4e5cebe1908e12e8a4ed1198fb01fb87871dbe54847855b11b3540dbc47bbe88 | Triage™

Login
Reports

Overview

overview

Static

static

cone.exe.zip

windows11-21h2-x64

1

cone.exe.zip

windows11-ltsc_2024-x64

1

2to1ep.exe

windows11-21h2-x64

2to1ep.exe

windows11-ltsc_2024-x64

main.pyc

windows11-21h2-x64

3

main.pyc

windows11-ltsc_2024-x64

3

4363463463...63.exe

windows11-21h2-x64

4363463463...63.exe

windows11-ltsc_2024-x64

Synaptics.exe

windows11-21h2-x64

Synaptics.exe

windows11-ltsc_2024-x64

TsarBomba.exe

windows11-21h2-x64

TsarBomba.exe

windows11-ltsc_2024-x64

cobaltstri...de.exe

windows11-21h2-x64

cobaltstri...de.exe

windows11-ltsc_2024-x64

ed01ebfbc9...aa.exe

windows11-21h2-x64

ed01ebfbc9...aa.exe

windows11-ltsc_2024-x64

random.exe

windows11-21h2-x64

random.exe

windows11-ltsc_2024-x64

Resubmissions

27/09/2026, 14:21

260927-rn8hns1yhz10

15/09/2026, 11:13

260915-nbjf8sgj9y

13/09/2026, 12:17

260913-pfz58aba3910

11/09/2026, 14:17

260911-rltazathnb

11/09/2026, 14:10

260911-rgr74sw1hv10

07/09/2026, 14:52

260907-r8tv1sxvat

06/09/2026, 18:39

260906-xarwnaysdx10

06/09/2026, 18:38

260906-xadn2azgqc

06/09/2026, 16:17

260906-trmfqaxgkf10

06/09/2026, 16:09

260906-tl37aaxfma10

Analysis

max time kernel
899s
max time network
897s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-es
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
submitted
25/06/2026, 08:59

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

pyinstaller 1359593325 backdoor xred trojan cobaltstrike

Behavioral task

behavioral1

Sample

cone.exe.zip

Resource

win11-20260513-es

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

cone.exe.zip

Resource

win11ltsc2024-20260618-es

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

2to1ep.exe

Resource

win11-20260513-es

windows11-21h2-x64

56 signatures

900 seconds

backdoor credential_access defense_evasion discovery execution quasar supershell valleyrat_s2 installer miner persistence privilege_escalation revoked_codesign spyware stealer themida trojan upx

Behavioral task

behavioral4

Sample

2to1ep.exe

Resource

win11ltsc2024-20260617-es

windows11-ltsc_2024-x64

60 signatures

900 seconds

backdoor defense_evasion discovery execution metasploit quasar supershell valleyrat_s2 wannacry installer miner persistence privilege_escalation ransomware revoked_codesign spyware themida trojan upx worm

Behavioral task

behavioral5

Sample

main.pyc

Resource

win11-20260513-es

windows11-21h2-x64

3 signatures

900 seconds

Behavioral task

behavioral6

Sample

main.pyc

Resource

win11ltsc2024-20260617-es

windows11-ltsc_2024-x64

3 signatures

900 seconds

Behavioral task

behavioral7

Sample

4363463463464363463463463.exe

Resource

win11-20260513-es

windows11-21h2-x64

64 signatures

900 seconds

backdoor first credential_access defense_evasion discovery execution deerstealer mimikatz phorphiex redline sheetrat wannacry impact infostealer installer loader miner persistence pyinstaller ransomware rat revoked_codesign spyware stealer themida trojan upx worm

Behavioral task

behavioral8

Sample

4363463463464363463463463.exe

Resource

win11ltsc2024-20260618-es

windows11-ltsc_2024-x64

67 signatures

900 seconds

backdoor default costura credential_access defense_evasion discovery execution asyncrat donutloader metasploit mimikatz needle_stealer quasar redline sharphound umbral xworm hacktool infostealer installer loader packer persistence pyinstaller ransomware rat revoked_codesign spyware stealer trojan upx

Behavioral task

behavioral9

Sample

Synaptics.exe

Resource

win11-20260513-es

windows11-21h2-x64

71 signatures

900 seconds

adware backdoor bootkit 1b2025 costura credential_access defense_evasion discovery execution amadey donutloader gurcu mimikatz mythicapollo sheetrat stealc xred installer loader packer persistence privilege_escalation pyinstaller ransomware revoked_codesign spyware stealer trojan upx

Behavioral task

behavioral10

Sample

Synaptics.exe

Resource

win11ltsc2024-20260618-es

windows11-ltsc_2024-x64

17 signatures

900 seconds

backdoor discovery xred macro persistence pyinstaller upx

Behavioral task

behavioral11

Sample

TsarBomba.exe

Resource

win11-20260513-es

windows11-21h2-x64

60 signatures

900 seconds

aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat dragonforce gh0strat hiddentear jlocker lockbit modiloader redline rokrat sectoprat umbral valleyrat_s2 vidar xorist xworm impact infostealer installer persistence ransomware rat revoked_codesign rootkit stealer trojan

Behavioral task

behavioral12

Sample

TsarBomba.exe

Resource

win11ltsc2024-20260617-es

windows11-ltsc_2024-x64

104 signatures

900 seconds

adware aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat collection credential_access defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat dragonforce gh0strat hiddentear jlocker lockbit masslogger medusaransomware modiloader neshta raworld redline rokrat sectoprat umbral valleyrat_s2 vidar xorist xworm impact infostealer installer persistence ransomware rat revoked_codesign rootkit spyware stealer trojan

Behavioral task

behavioral13

Sample

cobaltstrike_shellcode.exe

Resource

win11-20260513-es

windows11-21h2-x64

2 signatures

900 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral14

Sample

cobaltstrike_shellcode.exe

Resource

win11ltsc2024-20260618-es

windows11-ltsc_2024-x64

2 signatures

900 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral15

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win11-20260513-es

windows11-21h2-x64

20 signatures

900 seconds

defense_evasion discovery execution wannacry impact persistence ransomware spyware stealer suricata worm

Behavioral task

behavioral16

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win11ltsc2024-20260618-es

windows11-ltsc_2024-x64

20 signatures

900 seconds

defense_evasion discovery execution wannacry impact persistence ransomware spyware stealer suricata worm

Behavioral task

behavioral17

Sample

random.exe

Resource

win11-20260513-es

windows11-21h2-x64

32 signatures

900 seconds

fbf543 fc155c5bf8a148a93a2ba17de68393f0n rif0lm defense_evasion discovery execution amadey vidar persistence stealer trojan

Behavioral task

behavioral18

Sample

random.exe

Resource

win11ltsc2024-20260618-es

windows11-ltsc_2024-x64

34 signatures

900 seconds

fbf543 fc155c5bf8a148a93a2ba17de68393f0n rif0lm defense_evasion discovery execution amadey vidar persistence stealer trojan

Report Analysis Logs

General

Target
cone.exe.zip
Size 43.9MB
Sample260625-kx1e4aav21
SHA256 4e5cebe1908e12e8a4ed1198fb01fb87871dbe54847855b11b3540dbc47bbe88
MD5 5e4a348e89afb91e6ae698f3104f7b47
SHA1 1ea7e4faa29e2803f50165f63815003fe22b8cbd
SHA512 a4282f90cff85a5802c551c770b2e849ef745bbde8c707d6878c841102d98bdcfe86c014df2acf34fb4471713d990265d0eaaf129dd560898785b8e7ebc53666
SSDEEP 786432:aGUqxoNIwFhSVPEgA5PjIXom0Fk/JK2a8Zq9HdQFaybEdhPm3dutgEXzu94Pa2SJ:aDySIOSVA7IJQk/JK2amQkTwdhPt1S2e
TLSH
T1E8A733667F1BF7D8F0499FA93C60C196559BC6C9834B0C28CFA3C720EDA78E66641478
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\cone.exe.zip
1⤵
PID:1680

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5560

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy