a970395eeedc22e336637af79544ca7f44aa8225d425bc001acf00a9a122b804 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2sgexx.zip

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2sgexx.zip
Size 29.6MB
Sample260717-teev4sez2q
SHA256 a970395eeedc22e336637af79544ca7f44aa8225d425bc001acf00a9a122b804
MD5 96fb48681d1a2f35c4ba165e9bf51cde
SHA1 36d9502c3f5535f0a7df456fd709e7902ad9ced0
SHA512 2923984ab0a66b269e8754894803a9e16d330f224b1bc939e5cf01b04130c548314c45152ba01645c979a963ef71fe77d154bec97c22b936c7b9575f00e1310e
SSDEEP 786432:sGc+4TgMg5glZ2OPorjgnh6DUClUTiR34F3okSTDN9EfpyBSpU1L9O28yBzZ6bWN:B4MMgilYrUhgUiUTdF3Q9cC1L02bBdyu
TLSH
T15D673328A0516721A0AB69F66DB73D47B90C043912BA1BFC5FFFB79414077CF062B266
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2sgexx.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2sgexx.zip
- Size 29.6MB
- SHA256 a970395eeedc22e336637af79544ca7f44aa8225d425bc001acf00a9a122b804
- MD5 96fb48681d1a2f35c4ba165e9bf51cde
- SHA1 36d9502c3f5535f0a7df456fd709e7902ad9ced0
- SHA512 2923984ab0a66b269e8754894803a9e16d330f224b1bc939e5cf01b04130c548314c45152ba01645c979a963ef71fe77d154bec97c22b936c7b9575f00e1310e
- SSDEEP 786432:sGc+4TgMg5glZ2OPorjgnh6DUClUTiR34F3okSTDN9EfpyBSpU1L9O28yBzZ6bWN:B4MMgilYrUhgUiUTdF3Q9cC1L02bBdyu
- TLSH
  T15D673328A0516721A0AB69F66DB73D47B90C043912BA1BFC5FFFB79414077CF062B266
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy