ec389764533c951abb21da3476a2f5cd1102398e7e6d833f62955890bc004c82 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

waif_v4.5....]_.zip

windows10-2004-x64

6

waif_v4.5....]_.zip

windows11-ltsc_2024-x64

1

waif_v4.5....XX.dll

windows10-2004-x64

1

waif_v4.5....XX.dll

windows11-ltsc_2024-x64

1

waif_v4.5....WU.dll

windows10-2004-x64

1

waif_v4.5....WU.dll

windows11-ltsc_2024-x64

1

waif_v4.5....up.txt

windows10-2004-x64

1

waif_v4.5....up.txt

windows11-ltsc_2024-x64

1

waif_v4.5....s.json

windows10-2004-x64

3

waif_v4.5....s.json

windows11-ltsc_2024-x64

3

waif_v4.5....re.dll

windows10-2004-x64

1

waif_v4.5....re.dll

windows11-ltsc_2024-x64

1

waif_v4.5....re.lib

windows10-2004-x64

3

waif_v4.5....re.lib

windows11-ltsc_2024-x64

3

waif_v4.5....indata

windows10-2004-x64

6

waif_v4.5....indata

windows11-ltsc_2024-x64

6

waif_v4.5....indata

windows10-2004-x64

6

waif_v4.5....indata

windows11-ltsc_2024-x64

6

waif_v4.5....me.txt

windows10-2004-x64

1

waif_v4.5....me.txt

windows11-ltsc_2024-x64

1

waif_v4.5....mm.dll

windows10-2004-x64

1

waif_v4.5....mm.dll

windows11-ltsc_2024-x64

1

waif_v4.5....mm.lib

windows10-2004-x64

3

waif_v4.5....mm.lib

windows11-ltsc_2024-x64

3

waif_v4.5....if.exe

windows10-2004-x64

1

waif_v4.5....if.exe

windows11-ltsc_2024-x64

1

waif_v4.5....if.otf

windows10-2004-x64

7

waif_v4.5....if.otf

windows11-ltsc_2024-x64

3

waif_v4.5....ly.bat

windows10-2004-x64

3

waif_v4.5....ly.bat

windows11-ltsc_2024-x64

3

waif_v4.5....a.json

windows10-2004-x64

3

waif_v4.5....a.json

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
waif_v4.5.4_[unknowncheats.me]_.zip
Size 6.5MB
Sample260730-xt72zsec43
SHA256 ec389764533c951abb21da3476a2f5cd1102398e7e6d833f62955890bc004c82
MD5 b3025595e800df7438260c502e1990dc
SHA1 2f7520d288fec0a7afb7056a763bc23ded76b24b
SHA512 15b58ae3227a867c8c385a3d566450c591bdae6b384bc01c7054831ba8ccaeefe5dd138af29b3c0ec4381d0664482152d027ac4176aacd9196bf896842b1dccd
SSDEEP 196608:XMOlJ0DHplpX4XiCD64XurDgiUdcREQTR8TWeHRyXSZ8sT:X30llpWFXurDFUdcSQTR8aOZxT
TLSH
T1B36633592A20FD27ED4E343FCB5B1907345B33A96324BDA85A745E03A85B23A1CD2F35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

waif_v4.5.4_[unknowncheats.me]_.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

300 seconds

Behavioral task

behavioral2

Sample

waif_v4.5.4_[unknowncheats.me]_.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

waif_v4.5.4/Release/FTD3XX.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral4

Sample

waif_v4.5.4/Release/FTD3XX.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

waif_v4.5.4/Release/FTD3XXWU.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral6

Sample

waif_v4.5.4/Release/FTD3XXWU.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral7

Sample

waif_v4.5.4/Release/discordoverlay_setup.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral8

Sample

waif_v4.5.4/Release/discordoverlay_setup.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral9

Sample

waif_v4.5.4/Release/grenades.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral10

Sample

waif_v4.5.4/Release/grenades.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

300 seconds

execution ransomware

Behavioral task

behavioral11

Sample

waif_v4.5.4/Release/leechcore.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

waif_v4.5.4/Release/leechcore.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

waif_v4.5.4/Release/leechcore.lib

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

300 seconds

execution ransomware

Behavioral task

behavioral14

Sample

waif_v4.5.4/Release/leechcore.lib

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

300 seconds

execution ransomware

Behavioral task

behavioral15

Sample

waif_v4.5.4/Release/player models/player_ct.skindata

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

300 seconds

execution persistence

Behavioral task

behavioral16

Sample

waif_v4.5.4/Release/player models/player_ct.skindata

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

300 seconds

execution persistence

Behavioral task

behavioral17

Sample

waif_v4.5.4/Release/player models/player_t.skindata

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

300 seconds

execution persistence

Behavioral task

behavioral18

Sample

waif_v4.5.4/Release/player models/player_t.skindata

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

300 seconds

execution persistence

Behavioral task

behavioral19

Sample

waif_v4.5.4/Release/readme.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral20

Sample

waif_v4.5.4/Release/readme.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral21

Sample

waif_v4.5.4/Release/vmm.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

waif_v4.5.4/Release/vmm.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

waif_v4.5.4/Release/vmm.lib

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral24

Sample

waif_v4.5.4/Release/vmm.lib

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

300 seconds

Behavioral task

behavioral25

Sample

waif_v4.5.4/Release/waif.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral26

Sample

waif_v4.5.4/Release/waif.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral27

Sample

waif_v4.5.4/Release/waif.otf

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral28

Sample

waif_v4.5.4/Release/waif.otf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

300 seconds

Behavioral task

behavioral29

Sample

waif_v4.5.4/Release/webradar-only.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral30

Sample

waif_v4.5.4/Release/webradar-only.bat

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

300 seconds

Behavioral task

behavioral31

Sample

waif_v4.5.4/Release/webradar/data/cs_agency/data.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

300 seconds

Behavioral task

behavioral32

Sample

waif_v4.5.4/Release/webradar/data/cs_agency/data.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

300 seconds

Malware Config

Targets

- Target
  waif_v4.5.4_[unknowncheats.me]_.zip
- Size 6.5MB
- SHA256 ec389764533c951abb21da3476a2f5cd1102398e7e6d833f62955890bc004c82
- MD5 b3025595e800df7438260c502e1990dc
- SHA1 2f7520d288fec0a7afb7056a763bc23ded76b24b
- SHA512 15b58ae3227a867c8c385a3d566450c591bdae6b384bc01c7054831ba8ccaeefe5dd138af29b3c0ec4381d0664482152d027ac4176aacd9196bf896842b1dccd
- SSDEEP 196608:XMOlJ0DHplpX4XiCD64XurDgiUdcREQTR8TWeHRyXSZ8sT:X30llpWFXurDFUdcSQTR8aOZxT
- TLSH
  T1B36633592A20FD27ED4E343FCB5B1907345B33A96324BDA85A745E03A85B23A1CD2F35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  waif_v4.5.4/Release/FTD3XX.dll
- Size 501KB
- SHA256 3c0fc158fd4aa604c526d58ed8274ae830d53e69e01210cc5b5fa54ec5a9b7c0
- MD5 f7a94af3b5f2f815866f97e8e0e393de
- SHA1 b9bcaad236c9ce5e938c7477e79e13e621c962af
- SHA512 7877f2a3d78a7a3cf72d117b4111a83f67f9e193c7c1f6daa29cd08e3d0833533aebc34c1e3cbdb17f0b243c963443790880e6ad9ced2a7c3171ef6f2fe6d1b8
- SSDEEP 6144:wOJfCxZ2hUellRG5MJV8SAzLk5MKOE3LwEDHYG4LWNE7W5oP8E:dC/2LzG4leI5MKf3LtrCWCig
- TLSH
  T1C4B48D1673A503B5E0B7D139CA568E85FAB2BC550720E74B03F496B62F237A0563F326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  waif_v4.5.4/Release/FTD3XXWU.dll
- Size 503KB
- SHA256 f0315b7f20ebdf1303082b63d6dd598ff7d98d3b738fc7444d000a4b64913666
- MD5 26da2c5e0a4b587e65be02dcdc35e895
- SHA1 2fdde9f5eb5dfc764fe0afb0b02d59593b9ea7c6
- SHA512 aa93434a2c1c9776ddcfc57827e3d15f698e57ffe4940f1ea9d273c22f311afeb2562087c09564615e43ce71da58d2b4204950bbe7408635ce04c6b703375d5d
- SSDEEP 6144:5FahD1cN6+ZnknBYWBlVyBBlAqd9GevQl3q921/+DaTFDbNG7O/:5QhDmN6aknZBqBBqe9GevQAa6aT1AS/
- TLSH
  T1AAB49E5673E503F5E0B3D239CA568E95F6B2B8550720E34B03E496B62F233A1467F326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  waif_v4.5.4/Release/discordoverlay_setup.txt
- Size 2KB
- SHA256 c9261844bf83e64e1fde8a32541c3b9ed5ba00689b4cd19012dd3644a16fce2d
- MD5 7e22718967d2397eb38e9e729e9b3c4c
- SHA1 422ea6e11aa5c2b57335efc9552e8482d014b6b6
- SHA512 066232eaf3a9bf179fe1ee67b80b60debb3916cdbb296ec461172cf346c5548a0ddd7382e8473d798e1052e4caf89604f6af7103d4925902252555d65e2a9ed7
- TLSH
  T1F551986F6237597369E622B9F70FB676E7001888821F2172721DA2AD3008316C63ED4F
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral7 behavioral8
- Target
  waif_v4.5.4/Release/grenades.json
- Size 131KB
- SHA256 ed700774421f5c5c4ebd5b9655bbd1061a1eb046e1f83d0d1a4fea73a89447cd
- MD5 80bacf4beb3cfa56b1538df8bf426c47
- SHA1 0172cfaab3ad68ac3770bc46319b9524c2be62bc
- SHA512 0be7432342f6c9397aa8cd78520d2975dda496645bd55787c4bef402eddc5285b189c229cf10a6d1b01642f8654b5af8fc026a91c3910d42dc70b340d9a7fd6f
- SSDEEP 768:JRqYEhWcuQ99TWQbcmLNDZBkbr+3cag6dyG/ujTmOSO5BEU4IpPLmyHMavX7d8pm:JRoucJ3/g6d0jCKl1X+63KFKrF1
- TLSH
  T19FD3F5B6C46C4C27262D04B618EE2B0637A817DB5CD87C097384495D5F8F98FB9FA60E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral10 behavioral9
- Target
  waif_v4.5.4/Release/leechcore.dll
- Size 150KB
- SHA256 ddc54f880fecca1bc0e04542c9612365f9f741cdaf87b6ff34baef714cd29735
- MD5 54f2055fd24c2cd98290400500a06db3
- SHA1 24a6d0ff5b34829ceaaba9e672c3d6b5785ede2d
- SHA512 8a1f60ac90c637cefbea7737d310fe664adad8e24076f358ca6b22ace4622ac90465b8e0edf056271eab21d16a9b653f5cce14593dd1e54fe48a04dd69ff06cc
- SSDEEP 3072:1H/5SnDL3rfvPF5BJ/tKTcrSzPJJ0XZMkLxgOVEKipesSkE:Z/YDXH3/qcr4JiXZMkLxgOVE6R
- TLSH
  T145E33A4BB79424BEC967C138C956D62BFAB3B41813106BEF0260C6B52F637A17A3D351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  waif_v4.5.4/Release/leechcore.lib
- Size 5KB
- SHA256 21fbc53b326028cff6f990347428dae0593c56e2b4db9d98b49cc371d37d1c92
- MD5 22fdd9e621964f58df975eff6e122d46
- SHA1 cc2644c987f542ecec91936b2884dc05abcd9e39
- SHA512 d7e99be0c9acc69deb372c668e1465da77c97de8c2c8b8379e89990969fc4ff100d452127a6d43d34ae3eb94446d3d1c50a0e7cd058d145e16846cc08787703e
- SSDEEP 96:IkZGC3kIAxoVm+iLSwKeKEKLQ5ZoWJ6WfAL:Im3ZAEQ5ZLc
- TLSH
  T1A0B1A037F55A5F1FF2DE20B4822190FCE52C54143602546B7C8C78CBEBAF62E960A54B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral13 behavioral14
- Target
  waif_v4.5.4/Release/player models/player_ct.skindata
- Size 1.2MB
- SHA256 b39e6080e8acf9a406f181c5e3495d1c335feaef5629a771dd948db86de7eae0
- MD5 13cff49c9d0b5798db64cb47a7bf2175
- SHA1 6472256d88c66f0d499b80b0233bc8a8a0197355
- SHA512 9c4bf04b8fd1c25881046a07fd915c987ff45ee4f7c997ed565d0b8c399c059e102e30a5197103480b5b645f617460bf68132684281741cb5a0ab40531a7b4ee
- SSDEEP 24576:/OgMHi/14zOgMHi/14zOgMHi/14inXZhJ0HEqCWDkXjwRlvvx7lm:/OgMHi/14zOgMHi/14zOgMHi/14iXZh8
- TLSH
  T1EA455965DC27467CD4B52932006B5F19E6B8E1AE91B418371331FAAC3CE071F49EAE8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution persistence
- Drops desktop.ini file(s)
behavioral15 behavioral16
- Target
  waif_v4.5.4/Release/player models/player_t.skindata
- Size 708KB
- SHA256 c3bf851d34f9f658eafa66448af4602d874fc88f836cbda94189e973532efe2f
- MD5 6c179150b792565ed9ea924e775e5950
- SHA1 3b5440fa0c7fca005b385d2d267f546d6dc2d5c7
- SHA512 857bfab876352fcf1f67d2c8b51ac1314ee16018297114cda11a0d10100a78f77562cc3c8df8d97b9649713f342aca9fe2d67b96876492dc3c266b9752bb2bb9
- SSDEEP 12288:PxggxL8zLC1Gyb9L+QjOxUsO2ZFCkCX30o9Y/oSsNz3cu:pgSL8z/yd+QjmUKCkCXk/oSsNz3c
- TLSH
  T178F43957B8539B3DC1BD02B180FF0E6A993E8945891229B3A33995583EE371B75C37C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution persistence
- Drops desktop.ini file(s)
behavioral17 behavioral18
- Target
  waif_v4.5.4/Release/readme.txt
- Size 1KB
- SHA256 d26375dadf57085fde8ec501c09e1245136aad4c882259ea0066d7c799c1f2d8
- MD5 3b224d697f47dae31a5e5799ed0d064e
- SHA1 0d0f21186058c702836fa328d03ccec498a9689d
- SHA512 c53af8462b187548400f633185d85d244454bf426204c9803a6f5fa7a8148910fdd63deea76f853d980c1edf82d1683e44e0a9f950e5e1b18445b7751830b79d
- TLSH
  T17241C842E5FA31A78DBE4B59338650A3BF1DC140471D952EBCBC634CE4140AC4612ADE
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral19 behavioral20
- Target
  waif_v4.5.4/Release/vmm.dll
- Size 2.3MB
- SHA256 4183df81c914f9b3719fd276c3c7e1642da55d16de8f0bf5e8eb88c6f4cec68c
- MD5 40bea58281462aedc8c25214ce6782ad
- SHA1 8e02fe8a0047494b916c3d7f8a67cbf85e2080e7
- SHA512 bf2d752207ec72a20a5eebd64115c454fc8b7408fd395b516d4b37bc1b7c341dcc98dd46cff1cde6f0b104e3fdb21a82737807221050bf6dcfe10aa421b8cae9
- SSDEEP 49152:yza+8D+y1c00gbGrY5iNLBASV/IZVyTSx1cuUqfOvwPaPdn2j4KtKPraV0Rx6:n1c00gbGc5yuS+ZTuu7fA2R0z6
- TLSH
  T1B8B58E47B7A800B9C06BC139C91B5F07E6B174052364AADF76ACC9A52F63FE2127E315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  waif_v4.5.4/Release/vmm.lib
- Size 30KB
- SHA256 6336540a4e94f4f4ca568feca633dff5a5c5e83dcae27057f4246689e12a2d08
- MD5 c17d6460be56a5cdfe3d80967ed17b6c
- SHA1 07470b9a85a11df604abd62c087bdf1c651de589
- SHA512 a6c779f05cbaa31370f2d2a51e71cd168f702ea46485a45262ae2d47c81f3d433d772d1e3f3604529e6475476ecfadb3955165e3bc4a6c4dcda14ea81bde35d4
- SSDEEP 192:1cJnExsJLglCMlj1oJI9Y3Ib+p3+WtyfhpwEWBWZ39EIAgv9Korvio7XLCijptM5:KJHJQCMvu+MyfRIcio7XLCije7QC0Q
- TLSH
  T196E2362C48785C4AE27D93BE8B6298F8EE984703014A65B7379D5CD1CF3A51F2B47E02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  waif_v4.5.4/Release/waif.exe
- Size 3.2MB
- SHA256 034fefe03fd217d42bdf22e51b5b80cfa0b970d5895ed075f440398c6b5b3cb2
- MD5 895676f2495baf00704ac7201fd2b7e4
- SHA1 7196b347d601f4b666133cec638a5029484c0514
- SHA512 d2dc9dfa4459aa327dee2f16ba01e6279e898b51c2aba64bfd8ae729130f3bc2bc211bde0c3e962cef7398d9719ca0a29867dab122e8996b18e0ece099b2accc
- SSDEEP 49152:B9jPNkbVpWS5mgs+6u5a16pDxBhZM0vYZFMn/RuUDg:nCmCMz
- TLSH
  T1CDF5E70BDAB751E0C6BAD038B552722BF9703499C33897E7ABD15B061BA17E0E57E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  waif_v4.5.4/Release/waif.otf
- Size 42KB
- SHA256 cf81efa5626f4756b6e35dc09608029f8693078997a2e640e7251c8949bf2295
- MD5 6a94fa8447b1b4d150eafaad46fe9254
- SHA1 e4033ed3777811306d18c934257a82e78083d4e5
- SHA512 943d1916785f147b20077dd9f53505bbe86662c39526770db48f9f260410f569b7ec275a8f91293f05a72adc545087cd1bde4084d052c61139f579bc9726d2f9
- SSDEEP 384:liV8eLgWeK8mkhEwFwBBtYXZH8UhzpBGIr560lZOzcBtO1iwVnkEigUWAn:liieLghKUc2XZ/9j9RlZccBtO12nd
- TLSH
  T19413AF1FF6E021C3C45762BF65D0C6BEB211B01F5BAD7506750A43AE8EBB9464E88B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27 behavioral28
- Target
  waif_v4.5.4/Release/webradar-only.bat
- Size 170B
- SHA256 3a7d1a3e38beac6e4f5c1f2a26e53a7479af124fa489092f4ffd492df17cf668
- MD5 c290d9a7a40d4a870fe0c1672373ede5
- SHA1 82e5fc5a8934b65714bae2e966c5d46098131d4c
- SHA512 82d73bd044cf2babd4c028cd5e7630eb525be069c764d61291b880ff77ecafaa58023bfd538f2bad102937c2f37944ebc88f6fee84dbcbc1648e1a2c062efb04
- TLSH
  T1CAC08C023136BAC590E556429FB6D6E8B90B33DE8A41EE0AF09225306D042D2F5383A1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  waif_v4.5.4/Release/webradar/data/cs_agency/data.json
- Size 59B
- SHA256 03edefc663855f5924dca8e4941e0ba9e3467088287a52ed1c5cc3497752ae36
- MD5 204e854ad018ec1a3a476cd92c18eafa
- SHA1 1d77b8fa1e08372a1870acfb303b927afce753ea
- SHA512 02e34b1d8dfdd027bb9c419a8494b5cdf61de5f2174127b2b133024385050315f91846f827df820a16f5ace44171b9250a9dc12b686b4c511a45611ac9a4eb5c
- TLSH
  T172A0025906365E546109184790695AC418253ACA45D76E79F2449455C9348321F65952
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

executionransomware

behavioral11

behavioral12

behavioral13

executionransomware

behavioral14

executionransomware

behavioral15

executionpersistence

behavioral16

executionpersistence

behavioral17

executionpersistence

behavioral18

executionpersistence

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy