e596fa3fa7a3366a2a18f433ac43931dda4cbd01d6734623b930c95346d2a75d | Triage™

Login
Reports

Overview

overview

Static

static

1

csrss77.cmd

windows10-2004-x64

csrss77.cmd

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
csrss77.cmd
Size 400B
Sample260529-1synpshs7m
SHA256 e596fa3fa7a3366a2a18f433ac43931dda4cbd01d6734623b930c95346d2a75d
MD5 e620dca4a3f9a9c0285d36611e9e593d
SHA1 b004b0a22dba8a925b3759c2f70b2479c92556d8
SHA512 23f8621e29bf617be84eec665607a3a45e2d2156c279ce5116bcf7fa2011a7713826f712d7edbea847571fb8c09446af495b3fa1e63d2208a5cbded66491da80
TLSH
T1A1E022617C298252DA63B220A48F1C13EBFBA7C3A8505BD2798A6052607B085C0FE6D2
MD5 SHA1 SHA512 TLSH

Score

10^/10

defense_evasion evasion execution impact ransomware trojan

Static task

static1

Behavioral task

behavioral1

Sample

csrss77.cmd

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion evasion execution impact ransomware trojan

Behavioral task

behavioral2

Sample

csrss77.cmd

Resource

win11-20260513-en

windows11-21h2-x64

8 signatures

150 seconds

defense_evasion evasion execution impact ransomware trojan

Malware Config

Targets

- Target
  csrss77.cmd
- Size 400B
- SHA256 e596fa3fa7a3366a2a18f433ac43931dda4cbd01d6734623b930c95346d2a75d
- MD5 e620dca4a3f9a9c0285d36611e9e593d
- SHA1 b004b0a22dba8a925b3759c2f70b2479c92556d8
- SHA512 23f8621e29bf617be84eec665607a3a45e2d2156c279ce5116bcf7fa2011a7713826f712d7edbea847571fb8c09446af495b3fa1e63d2208a5cbded66491da80
- TLSH
  T1A1E022617C298252DA63B220A48F1C13EBFBA7C3A8505BD2798A6052607B085C0FE6D2
- MD5 SHA1 SHA512 TLSH
Score

10^/10

defense_evasion evasion execution impact ransomware trojan
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Modifies visibility of file extensions in Explorer
  defense_evasion
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Direct Volume Access

Hide Artifacts

Hidden Files and Directories

Impair Defenses

Disable or Modify Tools

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

defense_evasionevasionexecutionimpactransomwaretrojan

behavioral2

defense_evasionevasionexecutionimpactransomwaretrojan

© 2018-2026

Terms | Privacy