07fc1873fa129d72e94da6e1b5910ce3f1e2a4420ecf650da05747975e8ec6fd | Triage™

Login
Reports

Overview

overview

7

Static

static

3

PZ.Rank.Co....2.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
PZ.Rank.Companion.Setup.1.7.2.exe
Size 74.7MB
Sample260727-rapteatfmd
SHA256 07fc1873fa129d72e94da6e1b5910ce3f1e2a4420ecf650da05747975e8ec6fd
MD5 e8ab90e412730fdc2809ee1590cd20bd
SHA1 528842406f1f465b4156bbffb4fb12f687cd5726
SHA512 c8d0a984a43e4fe8610172e650b72dde0d932260cf3c5a74c10039103bc4cd94076fc5cbd63a24498c86a1e66bf300f64542bac5bc793273d6b506e5f80d2c3a
SSDEEP 1572864:1Ue4hdV6xfPHXf7M0zLr1X3OznfxySo3RPqSlfVDWjzNmz:1Ue4DoxffP7vl385ySor0jze
TLSH
T15B083341E5DD087EE26FF539FAA2F729834588DFC7E071AC155BC7D86E69B0A484800E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

PZ.Rank.Companion.Setup.1.7.2.exe

Resource

win11-20260513-en

windows11-21h2-x64

21 signatures

300 seconds

defense_evasion discovery execution persistence privilege_escalation

Malware Config

Targets

- Target
  PZ.Rank.Companion.Setup.1.7.2.exe
- Size 74.7MB
- SHA256 07fc1873fa129d72e94da6e1b5910ce3f1e2a4420ecf650da05747975e8ec6fd
- MD5 e8ab90e412730fdc2809ee1590cd20bd
- SHA1 528842406f1f465b4156bbffb4fb12f687cd5726
- SHA512 c8d0a984a43e4fe8610172e650b72dde0d932260cf3c5a74c10039103bc4cd94076fc5cbd63a24498c86a1e66bf300f64542bac5bc793273d6b506e5f80d2c3a
- SSDEEP 1572864:1Ue4hdV6xfPHXf7M0zLr1X3OznfxySo3RPqSlfVDWjzNmz:1Ue4DoxffP7vl385ySor0jze
- TLSH
  T15B083341E5DD087EE26FF539FAA2F729834588DFC7E071AC155BC7D86E69B0A484800E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates processes with tasklist
  discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

Hide Artifacts

Ignore Process Interrupts

Credential Access

Discovery

Browser Information Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy