bc72fe4a09dcb9c926e1cc0f3dd6603e91c1e469a448b631702dab2ec7b73867 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

cosmic/UI.exe

windows10-2004-x64

6

cosmic/UI.exe

windows11-ltsc_2024-x64

6

cosmic/bin...or.exe

windows10-2004-x64

9

cosmic/bin...or.exe

windows11-ltsc_2024-x64

9

cosmic/bin/Module.dll

windows10-2004-x64

1

cosmic/bin/Module.dll

windows11-ltsc_2024-x64

1

cosmic/bin...64.dll

windows10-2004-x64

1

cosmic/bin...64.dll

windows11-ltsc_2024-x64

1

cosmic/bin...sp.exe

windows10-2004-x64

1

cosmic/bin...sp.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
cosmic.zip
Size 20.4MB
Sample260717-jzbdbae12q
SHA256 bc72fe4a09dcb9c926e1cc0f3dd6603e91c1e469a448b631702dab2ec7b73867
MD5 04e154fc55b8f4b7d2adf9264d44c5f5
SHA1 91eb0b74e027aaa359afc8eca9bacc6a653382fc
SHA512 92dbfc7cec8721ba18ee3b0ec01e7d4bcf6f0c4352c28ea32a45e3d4af6d2ae783d7526c9f0a162ce15dd072f7c3b35b1effcc10345de6c40a5542dbb9a951dd
SSDEEP 393216:qDh4mQtV4JhhNh5n4M3NqyqizuzgEx//8n1uUztzrh7Q+xplEwgXcgJlVqLUazl:QGtVMNhCYEB0n19hfh7Q+utcgJlmPh
TLSH
T1CE27339508B8D582E97D5323ABC95F0808822CCE2F962417368F56C94FAF7DDC356E72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

cosmic/UI.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

cosmic/UI.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral3

Sample

cosmic/bin/Injector.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

defense_evasion trojan

Behavioral task

behavioral4

Sample

cosmic/bin/Injector.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

defense_evasion trojan

Behavioral task

behavioral5

Sample

cosmic/bin/Module.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

cosmic/bin/Module.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

cosmic/bin/SecureEngineSDK64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

cosmic/bin/SecureEngineSDK64.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

cosmic/bin/lsp/lsp.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

cosmic/bin/lsp/lsp.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  cosmic/UI.exe
- Size 16.9MB
- SHA256 03fda65d59b548a1d33906c48de8e903a9b2539b71b7ddebdf971597c34e5bfa
- MD5 9462fbfd62f477ac75d48fd6e207a8ab
- SHA1 815458bbd885a36586ad852cc38ec4a2f3ea0fb4
- SHA512 bca573b9ea1879a15fed765f78e0486993f4de843a948580fe0e770f6298722e9c4caf503839599ed8166e46f3ee2f8914338fb6e9cdfe3012fdb9284f672fb0
- SSDEEP 196608:QB+imkZ9t+KtXbdy5l9a9OCILPaaya8l0S7o5BTvegxd7DCSv:1imkRI3o9O5LPaayFs7Tv/BDC
- TLSH
  T11A0717217B5A996DC09BC474824B8A724E7130DB0B39B9FF448596383F6DBF42F38259
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2
- Target
  cosmic/bin/Injector.exe
- Size 4.9MB
- SHA256 2a7b90d11452e8f35c0bcdb3ebf5043e9f708726009a2d375c10b5b4d1fafe58
- MD5 a87c4417a2e7e882c5191753d5ac3463
- SHA1 49cda9388ccc138967bcbdbcd4bd9455930a2694
- SHA512 3116bab2cefb51e8ee7ceec6137bfbbed1472a0b584c86e9d02b8e4e6dce67ac66c52ec07267530e05a9d249d9858edd543c2dd5f4edaad2b08c86fab6bbef1f
- SSDEEP 98304:VbrgU1cf6LrfPi5BGyfxHf2zUWtwz55fzmoP0SIfQQypB:VbMUvP3iXGyfx/2zjwzPfz1PdIfQ7
- TLSH
  T1C936331E37DC67F1DB8206F70AAA7B5853C41F2CAC9F7BA61683970798D012E8275D06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion trojan
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks whether UAC is enabled
  defense_evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3 behavioral4
- Target
  cosmic/bin/Module.dll
- Size 6.0MB
- SHA256 f589805fd3fc0efdbf771f112d02c7d0fcb523dfb2c9033ddd62e067453d8092
- MD5 19dbc0eafd7acbfbf0c442d434c0d91a
- SHA1 94a1e2e5732d045c90c6e439f84d7c8e89e95cec
- SHA512 10590890c7e6823e6f09b40111826a7fe32188aa9d7584ee447e0cbb4f15b0e041e56b8807b8618aaa720c7aa1ea73d10bc88723f9365bf9dce9a1604ebfc92a
- SSDEEP 98304:VqoCeVFw+Q/8ZzIkfsnH67l3fILWRDycwvrtza4:0CPQ/8ZzjfsnaFfgol8rtP
- TLSH
  T10F56DF95A4C17ECE36542CC5B6059DE48BE7889E09FA72D57F30EF1FE00AB86089D874
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  cosmic/bin/SecureEngineSDK64.dll
- Size 28KB
- SHA256 a989c8bcb5f111fa6a2e538c4c79c62be515f1713b2310cb9f60c58d6536166b
- MD5 92ff442bee98d2df4c2bbc2e8a3e019f
- SHA1 95c7637bbfc6c1ba583068769589c7ffc5a0955b
- SHA512 9949f6e7eab3e2fd14f276ee0fac83ddfc2be40ca668c15f0c3e897bd3e7517fad04e8966d022c1efa8605cc14629d71943af1eff9aed1633206d64feede14dd
- SSDEEP 192:I+Ai08s5GvuxBdKKCeotPpWZlNCryWlHqX5xS5haBWUcSAfMVIBizxUv:I+AdZxBnCeqPpWZglsfSgA0V
- TLSH
  T1DCD2ABAF05B56EFFFC0D0CF4058F3A9822C3F7D22DE48669276E458541EA81B651F289
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  cosmic/bin/lsp/lsp.exe
- Size 11.1MB
- SHA256 911203eb5acaaade326eec106b48824f64881269c85513fdb30e6455d9e6d721
- MD5 f8c9f2f036ac7c6e8d100834b5c49ee6
- SHA1 421a756eb507ab22a3e5c714231c2a5d7d22f2e9
- SHA512 6c0ba341633e3b362beabc140d73c88dde88c9d716f80e88d2164fd38e6ed826473e0aeb450a735f402963e196fdc974d3adfb9d643844b8a576a7d01a5d268e
- SSDEEP 98304:VKETtoj3FI6XomceAPRHB7YABv0xn+QW0WHk:cCSjFIWXAu0QW0
- TLSH
  T147C66D77229C01D8E0BBC07D8BCB9E93DBB2340903719AEF05A045565E5BEE95F3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Network Share Discovery

Process Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverytrojan

behavioral2

defense_evasiondiscoverytrojan

behavioral3

defense_evasiontrojan

behavioral4

defense_evasiontrojan

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

© 2018-2026

Terms | Privacy