5885a7d53d4a9cfad60be82ad60b1b99edb132aa70fb8507831327d2dbe013e1 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

ActivatorW...65.exe

windows10-2004-x64

7

ActivatorW...65.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ol.dll

windows10-2004-x64

3

$PLUGINSDI...ol.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows11-ltsc_2024-x64

3

Download More.url

windows10-2004-x64

1

Download More.url

windows11-ltsc_2024-x64

1

Join Teleg...re.url

windows10-2004-x64

1

Join Teleg...re.url

windows11-ltsc_2024-x64

1

WiseCleane...en.exe

windows10-2004-x64

3

WiseCleane...en.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
5885a7d53d4a9cfad60be82ad60b1b99edb132aa70fb8507831327d2dbe013e1
Size 897KB
Sample260719-d75dgady3w
SHA256 5885a7d53d4a9cfad60be82ad60b1b99edb132aa70fb8507831327d2dbe013e1
MD5 71d8726149835b22a36cf6f54710d9db
SHA1 a8ff96b91512469d99ea631a5ac285cd1d5fc368
SHA512 abb4be8338dc5ec1ba459d3335baa05e7ca5d4205dfeb85ee1958f2e398c662df641be90121aac43782ea54ba1bb2ac7bdb3e08ad6ed51a17c2a602572735996
SSDEEP 24576:Rr8aICehVMgGfnmC6OWTRNkIVdkVN18KzZ4zF0Yh:pvgGf0jTRFVdc18AP0
TLSH
T1D81533AC0DC3D7AE68E01D3EE00BDF560949068DF9A953DDB58992C30F75DCAA1C468B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery link qr

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ActivatorWiseCare365/ActivatorWiseCare365.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

ActivatorWiseCare365/ActivatorWiseCare365.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/AccessControl.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/AccessControl.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/UserInfo.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/registry.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/registry.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Download More.url

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Download More.url

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Join Telegram for more.url

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Join Telegram for more.url

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

WiseCleaner Products Keygen.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

WiseCleaner Products Keygen.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  ActivatorWiseCare365/ActivatorWiseCare365.exe
- Size 91KB
- SHA256 11b3b5266dc13115c1b372f9577b80680f9d0090f96e51ff358203198a3b3658
- MD5 b5914f1443f849f2358d2e2c315187f5
- SHA1 765b92ef05487c169a1d2568da423d83f1d30ddb
- SHA512 ce06719f63c2fbd0554d7c76117a1d2b735c042eccd7e5963933cfa3a6cbc409e2109be7909ccec392015e63116afd8e321311ea9a0d26b5a892cd6d17105caf
- SSDEEP 1536:RrHoPdHBCuK8UidwYK9IOawEuBIg0ke1Jb2EOSJag6DF6aoTh/ad0yvF:JHadUuK8JdwYsawEuS9POSUBxot/wT
- TLSH
  T17C93D010A3D0C4BBE8A347709D7997B35BBABE2225649F0B17007B9E7D72590D91F342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AccessControl.dll
- Size 15KB
- SHA256 5fd5d8aec97cffaad9b7df6371b348d436cf1401e86fab614dc4cb8575428e52
- MD5 d74bb4447af48da081c7d9b499f3a023
- SHA1 dadf6e140e6fd8e49a1851cc144bb022e0adb185
- SHA512 9a15de5c6b08914f5e5bbc1c318fb0e84da28a316cf51ccddca8dfb64cd67b7ad06acac307b41d5086a0740055d327007ff890807d6853bb2e767179a3b3d758
- SSDEEP 192:0hdGZ2E0hm+Gc7ROMzCPvXWROt086dXHGrEKcDDi0b5ZsgMgiCXyo1Fp01eLLuIt:0hdGZ2E0YWV2908oj21ILud8
- TLSH
  T1B362A6124FF90BFEF1F16B352AB5553303A2B50124B1C21D5B91CE9A2831B9B5D74327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 a921cc9cc4af332be96186d60d2539cb413dfa44cfd73e85687f9338505ff85e
- MD5 f8b6dd1f9620be4ef2ad1e81fb6b79fa
- SHA1 f06c8c8650335bace41c8dbe73307cbe4e61b3b1
- SHA512 f15811088ecde4cd0c038db2c278b7214e41728e382b25c65c2eb491bc0379c075841398e8c99e8cceba8be7e8342bc69d35836ebe9b12ebebff48d01d5fa61a
- TLSH
  T1A78173BB92E40CF3D0A44BB740A71CE362B5DD301762001F4A478AAA2590B67EE7E715
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
- MD5 11092c1d3fbb449a60695c44f9f3d183
- SHA1 b89d614755f2e943df4d510d87a7fc1a3bcf5a33
- SHA512 c182e0a1f0044b67b4b9fb66cef9c4955629f6811d98bbffa99225b03c43c33b1e85cacabb39f2c45ead81cd85e98b201d5f9da4ee0038423b1ad947270c134a
- SSDEEP 96:JgzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHIDQ:JDQHDb2vSuOc41ZfUNQZGdHA
- TLSH
  T1D5E1093571C02DF7D08D897438167D2F43F4D52627BA05B046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/registry.dll
- Size 25KB
- SHA256 4f585d4dcb449fc1b0e002d7e850a059bf254769aee0fb83841f73064ec63014
- MD5 5408d183e7e2098ffa0290a7a5f9af49
- SHA1 5e8402903bd805ea136796032115b72f2d728c8a
- SHA512 2f3936808a257aeff0c1daabc274abca583e04395287c2a60778a4c01b5449c9364c6b42ef6a1588dab6823456b4f196ed22a7a911eb5cd65806a01da4d4c398
- SSDEEP 384:wUsbaKAjqsQZlJee0QwFJM5LPnnqutjZGmaZUjeVRVKY/raQWBQqLN9AYUVf:uBAoBwF2ZtN77j0KUeZBQo9AV
- TLSH
  T17AB25C8171D1D4B2D09F1579AB862F19E3EFAD603270E85211A67FCB33918A2D379B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Download More.url
- Size 122B
- SHA256 45eacd3e6cb034cc63b8c23a5d430ce2fc096e584dde6d85edef9e8bbf6b07b2
- MD5 850a1ecd29f3438c5d77474d4b04c6db
- SHA1 20e5f8db6226fbddfcb1f29d0668dbf454e55bab
- SHA512 592c5a4154c3dbdbb4c6918f5b1b689bf470e37186d1677dff49c0c536852c9467f68439643b22980db741ec78bccb56167b386b428ff64cba71182aed4ab7aa
- TLSH
  T1A1B012AE8246828BD351950AB0F0F9099E0FBDA40CD2D09CBA58DEDB0C880D3C948B36
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Join Telegram for more.url
- Size 130B
- SHA256 aa92b284c31d842ccb9dd8b1b515f22fb70d7b69387d85f42884a711d60d23c2
- MD5 54e39957b019fc7c1d2b005ca23f759c
- SHA1 b76214cc619139a076594fba6048aedfa4754cbf
- SHA512 902eb84dd12397ef4be22ba9eb240f59aa9bbc4091512d3987893ea57b59c2a82e9f433cd7f6f710945e4accd9ecc891c7de127ca3a5231b18bedbdb5be84650
- TLSH
  T166C02B7F4202C245C241C0051070FC08444E78B809D1D00C1508CF870C880C0C004F35
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  WiseCleaner Products Keygen.exe
- Size 740KB
- SHA256 5e04ec3d0238231721069805d0ccab6486a0a08ec2ffac6a3cdf225a8efc91ac
- MD5 4b4bd08f585f92e110fff4271483da90
- SHA1 2d3888ff193da18edee7b90c70c5301e9e395cb3
- SHA512 f59bec1f46e9c3287c38dafbcb7773a7874657b0e50e2f04522ab23dae7df1a999cffc855ddf0af04caf49d7c48ee3653afbaf9edf945433460da79d1cebe4ba
- SSDEEP 12288:LMgVMZ7L9olhV8LSoMAdNcUbNzluwdlKK5Cvt3zFZafQ4P7+RfPYJI0a8:4gVMdylhu2oMSTbNgweK5Cvt3jEWf30J
- TLSH
  T185F4236C9C85811ED3842A32F447CFB80A0D1D89FD9802DF66D67F9F3676B016A64A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy