b1e8d583731a295267c84b35453434bbc3ef8bef0d9e07b22e8fe1e0598fd243 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

spongebatit.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
spongebatit.exe
Size 76KB
Sample260620-lz5chafv3z
SHA256 b1e8d583731a295267c84b35453434bbc3ef8bef0d9e07b22e8fe1e0598fd243
MD5 08a361845e42d6bc416d1f2df9c0400f
SHA1 c56bc285fb1dc5893c75c99424ecfbefe5662fe1
SHA512 0d4e47a418d52518f36414ba28df591a912c2e37384f3072526a4134fd998c1e38d883dc424fbafc68f83585a2d9005aafd090d49128055dbaefc6b6f093d98e
SSDEEP 1536:Prae78zjORCDGwfdCSog01313lWs5gfxk:lahKyd2n31h5Mxk
TLSH
T1C473823556E410AAE0B673F458F2895FB6327CA11B7596EF1388B1B80F236C0A731B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

spongebatit.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

discovery persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  spongebatit.exe
- Size 76KB
- SHA256 b1e8d583731a295267c84b35453434bbc3ef8bef0d9e07b22e8fe1e0598fd243
- MD5 08a361845e42d6bc416d1f2df9c0400f
- SHA1 c56bc285fb1dc5893c75c99424ecfbefe5662fe1
- SHA512 0d4e47a418d52518f36414ba28df591a912c2e37384f3072526a4134fd998c1e38d883dc424fbafc68f83585a2d9005aafd090d49128055dbaefc6b6f093d98e
- SSDEEP 1536:Prae78zjORCDGwfdCSog01313lWs5gfxk:lahKyd2n31h5Mxk
- TLSH
  T1C473823556E410AAE0B673F458F2895FB6327CA11B7596EF1388B1B80F236C0A731B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Accessibility Features

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Accessibility Features

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy