8c819f7fc8d9c3942170b06f60ddfdc53e4ad6a8c5a28389e8802f1532c5568d | Triage™

Login
Reports

Overview

overview

7

Static

static

3

SecurityHe...ay.exe

windows10-ltsc_2021-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
SecurityHealthSystray.exe
Size 33.4MB
Sample260723-hlecdafl8s
SHA256 8c819f7fc8d9c3942170b06f60ddfdc53e4ad6a8c5a28389e8802f1532c5568d
MD5 81a6368188844641bcac79767b4e2392
SHA1 5ed7875acbce7690d3c86657727f2f604ea1447d
SHA512 88dc6c4ba7f3c907a6a94dad3952f0725a5f9461f7fdc055f132446293b8dd1a4deaa85b5d19bc7988c8799dab06580ff69001583724060b224c22a5171731cd
SSDEEP 786432:XYqiWWrXsrnryKvuToWAGWJtZq5pzVQwt7eph/S3PA:x/Wr8rnrt0oZ5Dq5pqwNmNS3P
TLSH
T1327733D9CAE01D27EC56923D9AB3E525E2F670302B238D4E039D57A52FB728844397F4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion execution persistence pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

SecurityHealthSystray.exe

Resource

win10ltsc2021-20260513-uk

windows10-ltsc_2021-x64

11 signatures

900 seconds

defense_evasion execution persistence

Malware Config

Targets

- Target
  SecurityHealthSystray.exe
- Size 33.4MB
- SHA256 8c819f7fc8d9c3942170b06f60ddfdc53e4ad6a8c5a28389e8802f1532c5568d
- MD5 81a6368188844641bcac79767b4e2392
- SHA1 5ed7875acbce7690d3c86657727f2f604ea1447d
- SHA512 88dc6c4ba7f3c907a6a94dad3952f0725a5f9461f7fdc055f132446293b8dd1a4deaa85b5d19bc7988c8799dab06580ff69001583724060b224c22a5171731cd
- SSDEEP 786432:XYqiWWrXsrnryKvuToWAGWJtZq5pzVQwt7eph/S3PA:x/Wr8rnrt0oZ5Dq5pqwNmNS3P
- TLSH
  T1327733D9CAE01D27EC56923D9AB3E525E2F670302B238D4E039D57A52FB728844397F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion execution persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecutionpersistence

© 2018-2026

Terms | Privacy