371410d1d5d4a1ba392a23c913819fa44d2c3da045fd5400f162efc9d2fa4c01 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Cherry-Stu...le.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
Cherry-Studio-1.9.12-x64-portable.exe
Size 132.5MB
Sample260712-zzj88ag12p
SHA256 371410d1d5d4a1ba392a23c913819fa44d2c3da045fd5400f162efc9d2fa4c01
MD5 1d59215a1414c9f14b092bec9ac90ba9
SHA1 b25e7899555caa341478bc6cb69ff834d7e4dfee
SHA512 5c72aa7f0e2e7b8fb37d6c79857c360d01a474e180f508256d08fbe5a0623e70abf230771295f456ae15b34d9cc6917019c6771863c86094de6a725097691048
SSDEEP 3145728:EfzYkh7VCwFgq/NRx2kf0Cciaj/lnAz/Qah9CRKGrHmqnEnBqhK837:IXh7VCq/N32Axaj/2z/DZGrHmOr
TLSH
T12C683336D3D71F22CD02B3FF32F3562DE13D0A310A6B50E55338B8665A616218BB666D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Cherry-Studio-1.9.12-x64-portable.exe

Resource

win11-20260513-en

windows11-21h2-x64

13 signatures

600 seconds

discovery execution spyware stealer

Malware Config

Targets

- Target
  Cherry-Studio-1.9.12-x64-portable.exe
- Size 132.5MB
- SHA256 371410d1d5d4a1ba392a23c913819fa44d2c3da045fd5400f162efc9d2fa4c01
- MD5 1d59215a1414c9f14b092bec9ac90ba9
- SHA1 b25e7899555caa341478bc6cb69ff834d7e4dfee
- SHA512 5c72aa7f0e2e7b8fb37d6c79857c360d01a474e180f508256d08fbe5a0623e70abf230771295f456ae15b34d9cc6917019c6771863c86094de6a725097691048
- SSDEEP 3145728:EfzYkh7VCwFgq/NRx2kf0Cciaj/lnAz/Qah9CRKGrHmqnEnBqhK837:IXh7VCq/N32Axaj/2z/DZGrHmOr
- TLSH
  T12C683336D3D71F22CD02B3FF32F3562DE13D0A310A6B50E55338B8665A616218BB666D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionspywarestealer

© 2018-2026

Terms | Privacy