18aab0e981eee9e4ef8e15d4b003b14b3a1b0bfb7233fade8ee4b6a22a5abbb9 | Triage™

Login
Reports

Overview

overview

4

Static

static

3

AgentTesla.exe

windows10-2004-x64

4

AgentTesla.exe

windows11-ltsc_2024-x64

4

MaterialDe...rs.dll

windows10-2004-x64

1

MaterialDe...rs.dll

windows11-ltsc_2024-x64

1

MaterialDe...pf.dll

windows10-2004-x64

1

MaterialDe...pf.dll

windows11-ltsc_2024-x64

1

MaterialDe...pf.xml

windows10-2004-x64

3

MaterialDe...pf.xml

windows11-ltsc_2024-x64

1

Microsoft....re.dll

windows10-2004-x64

1

Microsoft....re.dll

windows11-ltsc_2024-x64

1

SharpSteam.dll

windows10-2004-x64

1

SharpSteam.dll

windows11-ltsc_2024-x64

1

System.Man...on.dll

windows10-2004-x64

1

System.Man...on.dll

windows11-ltsc_2024-x64

1

System.Man...on.xml

windows10-2004-x64

3

System.Man...on.xml

windows11-ltsc_2024-x64

1

UWPHook.exe

windows10-2004-x64

3

UWPHook.exe

windows11-ltsc_2024-x64

3

UWPHook.exe.xml

windows10-2004-x64

3

UWPHook.exe.xml

windows11-ltsc_2024-x64

1

VDFParser.dll

windows10-2004-x64

1

VDFParser.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
AgentTesla.mal
Size 2.8MB
Sample260729-cdqgsade64
SHA256 18aab0e981eee9e4ef8e15d4b003b14b3a1b0bfb7233fade8ee4b6a22a5abbb9
MD5 cce284cab135d9c0a2a64a7caec09107
SHA1 e4b8f4b6cab18b9748f83e9fffd275ef5276199e
SHA512 c45d021295871447ce60250ff9cbeba2b2a16a23371530da077d6235cfe5005f10fa228071542df3621462d913ad2f58236dc0c0cb390779eef86a10bba8429f
SSDEEP 49152:4HEHIHP6z9goDKncJkYgCB7UODoQvjZMElnp0zGMPokHz5xZtYgxsdexHwNbUMb:ZdRFBmnQ7rjZMYSzGbkHzXxWeu6W
TLSH
T186D5339256B8D8F7C3B21DB1FA0C257B5598EE7929C8E517935E1B2B4E0302BFC79201
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

adware discovery spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

AgentTesla.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral2

Sample

AgentTesla.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral3

Sample

MaterialDesignColors.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral4

Sample

MaterialDesignColors.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

MaterialDesignThemes.Wpf.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

MaterialDesignThemes.Wpf.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

MaterialDesignThemes.Wpf.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

MaterialDesignThemes.Wpf.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral9

Sample

Microsoft.Management.Infrastructure.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral10

Sample

Microsoft.Management.Infrastructure.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral11

Sample

SharpSteam.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

SharpSteam.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

System.Management.Automation.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral14

Sample

System.Management.Automation.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral15

Sample

System.Management.Automation.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral16

Sample

System.Management.Automation.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral17

Sample

UWPHook.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral18

Sample

UWPHook.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral19

Sample

UWPHook.exe.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

UWPHook.exe.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral21

Sample

VDFParser.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

VDFParser.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Malware Config

Targets

- Target
  AgentTesla.mal
- Size 2.8MB
- SHA256 18aab0e981eee9e4ef8e15d4b003b14b3a1b0bfb7233fade8ee4b6a22a5abbb9
- MD5 cce284cab135d9c0a2a64a7caec09107
- SHA1 e4b8f4b6cab18b9748f83e9fffd275ef5276199e
- SHA512 c45d021295871447ce60250ff9cbeba2b2a16a23371530da077d6235cfe5005f10fa228071542df3621462d913ad2f58236dc0c0cb390779eef86a10bba8429f
- SSDEEP 49152:4HEHIHP6z9goDKncJkYgCB7UODoQvjZMElnp0zGMPokHz5xZtYgxsdexHwNbUMb:ZdRFBmnQ7rjZMYSzGbkHzXxWeu6W
- TLSH
  T186D5339256B8D8F7C3B21DB1FA0C257B5598EE7929C8E517935E1B2B4E0302BFC79201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  MaterialDesignColors.dll
- Size 292KB
- SHA256 976eea4567656d536a6344b3834f958f2b9e27401b94c643681770437d5abc68
- MD5 39367419516f5f3df9ab1f9e5d0bbcd5
- SHA1 762c9acdb09bfdf40e700645131999202abbc871
- SHA512 20ea8a64a14579ef5403eae8a6345afa0f9b12229fdb8bc869f7a8cdd4e785093b9f60f9445be738266a161d75f53a8b8e42a69b2f9b4cbf4684f5dbf5113ae9
- SSDEEP 1536:2ZJb/nKyGMbYrE4jKg4J4A+0MDR1TU7fKoVxbYCCMIRFxcE5istk0uWE1Ci4oggj:2DDrYrE6oJU907fKoVxb+Y
- TLSH
  T17454735C1250D0FEDC13537A4838319A62277A36AB954F9AEEAF31BD9C1600B9F335E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  MaterialDesignThemes.Wpf.dll
- Size 7.1MB
- SHA256 013a42b8c6ffa29e2198eed4faf6168247b6550a4c4ed5d82023a1d82a08e27e
- MD5 fbd761926164043ac71ee9b83ab37fd1
- SHA1 38d44b0f40fa31124ba139adeb6f7adc7e53ee19
- SHA512 c2a0be2d8b5b98dc19ad167aadc1e68905ad259e3b0e020cfb95a8a816964549c98a9c5bc44b8f4640147bfd8555e799216b8dba13bf0eefed9582782da552d2
- SSDEEP 98304:OXJDntBksKY+ND3WyA4+TLVei10vMzPv8/4C8B5XVS49Xzy83IiEcJMrCR2fShTf:onJ45/9iD54+V11bFv4z
- TLSH
  T1D8762E2CC901A76BE2B7C26881DE4A17F162852AF53D5F0E30C71B6932469837E85FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  MaterialDesignThemes.Wpf.xml
- Size 91KB
- SHA256 26cc592ac318b8965f07a5dabef211dc5c71c51d83e0136679e075d6a2a17b44
- MD5 2e77f3e2bff6c6f9360de69b43570561
- SHA1 d1454e0d658590f46f578d312b5311c732ee74ac
- SHA512 bdbaf43e137a1a016b3e1c5125acf79a6f7fcf5137969eea69a18b682ed326734d3303fd178c93cd4c4a4779d5fb145aec67356db6000394c2b76065ef069581
- SSDEEP 1536:+wTCzaNeW6efGe3Pe5041CRjaJgk0K5gHlwL1Cf9xibn585Kg1shLJkQnaRp+iyO:+xRnkQBdUd
- TLSH
  T1C493C12072C89A1B0E7705122E94B8D4FF14193B606B58B9704C7E5F1FFB986937F8A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  Microsoft.Management.Infrastructure.dll
- Size 36KB
- SHA256 cbec9a910488cadbad860c850ceae521a2a346619c5a9da579e5051e270f114c
- MD5 3998804194188c25df75f505ac5c531a
- SHA1 6b15b2d779e7c46e31fcc864fc1ef326fb3d2b50
- SHA512 d7cd7457c753190fd1ae5386a62dffbe5907ace02227ef873f4c890f4a4e987914fb94ab1ec8318f48a76fc55cfe8e7de83b75cfcbec0bb8ff0e18d2d956abdc
- SSDEEP 768:droEzop6gC66+666M66666+vvvvvvvvvvvvvF66666K66n6666666666ZpkLEyXD:nNLEyXCL
- TLSH
  T1D9F2E8C24341D52ECDEB92BAF0D512E02339F34D67539B0BA718A01EA95FBAD7307A45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  SharpSteam.dll
- Size 5KB
- SHA256 74a89211b2a1bcf84796785fb93647ac6a1e5efbb2bbd14ddcee2e50c15153a4
- MD5 aa6d1a798829536972ac5ba7d01d0c77
- SHA1 8ec399faa7c428e9962f116b2baf6efca636e8c8
- SHA512 a937d3840bd6102c321ebaa06e01bda575d383aa152c1c0bfc8faa870109a7672a9957c50a6a259ecf481b47450df1814d7d152334e396780fe15760281be870
- SSDEEP 48:6O/89d6LfKuNpIoijbm2EjW6NINM/OMeZSCo1bumqMzxSu4tM/klXWRO6uFF:0uNpI7j6jWyPgysCcl8
- TLSH
  T1E8B1761563E84737EDBB0F32AD7387524674FA51AE53DFAF0445215A6C126048E31F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  System.Management.Automation.dll
- Size 352KB
- SHA256 c3a5868584a777422cebcf31d6718fd2b26d5e2314d3b5ba6d8e47aa40faba0c
- MD5 835e9ede7e7c774e7a2d56cfdf6e9b17
- SHA1 a43ed886b68c6ee913da85df9ad2064f1d81c470
- SHA512 74284fd44497beb74326d11a0f63d96aff20aa44cfa8385f6b63b7e6743403c36e2ea4fb0d991767117a97d320e04d2b21f0a4730916244af4ffdaf51e834a26
- SSDEEP 3072:d/SDqTIE+QQVVBCTmAG17iT+Lt8D/1L2iLZdrs81sDotEKjRmarzRm+5gSBZqoEJ:d/PXS6WK2iLZdgotEKj9rzRmkgSBAot
- TLSH
  T1377408253764DBAFC8AFA276F96544304637DB183922C72359182D2C59CF76BBF12382
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  System.Management.Automation.xml
- Size 6.8MB
- SHA256 91f3d6351285f8976739460142ae9e390895f03acc6abdad37c615e31fe263c8
- MD5 ed8ef3dc9d3ac8c179d4e70836e59bef
- SHA1 5a6fd18e7e3632b08b399aa163e8ca5d27e29bff
- SHA512 f1f98b2a1c21b70d06451e5ee5bfbd9342cfd54b965bc7a958d58451b67d5f405e720fc06960c90f05227a3a2bff0869ab1a1da9275fb5ab2ec88a5bddc1db9b
- SSDEEP 24576:6JmkwcDZzs/v5yJKY12nB3OGrXC8pfQwt0xPBGjwWcrz:4hVQ30JV2B3lfQwt0xpGjwWcrz
- TLSH
  T10E761F21B7C48A290CB742171D75F4C0FE310A6770599CAA70CD6E279F7BC9293BBA91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  UWPHook.exe
- Size 831KB
- SHA256 d55baebe14b8e68afd44227d3ae7307fa07dbbdd91331b892edde93fd027ca6e
- MD5 9aa4929291eff01d727b9fb88bba080c
- SHA1 820321cd5e8fbf81db43f024e93ee190811b8906
- SHA512 b52e18c3c8f4f30479c974e4c19e00cacdb850df6e631aeed553cbfee77703e664136385ff7a6b38c90ddf18e0c29a08c51264ad7696c5d8278b8876d3b7fe1f
- SSDEEP 12288:O4IH5S68xqbLLjo9LfPw3ytl8dSkc6ZubYpE0EjcUBS4BJ:O35R8xf143yte6epEdjcUBzBJ
- TLSH
  T19105E1499194CE52CA6A03B1D79208F626372C33F13196CF6E14FE8977B7A684F23947
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  UWPHook.exe.config
- Size 1KB
- SHA256 af825bd6de06ddb2d1f90d51a6c77ec517c9594dc684075a654adea4dca00613
- MD5 b2540cbb6ec9839a292c292ea7ac8b65
- SHA1 ee91fb07609d9e435206386d94fb43d9ac78c70f
- SHA512 c8047d7b2c602ecc4fe021c0eef58fdcfa8f31408d652e9027b7b9849b89bb4079c65ec3c78f85f60d6b8fb9d227a01925b0adaa481913acb75174439a37cd0a
- TLSH
  T17921051871C0BE5B15332B32E6314681EEB006A7513624A4B9AE72679F318CA07933BA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  VDFParser.dll
- Size 15KB
- SHA256 503804161cd8ff82756292f6d4d24107e6c8ac4cf43df89378f7b5d3782cc2ad
- MD5 17351a51f020d8352c3d8144bf89ab40
- SHA1 80a46c4dd6be71f789183daaa6677629654ebe68
- SHA512 ab5b16f296d787a72fed58bcb00e1295a543d4fb5eff00cb82c065fe336d18a572884003e2b519f5d4880546ce592aa9d903ad096a7d78dedf5f72b76034c983
- SSDEEP 384:GEI1akrMmNix7WLptEEEEEEEEEEEEEEEEEEEDl/hJOhE75MuODENhtN:lyMvWLptEEEEEEEEEEEEEEEEEEE5JwaJ
- TLSH
  T1F8621A19E37C437EC69F0738F86615550731A6857912EFAD8FE8A0AF7D023188512BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

adwarediscoveryspyware

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

adwarediscoveryspyware

behavioral16

behavioral17

behavioral18

behavioral19

adwarediscoveryspyware

behavioral20

behavioral21

behavioral22

© 2018-2026

Terms | Privacy