d977b194565c7d50becb7e190893a6049170f20e505b599eb3ecc690a2565178 | Triage™

Login
Reports

Overview

overview

8

Static

static

5

d977b19456...78.exe

windows10-2004-x64

8

d977b19456...78.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
d977b194565c7d50becb7e190893a6049170f20e505b599eb3ecc690a2565178
Size 1.9MB
Sample260721-pwbgsshf72
SHA256 d977b194565c7d50becb7e190893a6049170f20e505b599eb3ecc690a2565178
MD5 b337c9c7fd6c94071c54695849b06c12
SHA1 94fccaeb18478debf5b4137c4203144680b1c437
SHA512 05d21ed9cb6ed3418e6fcd1d95123d2e14a5f420cf0f60bfae2e0954b3b78734265b38388dfff10dc8d9b62bb391dcd233390ee181472e5ddcee475185943f1c
SSDEEP 24576:wzFddNKn4qlcS8FArXOeMmG1eYjuhBkcLnoOGBnjVQwkuLRFMnlChZVAE/6+gCDa:wPnK4fFo/hPo7pPHVpZVN/6+gcGUU/z
TLSH
T125953397F14F9F19E1A22CB1D72BECD52914FC58D4A71B83834A7FE6AA312250B81743
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

d977b194565c7d50becb7e190893a6049170f20e505b599eb3ecc690a2565178.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

discovery persistence upx

Behavioral task

behavioral2

Sample

d977b194565c7d50becb7e190893a6049170f20e505b599eb3ecc690a2565178.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

discovery persistence upx

Malware Config

Targets

- Target
  d977b194565c7d50becb7e190893a6049170f20e505b599eb3ecc690a2565178
- Size 1.9MB
- SHA256 d977b194565c7d50becb7e190893a6049170f20e505b599eb3ecc690a2565178
- MD5 b337c9c7fd6c94071c54695849b06c12
- SHA1 94fccaeb18478debf5b4137c4203144680b1c437
- SHA512 05d21ed9cb6ed3418e6fcd1d95123d2e14a5f420cf0f60bfae2e0954b3b78734265b38388dfff10dc8d9b62bb391dcd233390ee181472e5ddcee475185943f1c
- SSDEEP 24576:wzFddNKn4qlcS8FArXOeMmG1eYjuhBkcLnoOGBnjVQwkuLRFMnlChZVAE/6+gCDa:wPnK4fFo/hPo7pPHVpZVN/6+gcGUU/z
- TLSH
  T125953397F14F9F19E1A22CB1D72BECD52914FC58D4A71B83834A7FE6AA312250B81743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence upx
- Drops file in Drivers directory
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx

© 2018-2026

Terms | Privacy