0b13bed5a1cfacb5da0c3d8c8377eb9fecd6defec1280cb7a07305a3eceed18f | Triage™

Login
Reports

Overview

overview

4

Static

static

3

bin\WinDivert.dll

windows10-2004-x64

1

bin\WinDivert.dll

windows11-ltsc_2024-x64

1

bin\WinDivert64.sys

windows10-2004-x64

3

bin\cygwin1.dll

windows10-2004-x64

1

bin\cygwin1.dll

windows11-ltsc_2024-x64

1

bin\winws.exe

windows10-2004-x64

1

bin\winws.exe

windows11-ltsc_2024-x64

1

general (ALT).bat

windows10-2004-x64

4

general (ALT).bat

windows11-ltsc_2024-x64

4

general (ALT10).bat

windows10-2004-x64

4

general (ALT10).bat

windows11-ltsc_2024-x64

4

general (ALT11).bat

windows10-2004-x64

4

general (ALT11).bat

windows11-ltsc_2024-x64

4

general (ALT2).bat

windows10-2004-x64

4

general (ALT2).bat

windows11-ltsc_2024-x64

4

general (ALT3).bat

windows10-2004-x64

4

general (ALT3).bat

windows11-ltsc_2024-x64

4

general (ALT4).bat

windows10-2004-x64

4

general (ALT4).bat

windows11-ltsc_2024-x64

4

general (ALT5).bat

windows10-2004-x64

4

general (ALT5).bat

windows11-ltsc_2024-x64

4

general (ALT6).bat

windows10-2004-x64

4

general (ALT6).bat

windows11-ltsc_2024-x64

4

general (ALT7).bat

windows10-2004-x64

4

general (ALT7).bat

windows11-ltsc_2024-x64

4

general (ALT8).bat

windows10-2004-x64

4

general (ALT8).bat

windows11-ltsc_2024-x64

4

general (ALT9).bat

windows10-2004-x64

4

general (ALT9).bat

windows11-ltsc_2024-x64

4

general (F...T).bat

windows10-2004-x64

4

general (F...T).bat

windows11-ltsc_2024-x64

4

general (F...2).bat

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

Target
roblox-zapret-zxclinux.zip
Size 2.7MB
Sample260730-28vgnastcs
SHA256 0b13bed5a1cfacb5da0c3d8c8377eb9fecd6defec1280cb7a07305a3eceed18f
MD5 921758018916e7471d2a77476d283b8a
SHA1 b0368d82dccfecaf556e8cfdb5f1f2c9d0dca0c1
SHA512 ca6d62f25e52b927a446e0755aa7fa53c859c064f2ae4131d04a2f480640f86b9b61e8ecdf1a4a4047902611ffd35d46443a2ee2df829abaefe01b4244ed821e
SSDEEP 49152:/uTQ5NorTHGxnUta5bvLokMbHKiBkuTQ5NorTHGxnUta5bvLokMbHK2B4DF:/uUHUS1zdDokMjKi+uUHUS1zdDokMjKt
TLSH
T1FFD533AAA091DA8FD21263325C0E491146E6F1D135E0EFCD7BDD36488311C939B79EBE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery execution persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

bin\WinDivert.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

bin\WinDivert.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

bin\WinDivert64.sys

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

bin\cygwin1.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

bin\cygwin1.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

bin\winws.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

bin\winws.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

general (ALT).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral9

Sample

general (ALT).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral10

Sample

general (ALT10).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral11

Sample

general (ALT10).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral12

Sample

general (ALT11).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral13

Sample

general (ALT11).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral14

Sample

general (ALT2).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral15

Sample

general (ALT2).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral16

Sample

general (ALT3).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral17

Sample

general (ALT3).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral18

Sample

general (ALT4).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral19

Sample

general (ALT4).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral20

Sample

general (ALT5).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral21

Sample

general (ALT5).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral22

Sample

general (ALT6).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral23

Sample

general (ALT6).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral24

Sample

general (ALT7).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral25

Sample

general (ALT7).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral26

Sample

general (ALT8).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral27

Sample

general (ALT8).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral28

Sample

general (ALT9).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral29

Sample

general (ALT9).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral30

Sample

general (FAKE TLS AUTO ALT).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral31

Sample

general (FAKE TLS AUTO ALT).bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral32

Sample

general (FAKE TLS AUTO ALT2).bat

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery execution persistence privilege_escalation

Malware Config

Targets

- Target
  bin\WinDivert.dll
- Size 46KB
- SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
- MD5 b2014d33ee645112d5dc16fe9d9fcbff
- SHA1 aa69498562d350f2de06954b133e59fac1e57002
- SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH
  T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  bin\WinDivert64.sys
- Size 91KB
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH
  T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  bin\cygwin1.dll
- Size 2.8MB
- SHA256 103104a52e5293ce418944725df19e2bf81ad9269b9a120d71d39028e821499b
- MD5 a1c82ed072dc079dd7851f82d9aa7678
- SHA1 52f26fa1aee39476f1c13438aec8bf969c78da45
- SHA512 22993e7cee1e7aa69ffe45adf3a329abced7e53d54ffea96dab42fe273c81522252c7b7e98e5af36d2fdec0346c51540e977c6e56b8c08835bac86fa6d04ca59
- SSDEEP 49152:hGniafRcs02/oSqCmB5RMiCwDjUZQjuhKv+TLRlURxKc+tKaZrpu8dhcy1u7MHz:YniGRcsVJqCmB5RMiCwDIS4TBrppUy1J
- TLSH
  T165D55C1BF3A350ECC967C138466BA372BA32B82441347F6E2958CB701F72F51666DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  bin\winws.exe
- Size 199KB
- SHA256 affb4f69d2ea302a7abccd5325d81826e140ddae014f1e070bc4a6c0dd555188
- MD5 d498e19bc7a79dd1efcb6b928cbe9909
- SHA1 e660246d9b5de531d8c6ed563919d2690f47d209
- SHA512 03fa6ccc762999e4b5e3c7ed4f4a269d5e7114af52c833842f94fcbca19c3b2edd3c218df247d7616a54d25262f2dc14762a958c620433589ac3c1efa14b379a
- SSDEEP 3072:llblEpda/1ZqNUckRoAHzGDIAaSLECf6CuWhs/JSDxIcdDFth2zp:l/TY5czliX5mhYIcdptyp
- TLSH
  T145145B17F39588F9C462C17896AB5333E932FC452134FA4B9FA4DB212F65E10B12E798
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  general (ALT).bat
- Size 3KB
- SHA256 79a97d480379f2a00d11243f54b726c290c574354aad7f3e3689077110c0b1f1
- MD5 f6f4db76dd88b16da34702b1ca40d25b
- SHA1 43b43500aa187f7d72b85f656fcf88d16e37faa8
- SHA512 d3f37b613a0ff0cdf34960b5effb579ac7d51949e4b08693fa9c5cb98ea50ae85f553b1eed07acb1c6e3f265f240a1524f1c20d1a30a92861f43831dd52d6382
- TLSH
  T1B77129A7E00CDE47F5CDA93EF85FA5A42027988329D6D452835B89F8CC4EDBD684E484
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral8 behavioral9
- Target
  general (ALT10).bat
- Size 3KB
- SHA256 38c8e2f17e23c82d90811d8064997f022049580fc17f7fc7d1dcb27541b55e45
- MD5 6672d11bc3caecf7769051615e16ea36
- SHA1 432bef6971d0a13ab2f23080b6fda9170d17025c
- SHA512 7f1917e3f8cb4bcea1a03eff2f944f4de539ce13fc38202c3ef6d5682a7211be4d990a8b5b0d91cf3c7201b31e419fb089a9cd1628625b5f7a34e94ff3c50ec1
- TLSH
  T19C711993E00DDE47F58DA97EF85FA5B42027D88368D6D452439B89E8CC0ECBE684E484
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral10 behavioral11
- Target
  general (ALT11).bat
- Size 4KB
- SHA256 aa9f4e22d8308327869adfa4dfb36d7abd1ace9876f9205bb9f52f543520aad4
- MD5 77a4a3ff9d975ab7ec91f76abff04081
- SHA1 757158d5da39003f1f0d12710501ee4a6d97170b
- SHA512 0e9b61da3d463d99b52c1a0bfc3e58c8ea7af06e3bce0ea3e277a4e5fe99cf434f85ee6ba9b4559bee811f0fc2afe6ff1d2f6b0c30bcd4aea7d314e015eca403
- SSDEEP 96:nL67mQGB/GRRQ1zVIKdUGB/GR6Vv/GRRQuv/GR65P+RJ5+RRLxD:AmQGB/GRRGKVGB/GRKv/GRRDv/GRuP+M
- TLSH
  T19A9149A3E00DEE46F6CEB57EF45FF6A5201798C328D6D452835B89E8CC0EDB9594A084
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral12 behavioral13
- Target
  general (ALT2).bat
- Size 3KB
- SHA256 3133f3174bc49c72fa628332d4fab708e9191f6ec55d83aa3a5ecb3fdee42f47
- MD5 fdb51430ca84be7b045d19e209ac075f
- SHA1 3276a5e3da12dfe219dd04c498a8234a9b2604f2
- SHA512 687cd3749adcd78528a98fa3c9c24cc32ea1026a9a75ba85933d3672af281b3327fc874cfe09275848581d45b121e412bbfc20fac4246245bc9da24b050acdbd
- TLSH
  T18D612657E00DDE4AB68EB83FF89EE5E42007C8C35CD6D452439B89E8C84EDBE494E485
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral14 behavioral15
- Target
  general (ALT3).bat
- Size 3KB
- SHA256 3ebb9d6b57aedfeceeeea080cab9d1b5a8657931da2ac95945b0890d9d2f774c
- MD5 8cfb1311adc6f23b5aedeee4f2f12813
- SHA1 9e23da2a968b5ac4185b4b2bf554746b24b494a6
- SHA512 d46f3403e5e3ca15a37d4d31116dd277e2ec502fd5b8e92e93625b765088d31ad05b329b4c5b189a6b640ba59c752cd78b723155ab7dd11d01f7dd0d8d679239
- TLSH
  T171718C93E00DDE47F5CDAC3EF88FA5A4601788876CD6C851539B49E8CC4EDBA6C4B085
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral16 behavioral17
- Target
  general (ALT4).bat
- Size 3KB
- SHA256 dff16df02a590912c43b10ca30eb9c673dec81526cfb117e71d9ac97e860c918
- MD5 f6d638965d3f827a73a38869fbc7d98f
- SHA1 fd728439b9541c1bf8f26251fb793129197f9bc5
- SHA512 0054db2551053c1f3ed7c56d00b914117674909a90aedaca5089cd4569d2dbdc1d7235f93feb15651dd207fa8c333ac3dbaa6e0be209a7122991eb4889f700b2
- TLSH
  T193714993E00CDE43F6CDA53EF86FA6A4211798C358D6D452439B89F8DC0ECBD584E594
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral18 behavioral19
- Target
  general (ALT5).bat
- Size 2KB
- SHA256 61598039abcb5d8cf9ec3c03cc6306e22b3f06ff24814b3e8ad3e9b401bdec7c
- MD5 1b08cdd98cecb06bf9f469ecccd40420
- SHA1 11b20cbd8bdeb69c00ba7b2231a5145649a6a654
- SHA512 40d11c10dc2e493bbeec9ea819d188b5b596e015f822180049b64337c244e3f9ee2518927c3797e476d9a884b71141e059668e5f6a87139142c832f302f6133f
- TLSH
  T1F2411847E00DDE46B48DA83EFC5AA5F5601BD8C35DE5D452539788E4C84EDAE8C4E484
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral20 behavioral21
- Target
  general (ALT6).bat
- Size 3KB
- SHA256 27dcb6431785c1415df97b08ac1f38c5dc741aea92240c6eb195ec9d23121185
- MD5 f9221ffef5e065feec717d75450a53ee
- SHA1 ad6652408051d26b9bb6715bf27ed2e1d42b3dc8
- SHA512 f20d1eff24065b451aa812675feb3cb3ecd2c58b7fe57450a6a375599962dbca5b402e4d9e629f1cce1bc668eaba31fc03d937092bbda21674e406dc29f1ca0b
- TLSH
  T1BD612453E00DDE4AB6CFB83FF89EA5E52007C8C35CD6D452539B89E8C84FDAA494E484
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral22 behavioral23
- Target
  general (ALT7).bat
- Size 3KB
- SHA256 160721780481feee8d4b18d49cc69e1ae5d516e327f87a1b2fed0927fc58847b
- MD5 a20455610cd9a21dbeb2dd0fbef1dd06
- SHA1 d139cfed7a4c9a29c582a868f5a840b81c1573c4
- SHA512 04e0429437db9a104289be977eb7dce091cc157b1e5bb8db15006145877232086eb9889e853404fd433afe750aef6e6fc4a63d56b21d2fd305d284670e893f9d
- TLSH
  T14B510497F00DDE46B68EA83EFC9EA5F52017C8C35CD6D462539789E8C84EDAE484E484
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral24 behavioral25
- Target
  general (ALT8).bat
- Size 3KB
- SHA256 1e30b5721e5fe949284ebbe8eac1c887ffc08b918082e595b1cfa58ccc9100c2
- MD5 dd8c921a9b763d9158da8029957a3b87
- SHA1 8779a5013f24f6d7e61b46c7aa78c781008578bf
- SHA512 681951bf226ca7521a976f0152b852bdd31f23642b9b6a7262746801baa6cb94c3dc93eef8bf521b579b1a3626ed7cb46a3e590c936245975124d2fb9f1a7788
- TLSH
  T119615993E00CDE46B58CA83EF86FA6B42127DCC36CD1D452539B88F8D84EDBE584E584
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral26 behavioral27
- Target
  general (ALT9).bat
- Size 3KB
- SHA256 203aa8be1f06d8b78006024d605f34dd78d3e27a09e6f51fbd7e2ec3a65b4f64
- MD5 3b2029b08e05dc84357236c40022dc8e
- SHA1 6c115191a7c511a0b801d4a2de16e96f8529b0b4
- SHA512 50db6ff06af02a7b511fa1e577d7030d9dfe07cb5874c478e99771ce8aac6b0e34901f58a334bd5c2c0f230526ca3085dd0a9baebf68aa610881a68d06de4b70
- TLSH
  T145616A93E00DDF46B58D6C3EF89BA5B52017C8872CD6D852538789F8C44EDAE5C4F085
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral28 behavioral29
- Target
  general (FAKE TLS AUTO ALT).bat
- Size 3KB
- SHA256 1c80042803f64d18ef377895f99b93c4c203227d0023a3efec3b651b1c57b5bf
- MD5 1ffd351d17a04118d13ef5d0ddd2bd33
- SHA1 754d005f931c52336ad637b293a8655b8ba72322
- SHA512 1b2e9c5f0070339039d047bf136b383bb6a601b813894eb859d1856f313d4954fd3327a602e4ee28a2094d71d1167eceb98a555d0b37775a1901bb0e686f23da
- TLSH
  T17E713C97E00DDE47F68D683EF85FA6A42127C88328D1C851839B84F8DC4EDBE5C4E594
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral30 behavioral31
- Target
  general (FAKE TLS AUTO ALT2).bat
- Size 4KB
- SHA256 af6548d7b53d40492c7d256f60da5469b6414d976da04ed1adf3a4a09792bebf
- MD5 85269b49b93f09636aab2306eb054d86
- SHA1 94f66128df31e89753b220898c041fbfb34fbcea
- SHA512 87ace9b8f2349bbb80d6f70e89c948a37d7ff2c4dac59622a619c9307116045d8d1892d96c1327cf64ee5135889ab8d4f21cbf4d55b4315723a5522bc2aa240d
- SSDEEP 96:nL67mQGB/GRRQ1znDUGB/GRdVv/GRRQuv/GRd5P+Rv5+RRLxB:AmQGB/GRRGnYGB/GR3v/GRRDv/GR3P+k
- TLSH
  T10D917B93E00DDE4BF7CEB43EF86FB2A5201798C36CD1D452839B45E8D84EDB9584A190
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery execution persistence privilege_escalation
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Credential Access

Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

discoveryexecutionpersistenceprivilege_escalation

behavioral9

discoveryexecutionpersistenceprivilege_escalation

behavioral10

discoveryexecutionpersistenceprivilege_escalation

behavioral11

discoveryexecutionpersistenceprivilege_escalation

behavioral12

discoveryexecutionpersistenceprivilege_escalation

behavioral13

discoveryexecutionpersistenceprivilege_escalation

behavioral14

discoveryexecutionpersistenceprivilege_escalation

behavioral15

discoveryexecutionpersistenceprivilege_escalation

behavioral16

discoveryexecutionpersistenceprivilege_escalation

behavioral17

discoveryexecutionpersistenceprivilege_escalation

behavioral18

discoveryexecutionpersistenceprivilege_escalation

behavioral19

discoveryexecutionpersistenceprivilege_escalation

behavioral20

discoveryexecutionpersistenceprivilege_escalation

behavioral21

discoveryexecutionpersistenceprivilege_escalation

behavioral22

discoveryexecutionpersistenceprivilege_escalation

behavioral23

discoveryexecutionpersistenceprivilege_escalation

behavioral24

discoveryexecutionpersistenceprivilege_escalation

behavioral25

discoveryexecutionpersistenceprivilege_escalation

behavioral26

discoveryexecutionpersistenceprivilege_escalation

behavioral27

discoveryexecutionpersistenceprivilege_escalation

behavioral28

discoveryexecutionpersistenceprivilege_escalation

behavioral29

discoveryexecutionpersistenceprivilege_escalation

behavioral30

discoveryexecutionpersistenceprivilege_escalation

behavioral31

discoveryexecutionpersistenceprivilege_escalation

behavioral32

discoveryexecutionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy