1cc019777796016f450aaab98a4b73b846393cc92027a3b0b8495c9a2d053084 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

win11

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
setup0203.msi
Size 1.5MB
Sample260603-vmz2pact3w
SHA256 1cc019777796016f450aaab98a4b73b846393cc92027a3b0b8495c9a2d053084
MD5 f78d8f8356ff1f98825a3c799bc948f8
SHA1 10a44d460c472188d03c8b52a3646070cc14e83d
SHA512 187271d6323d7d4a2c7e9956f435204f81d58f3fc47205babef8ce6ad6a6bd57b8987b2f007763fa12b016e994fbc367c8d95a22032c19c135641ed0c83e1067
SSDEEP 12288:ZAA1ayMafi836/wEuIX7aOEG2gGMLzBmdwTAeC:ZAA1ayMafj6oEuIX7acpke
TLSH
T1C0759C917311A027D9A70C31AE17C7A85B2CFD84BAA4705B63B0F70F2A7C9D31EA6715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

setup0203.msi

Resource

win11-20260513-en

windows11-21h2-x64

12 signatures

150 seconds

discovery persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  setup0203.msi
- Size 1.5MB
- SHA256 1cc019777796016f450aaab98a4b73b846393cc92027a3b0b8495c9a2d053084
- MD5 f78d8f8356ff1f98825a3c799bc948f8
- SHA1 10a44d460c472188d03c8b52a3646070cc14e83d
- SHA512 187271d6323d7d4a2c7e9956f435204f81d58f3fc47205babef8ce6ad6a6bd57b8987b2f007763fa12b016e994fbc367c8d95a22032c19c135641ed0c83e1067
- SSDEEP 12288:ZAA1ayMafi836/wEuIX7aOEG2gGMLzBmdwTAeC:ZAA1ayMafj6oEuIX7acpke
- TLSH
  T1C0759C917311A027D9A70C31AE17C7A85B2CFD84BAA4705B63B0F70F2A7C9D31EA6715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy