c6422ae0ed7568f683a8512fe2f8486a873f57751c1246d9e3d118585bc878d4 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Swollstrap.exe

windows10-2004-x64

7

Swollstrap.exe

windows11-ltsc_2024-x64

7

app.pyc

windows10-2004-x64

3

app.pyc

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Swollstrap.exe
Size 94.5MB
Sample260731-3rynesar4v
SHA256 c6422ae0ed7568f683a8512fe2f8486a873f57751c1246d9e3d118585bc878d4
MD5 b5c73378fe9595f62a99ed29223f3b67
SHA1 01d815efc5073dd7244021c0aba5ee0ad2f3fea1
SHA512 a70951763c3e7612d066f5d710d20ebb33381bfd5dd45ce56cbd06f8dd6d32c220f96ed6189a373f28e1b40c326374946d75b41cd1a1045f604cafa0d4017bce
SSDEEP 1572864:1/CwVPNWuyPdb3i5rnq3nsl6Hg82nqMD3mOi6wuJ0D52krd9kkeAaiI2wymUZ7mH:/xNJyPdb3YqslvqMzmOj6Nd9sAw4N8H
TLSH
T1E22833A38334185BCDBA46368771DE507B63610B5F959C4BAF804182AD3FBCD87B27A4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution pyinstaller trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Swollstrap.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

18 signatures

150 seconds

defense_evasion discovery execution trojan

Behavioral task

behavioral2

Sample

Swollstrap.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery execution trojan

Behavioral task

behavioral3

Sample

app.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

app.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  Swollstrap.exe
- Size 94.5MB
- SHA256 c6422ae0ed7568f683a8512fe2f8486a873f57751c1246d9e3d118585bc878d4
- MD5 b5c73378fe9595f62a99ed29223f3b67
- SHA1 01d815efc5073dd7244021c0aba5ee0ad2f3fea1
- SHA512 a70951763c3e7612d066f5d710d20ebb33381bfd5dd45ce56cbd06f8dd6d32c220f96ed6189a373f28e1b40c326374946d75b41cd1a1045f604cafa0d4017bce
- SSDEEP 1572864:1/CwVPNWuyPdb3i5rnq3nsl6Hg82nqMD3mOi6wuJ0D52krd9kkeAaiI2wymUZ7mH:/xNJyPdb3YqslvqMzmOj6Nd9sAw4N8H
- TLSH
  T1E22833A38334185BCDBA46368771DE507B63610B5F959C4BAF804182AD3FBCD87B27A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2
- Target
  app.pyc
- Size 30KB
- SHA256 d0dc19e5556778bf48b04595cf0cd1124d06187c5debc008ea88cf0521ad251d
- MD5 233c2ace18aa8aba4b816c0189474062
- SHA1 3e551ef8b15bbb6945f66e7faee9f8c2e173ca3c
- SHA512 6aea33d7e46478467f49345a32574da019d10b8260489be9f643f16cbe3853a25972a4b1af48e079b385fe9c5a7f4b70c7f0ff0837b9516d7d270684a57a298a
- SSDEEP 768:3+RsyIrs86N/gXMUBbpykBBSeqeVdZt7zdFhfYlp:OYrljzbpykBBSeqURPQlp
- TLSH
  T113D2B5C16796C57BF8A4B3765A5323867321C4F1B250CB133A7EC0A5AF87A752C611DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutiontrojan

behavioral2

defense_evasiondiscoveryexecutiontrojan

behavioral3

behavioral4

© 2018-2026

Terms | Privacy