906165767e3857b76c295cc654e828a3a972ea137e1104ac89f604160fc8c9b3 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Ryan22.msi

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
Ryan22.msi
Size 133.0MB
Sample260710-be1tgabw7m
SHA256 906165767e3857b76c295cc654e828a3a972ea137e1104ac89f604160fc8c9b3
MD5 4f53e39ad3dc2d39bab8b21ddfc38053
SHA1 2d39b65dad8fece44c56266d970f6448f19de624
SHA512 d9c5d48ed50a9b56d9fbca3a98de73a2e62878c065b54aeb308a8ca7726c78b8f00897ffe2ac099771a3654f8e61153cfa40133cd4d82cbdd288d915609883e2
SSDEEP 3145728:Z1Zk3NGIf4tXzkAZoWAp0ddCJCD84oZN5xc3Cfv8RG:Z1GnffAZDyJHzZN5xcy38
TLSH
T1CD6833B3748B4F7BE74B787D5392F12F422E787227525142EAF8DD76944AA836020CD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Ryan22.msi

Resource

win11-20260513-en

windows11-21h2-x64

15 signatures

900 seconds

discovery persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  Ryan22.msi
- Size 133.0MB
- SHA256 906165767e3857b76c295cc654e828a3a972ea137e1104ac89f604160fc8c9b3
- MD5 4f53e39ad3dc2d39bab8b21ddfc38053
- SHA1 2d39b65dad8fece44c56266d970f6448f19de624
- SHA512 d9c5d48ed50a9b56d9fbca3a98de73a2e62878c065b54aeb308a8ca7726c78b8f00897ffe2ac099771a3654f8e61153cfa40133cd4d82cbdd288d915609883e2
- SSDEEP 3145728:Z1Zk3NGIf4tXzkAZoWAp0ddCJCD84oZN5xc3Cfv8RG:Z1GnffAZDyJHzZN5xcy38
- TLSH
  T1CD6833B3748B4F7BE74B787D5392F12F422E787227525142EAF8DD76944AA836020CD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy