543c3006810d7b8fae05d69423fea05691b75441e16fa6f9350cec342bfa098d | Triage™

Login
Reports

Overview

overview

7

Static

static

1

@logsred_bot+[23.html

windows10-2004-x64

3

@logsred_bot+[23.html

windows11-ltsc_2024-x64

7

Resubmissions

17/07/2026, 12:08

260717-pbbbasat4r7

17/07/2026, 12:05

260717-n9hbtses2x7

Sharing

Copy URL Twitter E-mail

General

Target
@logsred_bot+[23.0K]+
Size 327KB
Sample260717-pbbbasat4r
SHA256 543c3006810d7b8fae05d69423fea05691b75441e16fa6f9350cec342bfa098d
MD5 489670da2818144bca685bb84b79dd39
SHA1 ee4993e303405fe30859d9a3963ad5b605443381
SHA512 bc050eac3a2f309e71764d43ccabd9a28e26222fcccae6084e378b6856da8c6bbaca9f4d64cc93ec27b31a267183eafe4eb8ec6956f75dace8549c5cb0eff13e
SSDEEP 3072:CYygAkHnjzxQ6KSAiTSH/88aW+LN7jxRLlzglK+f2EcR:8gAkHnjzxQBSA/f88CN7DB+f2EcR
TLSH
T10D643C26E5D2607F682B8033F27F3318B73FA483A101C965BA1CC5D5AFD19862177B99
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

microsoft discovery persistence phishing ransomware

Static task

static1

Behavioral task

behavioral1

Sample

@logsred_bot+[23.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

@logsred_bot+[23.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

22 signatures

150 seconds

microsoft discovery persistence phishing ransomware

Malware Config

Targets

- Target
  @logsred_bot+[23.0K]+
- Size 327KB
- SHA256 543c3006810d7b8fae05d69423fea05691b75441e16fa6f9350cec342bfa098d
- MD5 489670da2818144bca685bb84b79dd39
- SHA1 ee4993e303405fe30859d9a3963ad5b605443381
- SHA512 bc050eac3a2f309e71764d43ccabd9a28e26222fcccae6084e378b6856da8c6bbaca9f4d64cc93ec27b31a267183eafe4eb8ec6956f75dace8549c5cb0eff13e
- SSDEEP 3072:CYygAkHnjzxQ6KSAiTSH/88aW+LN7jxRLlzglK+f2EcR:8gAkHnjzxQBSA/f88CN7DB+f2EcR
- TLSH
  T10D643C26E5D2607F682B8033F27F3318B73FA483A101C965BA1CC5D5AFD19862177B99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery microsoft persistence phishing ransomware
- A potential corporate email address has been identified in the URL: [email protected]
  phishing
- Detected potential entity reuse from brand MICROSOFT.
  phishing microsoft
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

microsoftdiscoverypersistencephishingransomware

© 2018-2026

Terms | Privacy