f84b4a767b7f6d1988ac34a0e220a3e981d405d8c7a13652aa5678ccd7d5923e | Triage™

Login
Reports

Overview

overview

7

Static

static

5

FRSTEnglish64.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
FRSTEnglish64.exe
Size 2.3MB
Sample260723-baa29aycnf
SHA256 f84b4a767b7f6d1988ac34a0e220a3e981d405d8c7a13652aa5678ccd7d5923e
MD5 797332e563ca970c6d5f3c1001f2a4a8
SHA1 8d62c57b7b314ad8f1d8e0a403e8caca64cbcdd5
SHA512 87bf29cbcfbf5ba03bdf813b3b882ac3ae55929106d7e215d0900e307bb09a79faaec093bfd239c9cd113f4428d4cdf02d88b9a4ffe8f35bacc26ccd9f6ff731
SSDEEP 49152:h1H4jR2TYrQbDTrlEk2U+CnUGXztU5JI4Ik0ZD5FJ9X+:kUviCnLjerIRZD5FLX
TLSH
T1BCB5E00533B402DDFEABE1768A17C50BC7B278050677865F02A56B766F33B726A2E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution ransomware spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

FRSTEnglish64.exe

Resource

win11-20260513-en

windows11-21h2-x64

16 signatures

150 seconds

defense_evasion discovery execution ransomware spyware stealer trojan

Malware Config

Targets

- Target
  FRSTEnglish64.exe
- Size 2.3MB
- SHA256 f84b4a767b7f6d1988ac34a0e220a3e981d405d8c7a13652aa5678ccd7d5923e
- MD5 797332e563ca970c6d5f3c1001f2a4a8
- SHA1 8d62c57b7b314ad8f1d8e0a403e8caca64cbcdd5
- SHA512 87bf29cbcfbf5ba03bdf813b3b882ac3ae55929106d7e215d0900e307bb09a79faaec093bfd239c9cd113f4428d4cdf02d88b9a4ffe8f35bacc26ccd9f6ff731
- SSDEEP 49152:h1H4jR2TYrQbDTrlEk2U+CnUGXztU5JI4Ik0ZD5FJ9X+:kUviCnLjerIRZD5FLX
- TLSH
  T1BCB5E00533B402DDFEABE1768A17C50BC7B278050677865F02A56B766F33B726A2E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution ransomware spyware stealer trojan
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Modifies boot configuration data using bcdedit
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionransomwarespywarestealertrojan

© 2018-2026

Terms | Privacy