4c38cb9e1b01faac81bd93f865e0f48e401ad8182329b0f6a79f2066da8d0f7a | Triage™

Login
Reports

Overview

overview

6

Static

static

3

SafeDomain...].appx

windows11-21h2-x64

1

BelezaAISa...in.exe

windows11-21h2-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
SafeDomain[brhnqdxuzl].Msix
Size 10.4MB
Sample260718-rcr2jsgv7t
SHA256 4c38cb9e1b01faac81bd93f865e0f48e401ad8182329b0f6a79f2066da8d0f7a
MD5 84017b5d3e3630ffef70430f65a2a60a
SHA1 2f13f0ef8c107d589f880fbe091696ccb2197314
SHA512 a48fd64bd17212eaff189ab638c3c3967eda6fbd1afeff051cf14964f8d9f10dc4f0480d96d80d6419f42b392868098cc063200a9d6e90b49eafe942089cc6a5
SSDEEP 196608:UOMHfL1N/hGFGLuJguwYpNYjI/l5G3GQwYKJPnmY+NpTdGHlklKduBC:UpJNcgLuJ/w+iI/lE2QwtJ/mY+zTsHlF
TLSH
T1D2B633CCF118E401DD9B4C3E6D964FA8FDA604312AEABE85E7815E86519078CB07FD87
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SafeDomain[brhnqdxuzl].appx

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

BelezaAISafeDomain.exe

Resource

win11-20260513-en

windows11-21h2-x64

10 signatures

150 seconds

defense_evasion discovery persistence trojan

Malware Config

Targets

- Target
  SafeDomain[brhnqdxuzl].Msix
- Size 10.4MB
- SHA256 4c38cb9e1b01faac81bd93f865e0f48e401ad8182329b0f6a79f2066da8d0f7a
- MD5 84017b5d3e3630ffef70430f65a2a60a
- SHA1 2f13f0ef8c107d589f880fbe091696ccb2197314
- SHA512 a48fd64bd17212eaff189ab638c3c3967eda6fbd1afeff051cf14964f8d9f10dc4f0480d96d80d6419f42b392868098cc063200a9d6e90b49eafe942089cc6a5
- SSDEEP 196608:UOMHfL1N/hGFGLuJguwYpNYjI/l5G3GQwYKJPnmY+NpTdGHlklKduBC:UpJNcgLuJ/w+iI/lE2QwtJ/mY+zTsHlF
- TLSH
  T1D2B633CCF118E401DD9B4C3E6D964FA8FDA604312AEABE85E7815E86519078CB07FD87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  BelezaAISafeDomain.exe
- Size 7.4MB
- SHA256 c3820cb49b4b8fa95e52c7c8b202d78d3304518a241891d250a611acec96d30d
- MD5 a37139fe7bd63e6fe4e02f1552bf2f40
- SHA1 babe728e4cfb886fff184e340eadf0d55edce45c
- SHA512 fc1c994f23d4026528ffd5353e909ae346f846431d7fb7b492efdc31267892ef8fecbee3ac4928be6a4d797ffe18aefd9b35f6bda9afc5c11a9b134f9cd7760e
- SSDEEP 49152:pwoy1aZgBmcHHWNFwmp3ffyfFzD+YAvNRaT/7DQhIj6EhJUFEqi1/xXqeNTid3n8:SqgBmHNxiqNI9uE33Bgej+Ip8P4L+s
- TLSH
  T1C0765B03F66181ECC06EC178835AA733EB32BC8D4520B6AB5BE44B212F65F50AF5D759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasiondiscoverypersistencetrojan

© 2018-2026

Terms | Privacy