4d98a9a3243a685c6c41ce7b2047f6a09f5578d146f4cb37ad0bc064eb5054ff | Triage™

Login
Reports

Overview

overview

9

Static

static

3

obs.exe

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
obs.exe
Size 36.4MB
Sample260702-nt6pgsfw2l
SHA256 4d98a9a3243a685c6c41ce7b2047f6a09f5578d146f4cb37ad0bc064eb5054ff
MD5 7bc4efa137dafc31429c588e34dc70a1
SHA1 2210b58e22f0ee6151484d44c2489669290ce55f
SHA512 c319cfffd973be5c0c0cf03d1fe7968d120fada1861291a99910baee1f75c9536faba1d57abf12cab0f341e176dd729b7a7dd7de639f13dfdc25260b35d982ff
SSDEEP 786432:naE2G4TLcNOiVI2rXsrcr4WVHXMlLVUtZq5a9DuwZz7+iyk0Sw:nazTIAiVI2r8rcrvHXMlLVUDq5a9ywJi
TLSH
T1D88733A09ED3251BF8C7C53D9AF2C1B5B1B3B5B12B52889F19D202773AA76C5007F225
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

obs.exe

Resource

win11-20260513-en

windows11-21h2-x64

6 signatures

300 seconds

defense_evasion discovery

Malware Config

Targets

- Target
  obs.exe
- Size 36.4MB
- SHA256 4d98a9a3243a685c6c41ce7b2047f6a09f5578d146f4cb37ad0bc064eb5054ff
- MD5 7bc4efa137dafc31429c588e34dc70a1
- SHA1 2210b58e22f0ee6151484d44c2489669290ce55f
- SHA512 c319cfffd973be5c0c0cf03d1fe7968d120fada1861291a99910baee1f75c9536faba1d57abf12cab0f341e176dd729b7a7dd7de639f13dfdc25260b35d982ff
- SSDEEP 786432:naE2G4TLcNOiVI2rXsrcr4WVHXMlLVUtZq5a9DuwZz7+iyk0Sw:nazTIAiVI2r8rcrvHXMlLVUDq5a9ywJi
- TLSH
  T1D88733A09ED3251BF8C7C53D9AF2C1B5B1B3B5B12B52889F19D202773AA76C5007F225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery
- Looks for VirtualBox drivers on disk
  defense_evasion
- Looks for VMWare drivers on disk
  defense_evasion
- Loads dropped DLL
- Enumerates processes with tasklist
  discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

File and Directory Discovery

Process Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

© 2018-2026

Terms | Privacy