05cf397d9506dc0f3b475763489be238df4fefc3f9690deca73c3fc7c8c2ace7 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

odm-v2.2.250r.msi

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
odm-v2.2.250r.msi
Size 20.8MB
Sample260712-vyfr7ags7s
SHA256 05cf397d9506dc0f3b475763489be238df4fefc3f9690deca73c3fc7c8c2ace7
MD5 f311ba728a71467e1021c7c5798b0427
SHA1 de255e39d3dc5e62fc17f461e9a1dd77ddb95dfe
SHA512 d305e0b40185e22c0f64eb8ab49be33e6bb32b2498b6aef1dd3b705c5e2608f6872d48c842e48dca30ce710ca39106f51d4fb150d954c9cc27ac1cf991c85646
SSDEEP 393216:lASG0eWOPzk5fve1Kn4tgnCFB+fMNMFG7McvQgNx2EhvHLnTu47sC2cCVsr:SktOKn4HqfgMs5Nx2EhrnTxsC2cCSr
TLSH
T10D2733175521C135FBEA02B25BA1F3592B20BDD416EDC9062788384EFCFE7822A7175B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

odm-v2.2.250r.msi

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

16 signatures

900 seconds

discovery persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  odm-v2.2.250r.msi
- Size 20.8MB
- SHA256 05cf397d9506dc0f3b475763489be238df4fefc3f9690deca73c3fc7c8c2ace7
- MD5 f311ba728a71467e1021c7c5798b0427
- SHA1 de255e39d3dc5e62fc17f461e9a1dd77ddb95dfe
- SHA512 d305e0b40185e22c0f64eb8ab49be33e6bb32b2498b6aef1dd3b705c5e2608f6872d48c842e48dca30ce710ca39106f51d4fb150d954c9cc27ac1cf991c85646
- SSDEEP 393216:lASG0eWOPzk5fve1Kn4tgnCFB+fMNMFG7McvQgNx2EhvHLnTu47sC2cCVsr:SktOKn4HqfgMs5Nx2EhrnTxsC2cCSr
- TLSH
  T10D2733175521C135FBEA02B25BA1F3592B20BDD416EDC9062788384EFCFE7822A7175B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy