28fca9da3ddd2c6f01f5d63aef1fe7870fa1d91afb022bce7c164ea6280756dc | Triage™

Login
Reports

Overview

overview

7

Static

static

3

lagswitch.exe

windows10-2004-x64

7

lagswitch.exe

windows11-ltsc_2024-x64

7

restructure.js

windows10-2004-x64

3

restructure.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
lagswitch.exe
Size 73.4MB
Sample260621-ybcc2aez3j
SHA256 28fca9da3ddd2c6f01f5d63aef1fe7870fa1d91afb022bce7c164ea6280756dc
MD5 8d1e24747f974eaa5e8351729cff9eb8
SHA1 e737189b288031b20d467a6f18fc57014f7799cb
SHA512 4a935f5d768dddc3aff3c46e92932a897473df2ad72aad0d193b2b8a32b8f5a4a715f891ef0a1f88093ce8013b709d2bd94503229e8c1ffe6a5edecf305f30a4
SSDEEP 1572864:sp+mK5XGMK4XR3b9CHSCU/+UyPlKuRlW2YgqfBNyV+6uoeOH73oKuy:D5gYRSSC++Uy95l1oYeEYKV
TLSH
T1C1F73340F284045FF19A1F75E3A2E7A2F9E3B026DF52C08B5BB44642095BAD0F7752B9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution pyinstaller trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

lagswitch.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

30 seconds

defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

lagswitch.exe

Resource

win11ltsc2024-20260618-en

windows11-ltsc_2024-x64

8 signatures

30 seconds

defense_evasion discovery trojan

Behavioral task

behavioral3

Sample

restructure.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

30 seconds

Behavioral task

behavioral4

Sample

restructure.js

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

1 signatures

30 seconds

Malware Config

Targets

- Target
  lagswitch.exe
- Size 73.4MB
- SHA256 28fca9da3ddd2c6f01f5d63aef1fe7870fa1d91afb022bce7c164ea6280756dc
- MD5 8d1e24747f974eaa5e8351729cff9eb8
- SHA1 e737189b288031b20d467a6f18fc57014f7799cb
- SHA512 4a935f5d768dddc3aff3c46e92932a897473df2ad72aad0d193b2b8a32b8f5a4a715f891ef0a1f88093ce8013b709d2bd94503229e8c1ffe6a5edecf305f30a4
- SSDEEP 1572864:sp+mK5XGMK4XR3b9CHSCU/+UyPlKuRlW2YgqfBNyV+6uoeOH73oKuy:D5gYRSSC++Uy95l1oYeEYKV
- TLSH
  T1C1F73340F284045FF19A1F75E3A2E7A2F9E3B026DF52C08B5BB44642095BAD0F7752B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  restructure.pyc
- Size 64KB
- SHA256 89f8946e6218ca400fb9bb4d310822d6fca6aaa6c4f25ca157b38d413521cedc
- MD5 279fd13737878bde36d4bb7e5f57e50f
- SHA1 3c4ae7fde5f1ca61dd5a31856755982e9109c5be
- SHA512 23319dec530b82e159c2dd232a2c105f89dfec10852d700e26f6e61be60edd0c704dcad8646923a6ae4cc988796ec3404ffaaee505a2074ecf772d0b71b63f29
- SSDEEP 1536:YQbOMLpVQjJCgSRwW4Ppd0d/BrCY1RMA56:dONjJCgSRwWOpd0d/B0
- TLSH
  T17653E8A675F31433FA93F0FA6B9B43563B219103910AC9163AAC62C04FC5ED199B778D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverytrojan

behavioral2

defense_evasiondiscoverytrojan

behavioral3

behavioral4

© 2018-2026

Terms | Privacy