e047d3bfe94f4a0e7a483f4b58f1a64f63113ce6fc587b25947b8ebd498f2f94 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

ULTRAKILL.exe

windows10-2004-x64

3

ULTRAKILL.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
ULTRAKILL.exe
Size 651KB
Sample260622-mgrt5abv4v
SHA256 e047d3bfe94f4a0e7a483f4b58f1a64f63113ce6fc587b25947b8ebd498f2f94
MD5 2dc220cb8df1a63dcd249e0fd3e1a092
SHA1 a4e3ed11feae6f14065076ea85f73a810f383222
SHA512 df0e2aed530c6b7d1c10043880ec967e36d0775402a3743518405f28b98a9830acbfbebe257b69ccfa79becaf7fe792b8773194f21bd704a7d011707b3b88627
SSDEEP 6144:p/7FG9mpcJ/OD81iBEevjmrLTh+6+XBqty:p/744aOD8oBEevjmrB+6+gty
TLSH
T165E44A93675468E6E5720B798422DA799737BD782A31E70F1AE5BC533F332C30C29912
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware discovery persistence ransomware spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ULTRAKILL.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

900 seconds

Behavioral task

behavioral2

Sample

ULTRAKILL.exe

Resource

win11ltsc2024-20260617-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware persistence ransomware spyware

Malware Config

Targets

- Target
  ULTRAKILL.exe
- Size 651KB
- SHA256 e047d3bfe94f4a0e7a483f4b58f1a64f63113ce6fc587b25947b8ebd498f2f94
- MD5 2dc220cb8df1a63dcd249e0fd3e1a092
- SHA1 a4e3ed11feae6f14065076ea85f73a810f383222
- SHA512 df0e2aed530c6b7d1c10043880ec967e36d0775402a3743518405f28b98a9830acbfbebe257b69ccfa79becaf7fe792b8773194f21bd704a7d011707b3b88627
- SSDEEP 6144:p/7FG9mpcJ/OD81iBEevjmrLTh+6+XBqty:p/744aOD8oBEevjmrB+6+gty
- TLSH
  T165E44A93675468E6E5720B798422DA799737BD782A31E70F1AE5BC533F332C30C29912
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

adwarepersistenceransomwarespyware

© 2018-2026

Terms | Privacy