9f00911fd5122fe6966768688e9faf16b741f6d3d307f076cb9a4cf8c18973ce | Triage™

Login
Reports

Overview

overview

7

Static

static

3

WFToolsAE_...er.exe

windows10-2004-x64

7

WFToolsAE_...er.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
WFToolsAE_Installer.exe
Size 10.9MB
Sample260705-xpf3pse17x
SHA256 9f00911fd5122fe6966768688e9faf16b741f6d3d307f076cb9a4cf8c18973ce
MD5 393cfa0d6ccc65ecb4e7cad3b4397dc0
SHA1 fcdb9bff97a851d4b88af06e94ea7c80304275d2
SHA512 baf79adf12cf6a1476589820e1ef10ff8a138dca8bd54e5a932a3d7dae34c7164e3e8e2bfaeeae4828b4f9d39ed5cb62be437b075be6dbb98da53c7341bf3f9b
SSDEEP 196608:2jqMJdQmRJ8dA6lSuqaycBIGpE0uPDnYxTRw/rcr89MfHlu4UUMVXnPWC:2XdQuslSq9C7Yx4rcr896HUUQe
TLSH
T126B62259B9940495DFAA73384D3FF0349B727C8C079CE3BA02BB47551FAB7A82963214
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery pyinstaller trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

WFToolsAE_Installer.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

WFToolsAE_Installer.exe

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  WFToolsAE_Installer.exe
- Size 10.9MB
- SHA256 9f00911fd5122fe6966768688e9faf16b741f6d3d307f076cb9a4cf8c18973ce
- MD5 393cfa0d6ccc65ecb4e7cad3b4397dc0
- SHA1 fcdb9bff97a851d4b88af06e94ea7c80304275d2
- SHA512 baf79adf12cf6a1476589820e1ef10ff8a138dca8bd54e5a932a3d7dae34c7164e3e8e2bfaeeae4828b4f9d39ed5cb62be437b075be6dbb98da53c7341bf3f9b
- SSDEEP 196608:2jqMJdQmRJ8dA6lSuqaycBIGpE0uPDnYxTRw/rcr89MfHlu4UUMVXnPWC:2XdQuslSq9C7Yx4rcr896HUUQe
- TLSH
  T126B62259B9940495DFAA73384D3FF0349B727C8C079CE3BA02BB47551FAB7A82963214
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverytrojan

behavioral2

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy