d9bb219b88ab5d0c1b2f339521f216817d3abb90a590072cc500c748b7b047b0 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Swordstrap.exe

windows10-2004-x64

7

Swordstrap.exe

windows11-ltsc_2024-x64

7

Swordstrapv3.1.js

windows10-2004-x64

3

Swordstrapv3.1.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Swordstrap.exe
Size 14.3MB
Sample260718-srb5baet9k
SHA256 d9bb219b88ab5d0c1b2f339521f216817d3abb90a590072cc500c748b7b047b0
MD5 bc55cec25c83f9d0b7284ba01d606031
SHA1 dbb688bfd711a4369771713090f318750e56b55c
SHA512 03b6f538225af86ef735c2f6551f4262ccf33668ea7bb4ea0f47e497544766c1bddc7e0b7c1881a600df546e0924469dd1f658d7c5932d8947bb97a0df424d0c
SSDEEP 393216:n0Pd63zXEAphVtnIUQSg+F0caDt9PvF7G0CMEc:0o3zRphDto+icaDtVvF7z
TLSH
T19DE633AEE3A019B5E8F7843C5951C660B7F1B1412FA2D2FF1BA40A251D3F6D04E793A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution pyinstaller trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Swordstrap.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery execution trojan

Behavioral task

behavioral2

Sample

Swordstrap.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery execution trojan

Behavioral task

behavioral3

Sample

Swordstrapv3.1.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Swordstrapv3.1.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  Swordstrap.exe
- Size 14.3MB
- SHA256 d9bb219b88ab5d0c1b2f339521f216817d3abb90a590072cc500c748b7b047b0
- MD5 bc55cec25c83f9d0b7284ba01d606031
- SHA1 dbb688bfd711a4369771713090f318750e56b55c
- SHA512 03b6f538225af86ef735c2f6551f4262ccf33668ea7bb4ea0f47e497544766c1bddc7e0b7c1881a600df546e0924469dd1f658d7c5932d8947bb97a0df424d0c
- SSDEEP 393216:n0Pd63zXEAphVtnIUQSg+F0caDt9PvF7G0CMEc:0o3zRphDto+icaDtVvF7z
- TLSH
  T19DE633AEE3A019B5E8F7843C5951C660B7F1B1412FA2D2FF1BA40A251D3F6D04E793A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2
- Target
  Swordstrapv3.1.pyc
- Size 183KB
- SHA256 3e5a18509340f743260c634afbbe1b45f7a7187412b68e37a114766790e1f999
- MD5 a298615ea67a8fccd3632b71908051c5
- SHA1 1cefc0f6a09535451baa36679cd0952edeef8540
- SHA512 e3a20a1ba4f5f5a2414ac54d02cc04515a2951ccc60ea4c08bdbd843ff12397c9e145915748645a841a87a94a35763baf66bc7c03feaeb4414e4aae8badc7f07
- SSDEEP 3072:1Lwo0LwKhpA3Lwxv0ipTvlkI4Yzs4FP6xrKNkQ:dehpn0iLYcsrmNkQ
- TLSH
  T1A6048DB1A2A4182FD877F07972D2BA467F748043A116DB05F12C26B86FC5D62D93B9CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutiontrojan

behavioral2

defense_evasiondiscoveryexecutiontrojan

behavioral3

behavioral4

© 2018-2026

Terms | Privacy