4e5cebe1908e12e8a4ed1198fb01fb87871dbe54847855b11b3540dbc47bbe88 | Triage™

Login
Reports

Overview

overview

Static

static

260521-wt3...ed.zip

windows11-21h2-x64

4

260110-31c...ed.zip

windows11-21h2-x64

1

cone.exe.zip

windows11-21h2-x64

1

2to1ep.exe

windows11-21h2-x64

main.pyc

windows11-21h2-x64

3

4363463463...63.exe

windows11-21h2-x64

8

Synaptics.exe

windows11-21h2-x64

TsarBomba.exe

windows11-21h2-x64

cobaltstri...de.exe

windows11-21h2-x64

ed01ebfbc9...aa.exe

windows11-21h2-x64

random.exe

windows11-21h2-x64

Resubmissions

22/05/2026, 11:01

260522-m41qjsht3q

22/05/2026, 01:10

260522-bjb1xaet6110

Analysis

max time kernel
149s
max time network
146s
platform
windows11-21h2_x64
resource
win11-20260513-uk
resource tags

arch:x64arch:x86image:win11-20260513-uklocale:uk-uaos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 01:10

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

pyinstaller 1359593325 backdoor xred trojan cobaltstrike

Behavioral task

behavioral1

Sample

260521-wt38csgz71_pw_infected.zip

Resource

win11-20260513-uk

windows11-21h2-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

260110-31cgjshz9e_pw_infected.zip

Resource

win11-20260513-uk

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

cone.exe.zip

Resource

win11-20260513-uk

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

2to1ep.exe

Resource

win11-20260513-uk

windows11-21h2-x64

42 signatures

150 seconds

backdoor 100000000 runtimebroker defense_evasion discovery execution cobaltstrike donutloader koiloader metasploit mythicapollo quasar salatstealer xworm installer loader miner persistence privilege_escalation rat revoked_codesign spyware stealer themida trojan upx

Behavioral task

behavioral5

Sample

main.pyc

Resource

win11-20260513-uk

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

4363463463464363463463463.exe

Resource

win11-20260513-uk

windows11-21h2-x64

8 signatures

150 seconds

Behavioral task

behavioral7

Sample

Synaptics.exe

Resource

win11-20260513-uk

windows11-21h2-x64

24 signatures

150 seconds

backdoor beyond defense_evasion discovery execution asyncrat lumma xred persistence rat stealer

Behavioral task

behavioral8

Sample

TsarBomba.exe

Resource

win11-20260513-uk

windows11-21h2-x64

69 signatures

150 seconds

aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat dragonforce gh0strat hiddentear jlocker lockbit masslogger modiloader redline rokrat sectoprat umbral valleyrat_s2 vidar vipkeylogger xorist xworm impact infostealer installer keylogger persistence ransomware rat revoked_codesign rootkit spyware stealer trojan

Behavioral task

behavioral9

Sample

cobaltstrike_shellcode.exe

Resource

win11-20260513-uk

windows11-21h2-x64

2 signatures

150 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral10

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win11-20260513-uk

windows11-21h2-x64

19 signatures

150 seconds

defense_evasion discovery execution wannacry impact persistence ransomware spyware stealer worm

Behavioral task

behavioral11

Sample

random.exe

Resource

win11-20260513-uk

windows11-21h2-x64

32 signatures

150 seconds

fbf543 fc155c5bf8a148a93a2ba17de68393f0n rif0lm defense_evasion discovery execution amadey vidar persistence stealer trojan

Report Analysis Logs

General

Target
cone.exe.zip
Size 43.9MB
Sample260522-bjb1xaet61
SHA256 4e5cebe1908e12e8a4ed1198fb01fb87871dbe54847855b11b3540dbc47bbe88
MD5 5e4a348e89afb91e6ae698f3104f7b47
SHA1 1ea7e4faa29e2803f50165f63815003fe22b8cbd
SHA512 a4282f90cff85a5802c551c770b2e849ef745bbde8c707d6878c841102d98bdcfe86c014df2acf34fb4471713d990265d0eaaf129dd560898785b8e7ebc53666
SSDEEP 786432:aGUqxoNIwFhSVPEgA5PjIXom0Fk/JK2a8Zq9HdQFaybEdhPm3dutgEXzu94Pa2SJ:aDySIOSVA7IJQk/JK2amQkTwdhPt1S2e
TLSH
T1E8A733667F1BF7D8F0499FA93C60C196559BC6C9834B0C28CFA3C720EDA78E66641478
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\cone.exe.zip
1⤵
PID:4356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy