1282197fd014abd3df2f59813e4072897b1d98351a80c214235ece7ea6936939 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

SecurityHe...ay.exe

windows10-ltsc_2021-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
SecurityHealthSystray.exe
Size 85.2MB
Sample260722-recdwawele
SHA256 1282197fd014abd3df2f59813e4072897b1d98351a80c214235ece7ea6936939
MD5 ddfdd9d68b2622528b3164cf29e91e27
SHA1 f21dc5ae5f05eb5ed855e341d7b092e46d3f5f06
SHA512 66d6289d3eccad134a783ad20f2ebe3ec929ffff9d43df498f94d4af80b22013e5dba444b1ccbb81ca96fb64f98aa15131c00464d47dda6009a884bef121a11b
SSDEEP 1572864:V/ELr8rZD48zVtrioTPqib8Sc/JUNnN0/utd0xyRrt0oZ5Dq5+swNqWK:tE8rZDZtrio2iASc/iFN0/kd0x0Z1e+V
TLSH
T1C21833D4CAB53A53F906CA75D7A2BE38D4E621282FA34E4F13C493713737189457AAB0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion execution persistence pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

SecurityHealthSystray.exe

Resource

win10ltsc2021-20260513-uk

windows10-ltsc_2021-x64

14 signatures

900 seconds

defense_evasion execution persistence

Malware Config

Targets

- Target
  SecurityHealthSystray.exe
- Size 85.2MB
- SHA256 1282197fd014abd3df2f59813e4072897b1d98351a80c214235ece7ea6936939
- MD5 ddfdd9d68b2622528b3164cf29e91e27
- SHA1 f21dc5ae5f05eb5ed855e341d7b092e46d3f5f06
- SHA512 66d6289d3eccad134a783ad20f2ebe3ec929ffff9d43df498f94d4af80b22013e5dba444b1ccbb81ca96fb64f98aa15131c00464d47dda6009a884bef121a11b
- SSDEEP 1572864:V/ELr8rZD48zVtrioTPqib8Sc/JUNnN0/utd0xyRrt0oZ5Dq5+swNqWK:tE8rZDZtrio2iASc/iFN0/kd0x0Z1e+V
- TLSH
  T1C21833D4CAB53A53F906CA75D7A2BE38D4E621282FA34E4F13C493713737189457AAB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion execution persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecutionpersistence

© 2018-2026

Terms | Privacy