aab2a30a99d0a5f493c105da2b7f76f9e6b4f6a656e5ee1f7a44bf3be12fdc5c | Triage™

Login
Reports

Overview

overview

8

Static

static

3

Cloudflare.exe

windows10-ltsc_2021-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
CloudflareTLS2.zip
Size 39.3MB
Sample260702-3drb7agv4v
SHA256 aab2a30a99d0a5f493c105da2b7f76f9e6b4f6a656e5ee1f7a44bf3be12fdc5c
MD5 13166da616c316da12930bd58ef6b33f
SHA1 b2258e6ce60589ee3c3ac4b7df039c4aeca2ecda
SHA512 20517877f197a63c869b06a468cfa44a06cf96cc9241327063dd1cc9950b56124f35bcdb4d634d1cb35c15ba2f3ceeaaefa3e183d6678f66b238a4cd0cbd812a
SSDEEP 786432:ZVSmK4v+Tqea+5AItgg6P08w3WnzTfQLPsh/fEi+VIYu7xpNKDw0xb7H65uGWq:Loey3LAUggLWnzT4LPsh/fETqB7Uu1Wq
TLSH
T10E9733E4792012EDF9F7BD7DDB219A3EE8E261242B039565819103DBDDC3BE1B326841
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

credential_access defense_evasion discovery stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Cloudflare.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

11 signatures

300 seconds

credential_access defense_evasion discovery stealer

Malware Config

Targets

- Target
  Cloudflare.exe
- Size 113.1MB
- SHA256 e631ccf24a08c2f0cbc8c266b3e0f9d36f69290a7a602461ced7ec585a3be501
- MD5 07b5a37c296de738911b35187dfca1f1
- SHA1 fe54b8d618359c142dfca28d478ef9cca8aae123
- SHA512 fa57aa2df05b7441c7dbe6a74cfd6b3547a5e96863d2ea3aeead5939ddcb7bfe5b540432644860fe95e1988ec5ddeef7fdb5af90c2c6a42566db7a35a1077e83
- SSDEEP 786432:vXBJkA3cgXTOHaflxjB0dAdX5rs3wbRcXtB:fBJkAsgXKSxjB0dAjqwbo
- TLSH
  T120487D43A2A75098E4BBD57586D74223A9337C461F3099EF358C47312F73AE09B3AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

credential_access defense_evasion discovery stealer
- Uses browser remote debugging
  Can be used control the browser and steal sensitive information such as credentials and session cookies.
  credential_access stealer
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Modify Authentication Process

Privilege Escalation

Defense Evasion

Modify Authentication Process

Credential Access

Modify Authentication Process

Steal Web Session Cookie

Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

credential_accessdefense_evasiondiscoverystealer

© 2018-2026

Terms | Privacy