66de99bd54ccae7e3fe3756aa3001c9dc7d41119e663906628323365b150ee4b | Triage™

Login
Reports

Overview

overview

8

Static

static

3

BugReport.exe

windows10-2004-x64

3

BugReport.exe

windows11-21h2-x64

3

Downloader.dll

windows10-2004-x64

3

Downloader.dll

windows11-21h2-x64

3

QCK.dll

windows10-2004-x64

3

QCK.dll

windows11-21h2-x64

3

d3dcompiler_47.dll

windows10-2004-x64

3

ffmpegsumo.dll

windows10-2004-x64

3

ffmpegsumo.dll

windows11-21h2-x64

3

js/adb.js

windows10-2004-x64

3

js/adb.js

windows11-21h2-x64

3

js/comm.js

windows10-2004-x64

3

js/comm.js

windows11-21h2-x64

3

js/init.js

windows10-2004-x64

3

js/init.js

windows11-21h2-x64

3

js/rm.js

windows10-2004-x64

3

js/rm.js

windows11-21h2-x64

3

js/tips.js

windows10-2004-x64

3

js/tips.js

windows11-21h2-x64

3

libEGL.dll

windows10-2004-x64

3

libEGL.dll

windows11-21h2-x64

3

libGLESv2.dll

windows10-2004-x64

3

libGLESv2.dll

windows11-21h2-x64

3

minibrowser.exe

windows10-2004-x64

6

minibrowser.exe

windows11-21h2-x64

6

minibrowser_shell.dll

windows10-2004-x64

8

minibrowser_shell.dll

windows11-21h2-x64

8

natives_blob.js

windows10-2004-x64

3

natives_blob.js

windows11-21h2-x64

3

qb.js

windows10-2004-x64

3

qb.js

windows11-21h2-x64

3

qbcore.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
minibrowser11_rpl.zip
Size 33.6MB
Sample260602-pec93acx6x
SHA256 66de99bd54ccae7e3fe3756aa3001c9dc7d41119e663906628323365b150ee4b
MD5 1f8a24c95a75d82685ea3ee15da1d797
SHA1 b5ce9048d7dbd31cb3cb2000b1e2a6a10d80fa5b
SHA512 b1c729108c9363be6e73d6f44866c3bfe9ec9240388cc6477653dbdf42f331045286abd00c86d96ed597bdd2c58d9b68825eff3eddafedd0c2c98066dc134985
SSDEEP 786432:cfzEdAs5Jb9sS9tQAosuarlkP0YAe3bMBTgLByTtaq22mc179IZL:cgdf5d+nZP0LeLMBuyTsChIZL
TLSH
T122773351FDE7A79C5A5DC017F688FEE98E2E2870172BCC90271C12E9CC6E99E6D30152
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware bootkit defense_evasion discovery execution persistence spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

BugReport.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

BugReport.exe

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

Downloader.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

Downloader.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

QCK.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

QCK.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

d3dcompiler_47.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

ffmpegsumo.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

ffmpegsumo.dll

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

js/adb.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

js/adb.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

js/comm.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

js/comm.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

js/init.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

js/init.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

js/rm.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

js/rm.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

js/tips.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

js/tips.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

libEGL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

libEGL.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

libGLESv2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

libGLESv2.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

minibrowser.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

adware bootkit defense_evasion discovery persistence spyware trojan

Behavioral task

behavioral25

Sample

minibrowser.exe

Resource

win11-20260513-en

windows11-21h2-x64

6 signatures

150 seconds

adware bootkit defense_evasion discovery persistence spyware trojan

Behavioral task

behavioral26

Sample

minibrowser_shell.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

minibrowser_shell.dll

Resource

win11-20260513-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

natives_blob.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

natives_blob.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

qb.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

qb.js

Resource

win11-20260513-en

windows11-21h2-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

qbcore.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  BugReport.exe
- Size 448KB
- SHA256 ab691e7cc6d8b6c9c6aa2c0ea23e652c97009c232c2f5f3df5c515f879243201
- MD5 5f3eb5566e4906bbb1d1d80afe2c1a3c
- SHA1 fede082ff46c05ab9c5fbb4cc4d9ac246ef97667
- SHA512 40e53e4e3548c88c3b0d062c1415e9272008f610b7f618b6b9d743005aa2df1dd519e68fd6a0fba7d73b9b1e5eb150f16eb60476a3811bff57a2f97021b443f2
- SSDEEP 12288:xeXTychB0EvS0YgtCOrRNJ6YHTMakG9YXC:wXTychW8S0Vt5kSTM09YXC
- TLSH
  T113A49D12B5819031E1B311B48AAABF31557D7D30173608EBA7E8BE5A1A706C2FF32757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Downloader.dll
- Size 1.1MB
- SHA256 7f947fc58357179a575e4f2521422dbd7b9eed6e1def1ff640c5002a413cc151
- MD5 31779a7f8cd17f46a80f581a0c9db8a2
- SHA1 b4549798a83fab75d20888fc288e0bd1fbde1047
- SHA512 0b4083bc27cb1a4d035dfe009390752ae084dffebd7633b7762f47402ae60c95186d9f5446363be770a356ac842995af4eb2b0664d2e8baba746f60b95612921
- SSDEEP 24576:UCsWemoQxRUQoQkJwEQKBY8wqj/NFDNwJ3UTILR0QS3rSp:re9QxenQiQKWW/NFDqpUTKqz3rSp
- TLSH
  T1F9459E12BBC180B3E27302B18A69BB2695BEBD706C31C50773DE7B4F1F70591691AA53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  QCK.dll
- Size 350KB
- SHA256 95de1176179b038ef5d801ba18a0c61659d5a89a046ca3063e17d82aa15d5318
- MD5 452e8b185ea31cbbb964916b569a48f9
- SHA1 f27b3601a3861eaa1bd2b9abaeff645dc24f3710
- SHA512 d382dbf052f94497d340a236353e855e7fd4596b3224fcb27579b39bfe0c34e13bedf458b976b03414e3c8f98c04269de4a59a6da60d8526f9789bc050f15bc5
- SSDEEP 6144:hp9SERLw1yiBiRP+G3UpLlCrO4PHzrGH/r0iEUwgLV2mozFtOvmesmMDU2uTKrRN:hp9lRLw1yigRP+G38LV2mozFtOvmesmK
- TLSH
  T11274AD11B3418031E4AE02B4B578AF2A057DBEB25BA299D7E3D80D1D1E346C2B735F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  d3dcompiler_47.dll
- Size 3.5MB
- SHA256 eb89735a82a1722c4f544d892767b5c0b447344b5c0a20ca175a0d31714dff44
- MD5 d3dd5e4c3ee0589a70952b9eec646f55
- SHA1 58bf8f148e57d8333b769f408073ff529f73c07f
- SHA512 8f36229a98306385918b111e413b8c76e1916d638f6b56a5db41c34551973dc6dccf9d1169eeb7dfafae8c77cf0893254084bd91444351a94a5f3179621347f4
- SSDEEP 49152:isxztRVg63VCssRWQnP33DPFeYjLpZyLpsRug4TJz07+Kw:iOzrVgoVCbfxTpkpsRugYGw
- TLSH
  T12D067F22F70180B2D8CB01B1659E7BA6997C9735473805C36164BE65FC707E32F3ABA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  ffmpegsumo.dll
- Size 1.8MB
- SHA256 512656cebe2aeb7e89ae93cbe93046f51d81900b07f94d0fcc3b6b9691b4ea23
- MD5 e2253d906732ecdf11f7f9e948f6b25f
- SHA1 b34f15bb1fa26d8c0a2157810ba3c3a1327fe7b0
- SHA512 e19ed87d06cabda46756daa419bab2b4a28285ce9a64d78275e7b5ee140236846e2f8690e9c2e5eee31b1ff9bbdc3ffca66ccbc5dc7f54d2f6b5befa6e31f815
- SSDEEP 49152:MTdSyG4/THMCs2tP/6kzztwKw5bbY03OIhjYlp2+Bz7:odSyG4/THMCs21lwfRErf3
- TLSH
  T1B895BF12F551D662F4910032C7BFAFA6797C1B38031950F3878469A9BEB4EE2A277347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8 behavioral9
- Target
  js/adb.js
- Size 3KB
- SHA256 c5605789ccf7ad7c393952434a9a5e08c3a03d2cae6cc11b2e0f909063421a66
- MD5 1ad964eb7b3d17e5b40d5d0b0f85bfb3
- SHA1 ded379a2b17c363a1e429a6856ea7513e82e1efc
- SHA512 30c1870570774f7dd0dc631274943d1410e97aa3f76b392506fc8e1a1df5b803cfad8c69dab1e600556a23f085dccb03cdca41c952893a0491f8250c5b02ca1f
- TLSH
  T1188124673069022947EFE35AA9784B8638B080389F5DF69EBD3CC8556031FC938D57D8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral11
- Target
  js/comm.js
- Size 743B
- SHA256 6815fa15915dc6dc31548dace45e8e60bb929abc9823d8cf64dfbe689326457e
- MD5 2a7c5c2cf30dfb55bd4e4be9393d6ee4
- SHA1 4dab0f95457451b5b7064595a3313fed6641d194
- SHA512 11914655e002045b3179fb9f4d1b985128f96f2f43f0ed15e56930892eb719edeaa7bdc0d0eabd1ca59cb8ff45d466f8bc3109b0f9b82d24c6259ce23c88f6b9
- TLSH
  T18D012DBAADC28534E28A4565D0BB73FC7DB9005A52019CB7506C16F1CF417D98661C89
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12 behavioral13
- Target
  js/init.js
- Size 2KB
- SHA256 9c6c3f9ae687cebb6e5ea28046d28a4a591eab6c480bcd5ac4208e18addd2163
- MD5 a1ffe75e9d97caeb208084104707224e
- SHA1 7c01b13a6b093e25e2970a4e8a8147800a9a6d55
- SHA512 a3a8779facc379e129ecd362f7957f416760dfa8a9b2703d5c697dcf754d880c5809dc6ba397f07240c743f47ee3f82686ece39d52f2ddf62a4c8ed735734b75
- TLSH
  T1855137B66CD3457C58B734BC9377AA6834EC00332206CBF877DA32605F727A15955AB8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14 behavioral15
- Target
  js/rm.js
- Size 17KB
- SHA256 6663de956016f392ff6d34c80d46648559d332f67f44feef79d58358b4d82dba
- MD5 0b4e7452d8b746c681335ee692e627e4
- SHA1 6821f9ddd5fc32778ec04f68d6ee865a864f6bb4
- SHA512 28cdc2a20b6e245c1571c3245606d7ebec6d31f7ce221d2bba9bc41ab170dd42662c2e9c5d8561386fbaabb57079b616229a430a19ad752c8c96c6310da58b8d
- SSDEEP 192:9mSVnyfYjY/iB70kO9xRhLW7yTrkyOVzCtA3yuTGFDmhkY3DlQH9L3A3PM84b:X2rhKWvk2+QdFb
- TLSH
  T12A824528A4A541314A3BA3FBB7AB7785FD31001F641245753C9C8F8D2FF0A5156B2EE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16 behavioral17
- Target
  js/tips.js
- Size 27KB
- SHA256 bc22b3f7d2c7a9c5a26eface7f03b1fcb4312786cdfa2d75a9f4c01bd29c24c2
- MD5 c8c64d9a33821ad291d6844fcc5b5d69
- SHA1 c9fcfcd3ec9fb0c1c0488e0120da4f7db19803f1
- SHA512 2b87bb9e51b62f482193971782f8a40c084b8e97d9beb97c4b24f1d9553e40aad145bcdf7874dd0c58354783bf092700ad2b43167eac0f74136d2c6575dd5ab9
- SSDEEP 768:u+GYTpvGjwV/bvGjKfme+6q8R9XgpmOhXehYPWz0seYShzTc0HReL3ShVWprlW7B:ejw5bvGjKfme+6q8R9XgpmOhXehYPWzo
- TLSH
  T1EAC22D62B2882D6142D78281103185ECFF3DD43B52523C16BB9DF2A21B7ED94E7D25BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18 behavioral19
- Target
  libEGL.dll
- Size 90KB
- SHA256 ffb1089193dd01c0ede6e60739437dc50b3a2cfc7f0bd419a33b39884f34f480
- MD5 624a67e3c3b2f7144eeb0ca38a1ae110
- SHA1 4a171e19e4914f9bfe45a6f3fe5822bb695972c8
- SHA512 2f2d3aff39f4a84e9f9fd5002a66b7c4c4125bac5988d0d32bd066513dbe8c90423db71eb96e5613e45dcafcf6af71d0364601ce7c922aafb0168802dc6f573c
- SSDEEP 1536:GfT1AwQkx0VQ1FvG6HzX4+C2PL5jIjsWzrcdQi04diIVoQ+GrghL:GbhDzFtUh6Qir5VojGI
- TLSH
  T100939D01B5919832E8BF0E3550B0E6616E7D79505FE1CEEB3B99121A0F603C1BF35E2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20 behavioral21
- Target
  libGLESv2.dll
- Size 2.2MB
- SHA256 ed947484b1874e492c2831f9dd5dbdee0c6cbec39c7125df3611e4a77bdd1d8a
- MD5 c55b2e2a2783ed6833b76b86dce9970f
- SHA1 2e7981cca32dcc66ad677759336a05fa664f6fd2
- SHA512 ac44302c34387a01ceac835eca32b75e55da5d69a97d4ae4cdcb5e909de36d5a9e14eb5d38c5ea9eddd1b09ba9d8859822b6b084e0ae8a05c12735dbce65ac16
- SSDEEP 49152:bqEJsJeD4TR6qsKg8nAvWXKBrjkevLrDMIopgWkr7l5/FKovkkhpK:bqE8PrzAvJDrDMIopafl1skhp
- TLSH
  T137A59D12B541C179E8F305B199FD3FA9916C8B24033645C7A3C86C5EAAB46D33B36B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22 behavioral23
- Target
  minibrowser.exe
- Size 658KB
- SHA256 9f476ab20faf025f420b8afc6413aff202ad401aa10b4a1571cca20f86d30df6
- MD5 d1c66f582638da4bf2ee4508c94a0b03
- SHA1 58965fb9a6da9afe820f3f5570b1d37228148260
- SHA512 688fe1def559f0b48ab36ca54857545035c355a87f78ff3c8e8897790165f69f6efac34706e6a8128492ca179c4266f88f4f09f2ae07ae2b72db125c9e508d47
- SSDEEP 12288:YxHvFbeLmX4lDw2t7uj8nDJaeznlUiM1DTKf0+Z142IbdOwJY9bMCEmvRuTySSx6:mHkZ1NIbE39b4m5siTQ9d9HVd4JN9Q
- TLSH
  T1BDE46C117682C13AE6B30271DD3CAB19187EFA620B2656CBE3C40E5E0E749D26F35767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware bootkit defense_evasion discovery persistence spyware trojan
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral24 behavioral25
- Target
  minibrowser_shell.dll
- Size 13KB
- SHA256 53c9120e155bbca1053da5b6ac7e91ebb98be4035e697e50bfdaef0af83bed8f
- MD5 1e0c4f03255bed572b00a55f3428c0a9
- SHA1 cd9950a84a60718c858467a38450b68b4d995900
- SHA512 b8471e084a81155d54b9fc8d97093188aa11b4130a669c40e857d3f5205bd66274e17d4d113511646daba3f55bfe2f4e5d1f46b40b5f521e90b1007654954bd7
- SSDEEP 192:mbLfkF746+ggv7UkwLy4nHkt/qvVAy/IDc:mbTcE6+geUo4ncyw
- TLSH
  T174523B07FA9149F8EB21C232C4234E59D1767A204BA263DF833075291DB37876E7DB85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral26 behavioral27
- Target
  natives_blob.bin
- Size 358KB
- SHA256 35d85320e2908240da1dc8a577da3aad702936999336a3dcc0576b00c13e9756
- MD5 16a819fdcc843cddfaa0f1d4c7d143bd
- SHA1 48d700ab8c8f22aef074d0a3c9f2b40a84a412d5
- SHA512 571f47911441ac31cea080a5d24a38351331dc5d8c9a09ef0ed7f61d439c4f81b27d4e25d73dbc64e192658d3e5415c42026e64cfd0885fb15cdea17cafdd9de
- SSDEEP 6144:BbmSHseCvxC56MQD6dDH9h/ehAzUoht5DZhlkEDLv5No6PxbddS:BbmSKChfzUoht5DZhlkEDLvPo6xddS
- TLSH
  T1D574F959BDA5ACA742F248F8440F150EBDBC89699468D0D4F1CDC8E01FFA226563BB3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28 behavioral29
- Target
  qb.pak
- Size 1.4MB
- SHA256 3f632d0ac077602a465b3c8b3da676966680f895921d6dcb205c7cee570f0711
- MD5 52d2c00f146817e268402450edad12b4
- SHA1 d54601533aa2c1e8cbee80cd4630ead36d7497d1
- SHA512 219937bddac0c773dcfd98a25d28ab40180c4a4f81d55f126b2829f5b63f120f5a56d4ed1f44cce1b08d64d2cade9e0c62f87d6ad8ee1fdf259581538fb71241
- SSDEEP 24576:nFmzDqG2KPdqEP7bIjcQddDsUMys1MbHN8Vqso8VbwFyVGGG2pLT2B9:nFwqG2KPJP7bIjcQddDsUMys1MbHNgqn
- TLSH
  T1B1657DA66A8222228573A3799F5B4108FF35602B4E02915878ECD5D81FB9D7441FBFFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30 behavioral31
- Target
  qbcore.dll
- Size 54.8MB
- SHA256 7c3acac74f49a0a0f923a5a5e78510565427a2b5734926fcb550368742d0a28d
- MD5 9c50cf6a8e31156692d650c8ccd929f9
- SHA1 a69210bb5767911666913f42adac80208dc68999
- SHA512 6fccde0252c00dc535f5794b06a1c9dfe0e84c6cd38ea511a3dc50112141862ae7cbeaca3e914ba839b165f88bc4d59b7b53ebf97ce094d6ef372214f19ddf12
- SSDEEP 1572864:GK8GxctuodNAopObdAz6QSpH72ygZ/ICQbop3b/T7scl4:GK8Gxi9ydAG972ygZ/ICQbop3b/T7sc+
- TLSH
  T116C79D22B4018039F9D282F2E6FD7F7D566C4A2403B824D757D89C99AB64AE33739743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

adwarebootkitdefense_evasiondiscoverypersistencespywaretrojan

behavioral25

adwarebootkitdefense_evasiondiscoverypersistencespywaretrojan

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy