZXgDyTxeoRvgld/v5Or2LBD
- TLSH
  T15205E016B656E536C94D0E745D76EA2427BAFE247C60013F72AAF3BD1B333916C0260E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

defense_evasiondiscoverytrojan

behavioral12

defense_evasiondiscoverytrojan

behavioral13

behavioral14

behavioral15

defense_evasiondiscoverytrojan

behavioral16

defense_evasiondiscoverytrojan

behavioral17

behavioral18

behavioral19

discoveryinstaller

behavioral20

discoveryinstaller

© 2018-2026

Terms | Privacy