632097437cb415d6f8860ef1fafafa4b25301185c92ab7ac2962baa605a2ebda | Triage™

Login
Reports

Overview

overview

8

Static

static

3

cherax.zip

windows11-21h2-x64

1

cherax/Mic...es.dll

windows11-21h2-x64

1

cherax/Sys...ic.dll

windows11-21h2-x64

1

cherax/Sys...ns.dll

windows11-21h2-x64

1

cherax/Sys...es.dll

windows11-21h2-x64

1

cherax/Sys...le.dll

windows11-21h2-x64

1

cherax/Sys...ss.dll

windows11-21h2-x64

1

cherax/Sys...nq.dll

windows11-21h2-x64

1

cherax/Sys...ry.dll

windows11-21h2-x64

1

cherax/Sys...ib.dll

windows11-21h2-x64

1

cherax/Sys...es.dll

windows11-21h2-x64

1

cherax/Sys...me.dll

windows11-21h2-x64

1

cherax/Sys...ns.dll

windows11-21h2-x64

1

cherax/Sys...ad.dll

windows11-21h2-x64

1

cherax/Sys...ng.dll

windows11-21h2-x64

1

cherax/Win...s.json

windows11-21h2-x64

3

cherax/Win...er.exe

windows11-21h2-x64

1

cherax/cherax.exe

windows11-21h2-x64

8

cherax/clrjit.dll

windows11-21h2-x64

1

cherax/coreclr.dll

windows11-21h2-x64

1

cherax/hostfxr.dll

windows11-21h2-x64

1

cherax/hostpolicy.dll

windows11-21h2-x64

1

cherax/json.txt

windows11-21h2-x64

3

cherax/mscorrc.dll

windows11-21h2-x64

1

Analysis

user interaction
yes
max time kernel
56s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/07/2026, 13:41

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

cherax.zip

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

cherax/Microsoft.Win32.Primitives.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

cherax/System.Collections.NonGeneric.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

cherax/System.Collections.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

cherax/System.ComponentModel.Primitives.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

cherax/System.Console.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

cherax/System.Diagnostics.Process.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

cherax/System.Linq.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

cherax/System.Memory.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

cherax/System.Private.CoreLib.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

cherax/System.Runtime.InteropServices.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

cherax/System.Runtime.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

cherax/System.Text.Encoding.Extensions.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

cherax/System.Threading.Thread.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

cherax/System.Threading.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

cherax/WinUpdateHelper.deps.json

Resource

win11-20260513-en

windows11-21h2-x64

4 signatures

900 seconds

Behavioral task

behavioral17

Sample

cherax/WinUpdateHelper.exe

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral18

Sample

cherax/cherax.exe

Resource

win11-20260513-en

windows11-21h2-x64

15 signatures

900 seconds

discovery execution

Behavioral task

behavioral19

Sample

cherax/clrjit.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

cherax/coreclr.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

cherax/hostfxr.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

cherax/hostpolicy.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

cherax/json.txt

Resource

win11-20260513-en

windows11-21h2-x64

5 signatures

900 seconds

execution ransomware

Behavioral task

behavioral24

Sample

cherax/mscorrc.dll

Resource

win11-20260513-en

windows11-21h2-x64

0 signatures

900 seconds

Report Analysis Logs

General

Target
cherax.zip
Size 11.0MB
Sample260722-qzl85sfd39
SHA256 632097437cb415d6f8860ef1fafafa4b25301185c92ab7ac2962baa605a2ebda
MD5 c6752c0369ad03ce7c00619456bff433
SHA1 bf885d4c394ff831f50af3c211f918f025a1abc8
SHA512 4283ace62860a7ac9263600d68d666abcb51714f3bc152f1a9308bf22547ff6364dfe65ff945d1cd9a8b094b26b32f3477632d9fb508fa2104ec8e91e08f3eb3
SSDEEP 196608:x70zgGDnz09zKTqYmGwP/N+NcBROMIDdrrJ8W5RXn22Px+C6q:KDzGKTqYHm+NcmDdKWbn22PF5
TLSH
T1CEC6336AACC8499786F54156AB970217DB8995708EFAB53C35D80CB3BCCBCFE8731460
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\cherax.zip
1⤵
PID:664

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy