228a7d51a12b8a11920ab0e2fd1c9c5233a8c5d3d10fd228ea7a1faadeedc534 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

testing3.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
testing3.exe
Size 255KB
Sample260621-jrt6fsb19m
SHA256 228a7d51a12b8a11920ab0e2fd1c9c5233a8c5d3d10fd228ea7a1faadeedc534
MD5 9806eb2cc80d2a91e7896464137fea43
SHA1 106071c0fb5e3600b63b54875545fcda556c8410
SHA512 02bc0a89148796c2bc363b3a445e0c4211c2b4f04bcba99b8546334a27148c749885bb7adedc7fd5f81cda09c40401bf54458d297462b051d4b4063aa9c792ce
SSDEEP 3072:aMGShHwjA1HHuLAdvW7f16JagturUyMP0ZJm1s1Fiw8r40AW8TClgf6nLBa:bXhruLA07EJagwrX78r4znTP6Ba
TLSH
T1C1445B82BB86ECEBC505863589BB43293778F6D117839B071D2872341E276E4FE87617
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

credential_access defense_evasion persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

testing3.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

900 seconds

credential_access defense_evasion persistence privilege_escalation

Malware Config

Targets

- Target
  testing3.exe
- Size 255KB
- SHA256 228a7d51a12b8a11920ab0e2fd1c9c5233a8c5d3d10fd228ea7a1faadeedc534
- MD5 9806eb2cc80d2a91e7896464137fea43
- SHA1 106071c0fb5e3600b63b54875545fcda556c8410
- SHA512 02bc0a89148796c2bc363b3a445e0c4211c2b4f04bcba99b8546334a27148c749885bb7adedc7fd5f81cda09c40401bf54458d297462b051d4b4063aa9c792ce
- SSDEEP 3072:aMGShHwjA1HHuLAdvW7f16JagturUyMP0ZJm1s1Fiw8r40AW8TClgf6nLBa:bXhruLA07EJagwrX78r4znTP6Ba
- TLSH
  T1C1445B82BB86ECEBC505863589BB43293778F6D117839B071D2872341E276E4FE87617
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

credential_access defense_evasion persistence privilege_escalation
- OS Credential Dumping: Security Account Manager
  Malicious Registry Hive Dumping.
  credential_access
- Modifies Windows Firewall
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

OS Credential Dumping

Security Account Manager

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

credential_accessdefense_evasionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy