42cd238d8d05731d352197b7880a2b7fae7e4436f6afbaaad7bb37460879537b | Triage™

Login
Reports

Overview

overview

7

Static

static

3

EMU.exe

windows10-2004-x64

7

EMU.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
EMU.exe
Size 1.2MB
Sample260716-ymst6acv9p
SHA256 42cd238d8d05731d352197b7880a2b7fae7e4436f6afbaaad7bb37460879537b
MD5 97d22215ff489940e63e48da6a7a61c3
SHA1 40a10f245b046c73fa6ceb289733ba443a3e7c78
SHA512 4ef235dfb88378c42af8bf54df2eb7c751d66d7c80f127a5c960315e0c2bbcd30e5afcd7ae7a8af070b40d3049b9179d16904bf740ce81176ffd812c5b569f4e
SSDEEP 24576:i9pXL9KFZn/nbUM96x3a3LviBtKAIQ/9JMji7Iyf7Ucs1oBqVBeJ:i9pXhK3n/F0ymXKAI096GMypsUq3eJ
TLSH
T1075533071F0E54D8D4C3FE7D6A879A79CC887920922412F36BF4AD6A4BE14C4CA75BE1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

EMU.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

21 signatures

150 seconds

defense_evasion discovery execution

Behavioral task

behavioral2

Sample

EMU.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

20 signatures

150 seconds

defense_evasion discovery execution

Malware Config

Targets

- Target
  EMU.exe
- Size 1.2MB
- SHA256 42cd238d8d05731d352197b7880a2b7fae7e4436f6afbaaad7bb37460879537b
- MD5 97d22215ff489940e63e48da6a7a61c3
- SHA1 40a10f245b046c73fa6ceb289733ba443a3e7c78
- SHA512 4ef235dfb88378c42af8bf54df2eb7c751d66d7c80f127a5c960315e0c2bbcd30e5afcd7ae7a8af070b40d3049b9179d16904bf740ce81176ffd812c5b569f4e
- SSDEEP 24576:i9pXL9KFZn/nbUM96x3a3LviBtKAIQ/9JMji7Iyf7Ucs1oBqVBeJ:i9pXhK3n/F0ymXKAI096GMypsUq3eJ
- TLSH
  T1075533071F0E54D8D4C3FE7D6A879A79CC887920922412F36BF4AD6A4BE14C4CA75BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution
- Executes dropped EXE
- Loads dropped DLL
- Stops running service(s)
  defense_evasion execution
- Probable phishing domain
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecution

behavioral2

defense_evasiondiscoveryexecution

© 2018-2026

Terms | Privacy