8e6b2eb7b41f91d630cf55e7f93ac2018b13dbffe1e245e93eb3cd6a80320fe5 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

AMIDEWIN.exe

windows10-2004-x64

3

AMIDEWIN.exe

windows11-ltsc_2024-x64

3

AMIDEWINx64.exe

windows10-2004-x64

1

AMIDEWINx64.exe

windows11-ltsc_2024-x64

1

DMI16.exe

windows10-2004-x64

DMI16.exe

windows11-ltsc_2024-x64

DMIEDIT.exe

windows10-2004-x64

1

DMIEDIT.exe

windows11-ltsc_2024-x64

1

UCOREDLL.dll

windows10-2004-x64

3

UCOREDLL.dll

windows11-ltsc_2024-x64

3

UCORESYS.sys

windows10-2004-x64

3

UCORESYS.sys

windows11-ltsc_2024-x64

3

UCOREW64.sys

windows10-2004-x64

3

UCOREW64.sys

windows11-ltsc_2024-x64

3

amifldrv64.sys

windows10-2004-x64

3

amifldrv64.sys

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
GRINX64v2.rar
Size 1.4MB
Sample260730-ap75vswaph
SHA256 8e6b2eb7b41f91d630cf55e7f93ac2018b13dbffe1e245e93eb3cd6a80320fe5
MD5 23bc9b3737b2cb2e59ef7f6bfef06fbb
SHA1 cdb37da5632ef739a5ecd41177613ba23a8b99f6
SHA512 797cdc3f49900ab5ef9428576e5c886a6e540f9db291bf0d9c18420d214759d2b2620cddb4ed92fc28f12c80b7f7be32630fc18188869ff13b72a0a41c1078da
SSDEEP 24576:b8jw2aaAeKJJHHPFFZUUUB3dC0XkD671o2AVT/+bVfDi/JvNnUzKR:buaDtbZY3dC00ko5bOGRFUzk
TLSH
T1F06533F814931D884B73445EF95CC43187337D978BDBA345A7EA2E488EDAF851243A27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

AMIDEWIN.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

AMIDEWIN.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

AMIDEWINx64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

AMIDEWINx64.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

DMI16.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

DMI16.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

DMIEDIT.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

DMIEDIT.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

UCOREDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

UCOREDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

UCORESYS.sys

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

UCORESYS.sys

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

UCOREW64.sys

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

UCOREW64.sys

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

amifldrv64.sys

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

amifldrv64.sys

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  AMIDEWIN.EXE
- Size 148KB
- SHA256 948dbd2bc128f8dc08267e110020fee3ff5de17cf4aaef89372de29623af96fa
- MD5 182ec3a59bd847fb1bc3e12a41d48fa6
- SHA1 2f548bceb819d3843827c1e218af6708db447d4b
- SHA512 91ecc5a76edc2aea4219f68569b54d3e9fe15c2a30a146edc0d09e713feaa739a5c1e7dbfa97e60828696078d43d1f8fd3466234525b099ed6e614e854ac6c4c
- SSDEEP 1536:tNFrdLFZ7JxIVhlPBo8Upxwpwf+gHkow3SMT4HOw2htj6oANy/ht+vSMoqEcViWw:Pv7JIhlBAKwf+gWCM4OwyWscSMoqtLe
- TLSH
  T14AE36C1639D01CB2E861863144B99F21EB37DD38066142A3F79C92D61F897B0AF3D76E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  AMIDEWINx64.EXE
- Size 453KB
- SHA256 53e3b72f8eb13acf3cb69d4cb124e8dc64fc541555c3c95cc8003b8046853955
- MD5 6a6505b2413d2c7b16c6d059448db9e5
- SHA1 dfe6c6b6051c26326a12dc9d0d5701cb4728266c
- SHA512 1c0531581f0efe683ab763f6633ace60f0637b22830e7ec551babe19ac777a1a6821dc568bce13a8abee8bfef1c7d9397e0bee1c78c00810c65dadd788dab2a3
- SSDEEP 6144:JIeh4+TOKGuTSuXCJ6AtCoZPhGL/TnJ+z5rsxQhsCI9t/tk7MP:jpPTxXihA+zBhsC2Z
- TLSH
  T126A4095AEB5220E1D872D1B888815316FA70BC7847349BEB729C85161F736EC9E3DF18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  DMI16.EXE
- Size 30KB
- SHA256 28e6e1908f2996af9b7a9930f13d4c770d6963425df0869ce4bcdb1442a4a917
- MD5 2a89d4e479351022ab8bd604030a76f3
- SHA1 ad1d39fd38fafaae4d77eed5f1c67f665686736d
- SHA512 0fb48aaeeedb5a96246ffd80c167f501ff2f5a08cf8d2dbf63373666c6f3394244395e05e49b68fedf02c2a3df75ad6ba4223f0066c350993233cf218da83e43
- SSDEEP 384:d2a1f/coJEQ88t5hDQ8o3wk4YMoURAzMbdLWxrqw8CKn6l3myGWstap/+ZU0KXy+:dLf/NWQltVoV4YfDOWxXd3my/cY
- TLSH
  T140E23E867A3A02F5E3B76EF45E0A972D7FEC214CC5FD64740639649FDB4082B3A86411
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  DMIEDIT.EXE
- Size 3.2MB
- SHA256 5d37e5e7ce01549965bf2166adcba33d1e2c4bd2c90711032f3987b58452ce49
- MD5 fbaf6262fd84f9966338518d4de46fdd
- SHA1 291d481e3b42029e157e7c60febc8fe67cd50cf1
- SHA512 5d8cc6e1ab85fae8d9a5ffa83cecc2608b1fbbb28b9e80afe2dc6f7d46b657d489e03f75e42fc147d49313b3a41ad768fd0f320a905cbc41d767c0fc3c3d9d7e
- SSDEEP 49152:VOQ6nNB9ySqeDoVFixOA9DruNebQk9DtTKkuecMC+coEbyxvgg+lV:D6nwNomN1AKku1M2Jfj
- TLSH
  T1BBF57D5A67B840E4D4A6C278C4068A0BD3F3F8944B339B9F51D947AF1F736A24E2D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  UCOREDLL.DLL
- Size 112KB
- SHA256 78a4d8e5e8c33793e5a2020325d3a49e92e4826167742e93179bdacbf167b409
- MD5 8370f3114924ed6c53741de7a253625a
- SHA1 f7782d51e73526226a89229b4f3625c7ce43f3b3
- SHA512 5a13c0fb787366869fac57139fa2ebbd0c34a1bfa76c05ac879da60e534cbac694385f2b6120fdb6c7cf0e62cf4948efbdfde96e695a9d377f44eedb2e1b1398
- SSDEEP 1536:g+FKwswB29BLymvRwRvSpD0pQD61ShZT1Cw4cf0SbtsWFoYc0RkU:g8Vk9ymvyNMO4QqGeyqoLGL
- TLSH
  T123B39E217F91C4F2C099033C0E5B1B3A7FBE566CCE6959C3C7951E586E719B2AB3A201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  UCORESYS.SYS
- Size 15KB
- SHA256 fd6f56189cd723b32fc06392867fcd5128e63d8b5801e4f7a83523f820531981
- MD5 9555d36fb21b993e5c4b98c2fc2b3671
- SHA1 210a98be7da32cea98618c5a9640c23ce518c0ee
- SHA512 3ec96ba6fca7a4aa45becfef84b23b12c305f34045ac1a15b22745289e33b9326103e853bad698434df772a76515e7e8109fa8724d65f0351ee380c16d888c60
- SSDEEP 384:pp4uPb5yDmnoMXP1oy5KYJLWd6jH9inbjJE:pp4sEmTDLAmH94b6
- TLSH
  T194623CD20B603432EDB70FB14486C7B7DEB392820D96855721349A8E1FC6BB12798D9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  UCOREW64.SYS
- Size 14KB
- SHA256 a7c8f4faf3cbb088cac7753d81f8ec4c38ccb97cd9da817741f49272e8d01200
- MD5 a17c58c0582ee560c72f60764ed63224
- SHA1 bbc0b9fd67c8f4cefa3d76fcb29ff3cef996b825
- SHA512 a820a3280da690980a9297fe1e62356eba1983356c579d1c7ea8d6f64bc710b11b0a659c5d6b011690863065541f5627c4e3bc13c02087493de7e63d60981063
- SSDEEP 384:q1ykKJX1BIAQ0r1IiFlYJLWd6jH9inbjJ+T:uygG1IiCLAmH94bgT
- TLSH
  T1DB621AD687212075D96B4F31A4CAD273AFB3B2412DCD51CF1130C5AE2ED6BB1179C89A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  amifldrv64.sys
- Size 18KB
- SHA256 37073e42ffa0322500f90cd7e3c8d02c4cdd695d31c77e81560abec20bfb68ba
- MD5 785045f8b25cd2e937ddc6b09debe01a
- SHA1 029c678674f482ababe8bbfdb93152392457109d
- SHA512 40bbeb41816146c7172aa3cf27dace538908b7955171968e1cddcd84403b2588e0d8437a3596c2714ccdf4476eefa3d4e61d90ea118982b729f50b03df1104a9
- SSDEEP 384:Cf8OVN6UDYm+b10HMHd6xhxuGZBBfSZsHLPK6jz/cf:CffV8KApCMMxDuIPKgwf
- TLSH
  T1EE922911C3A45C4AEEA7CA3571F89636BE31B95177B4CADF8111C0068BA2BE15A7C368
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

© 2018-2026

Terms | Privacy