c2fd63b3023b4c8bcf6486a3bdb760a257bd3ae53b7432c44431680f4f6f2642 | Triage™

Login
Reports

Overview

overview

7

Static

static

5

Paket_Dokumen.exe

windows10-2004-x64

7

Paket_Dokumen.exe

windows11-ltsc_2024-x64

7

nvdaHelperRemote.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
Paket_Dokumen.7z
Size 294KB
Sample260730-h2an5adf27
SHA256 c2fd63b3023b4c8bcf6486a3bdb760a257bd3ae53b7432c44431680f4f6f2642
MD5 4774580d4309dbc0bad44a4a120143c3
SHA1 2b72798a22eb3a36a95470e7385464669334c2f4
SHA512 83e3d8a2b94ce23651961215e82f5c1168824ab92d05c9da59dc92aa3cab4ab4c821ec96cb0f91a824210fde9f5c771a25557115023226df1229ea47938cfba1
SSDEEP 6144:xZCGojfQSarVqDQbYN/bWFzaNRV1eBssoBa7Lo:x0GcfQlUMvGN31xM7Lo
TLSH
T1D05423F36FE7DF63597A52020692E63397329C8E9BAA6C05720DD5A4E57C43784E803C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion execution persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Paket_Dokumen.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion execution persistence upx

Behavioral task

behavioral2

Sample

Paket_Dokumen.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion execution persistence upx

Behavioral task

behavioral3

Sample

nvdaHelperRemote.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  Paket_Dokumen.exe
- Size 118KB
- SHA256 93dd8b7b393289f88493596faa4ae70054d9eb4fe47f2dd334f0c6bb5262f2a8
- MD5 1605971fa40b7f784311cecea47a251e
- SHA1 9fd5870678ae20ffe9cc8c26068e75935f27957d
- SHA512 39b5009020a2330d46a746ded44081c8ce0b08a608520ccdc3745f4b98020a537afd2872fed848c1d12321f3e90312297e436693db5017801726a14e115078de
- SSDEEP 3072:dfYomTuROFcA8eTRuznTVTX3xOcODofsdp9:dgouuTQTR4nl3yAsdj
- TLSH
  T126C36C5B63E530E9E1B78678C4914A59E776BC7107609FEF03A0425A2F272D18D3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion execution persistence upx
- Creates new service(s)
  persistence execution
- Stops running service(s)
  defense_evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  nvdaHelperRemote.dll
- Size 492KB
- SHA256 e7f26e22ee3157db1f45d2b41ef650775c416e065b28baa19b730c74c04099ee
- MD5 fcd4052d0ac466426c317966f2b94e63
- SHA1 f47c167e96e5d66aef1297e4e262c7c1e2c54160
- SHA512 d78553e77643b409b0e45b380edf2e0a4ea5c9d2d8cdfc4371bef2ba11ba976640477770c41a7ed6834ad0e775bf8447d328d71eaddc15801c4f0aa0283bd216
- SSDEEP 6144:uNEgFAg1ESxK99XaZA0R+4X6kfIHfxIhuGnULLF3SSJgj:IEn9XavdKkfIHfxIsGUX1Y
- TLSH
  T1E7B4AF06B7E448A9E46BC474CA438647DA7678920F71E6CF0390D2392FB7BE45B3A315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasionexecutionpersistenceupx

behavioral2

defense_evasionexecutionpersistenceupx

behavioral3

© 2018-2026

Terms | Privacy