a79bc5e3bd57601957427fce1e637d73121a992d257931b59a46d652ce90c715 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

CYGRAT1.0.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
CYGRAT1.0.exe
Size 102.3MB
Sample260628-qaattahw6m
SHA256 a79bc5e3bd57601957427fce1e637d73121a992d257931b59a46d652ce90c715
MD5 d7403ba3e6070492baca3937f8daea3a
SHA1 05eac90823d5cd60d52bacb6b3bbd80c4021d447
SHA512 9dac967f67f431b5ee00a66d0bff8f6a9bbc0ae6691f229723cfafdac2397a64587a0a402e11a6aab52058ea5e942c9673ea85e2a83c8621544e21735ca62ee1
SSDEEP 1572864:ITIAikXJVrvo2pUg9NoX0RKH+vWlM9ojCrD4WWJvKSc/JUNnTY0oZ/hvXvc37L/P:Ipv7ig9NX5elKbDSc/iFEDhvXvc3Jc
TLSH
T1DD383391AE10A59AF489C13F87E48E16F9776C75698207CF12F806663C973C94C3EB72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution persistence pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

CYGRAT1.0.exe

Resource

win11-20260513-en

windows11-21h2-x64

7 signatures

150 seconds

execution persistence

Malware Config

Targets

- Target
  CYGRAT1.0.exe
- Size 102.3MB
- SHA256 a79bc5e3bd57601957427fce1e637d73121a992d257931b59a46d652ce90c715
- MD5 d7403ba3e6070492baca3937f8daea3a
- SHA1 05eac90823d5cd60d52bacb6b3bbd80c4021d447
- SHA512 9dac967f67f431b5ee00a66d0bff8f6a9bbc0ae6691f229723cfafdac2397a64587a0a402e11a6aab52058ea5e942c9673ea85e2a83c8621544e21735ca62ee1
- SSDEEP 1572864:ITIAikXJVrvo2pUg9NoX0RKH+vWlM9ojCrD4WWJvKSc/JUNnTY0oZ/hvXvc37L/P:Ipv7ig9NX5elKbDSc/iFEDhvXvc3Jc
- TLSH
  T1DD383391AE10A59AF489C13F87E48E16F9776C75698207CF12F806663C973C94C3EB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistence

© 2018-2026

Terms | Privacy