aded61dc8ff9853f3d99943f9b6a3d823be28eec65c4f2c3efd1768e6af2d377 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

SeeMTA.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
SeeMTA.exe
Size 80.4MB
Sample260731-mczzyael3z
SHA256 aded61dc8ff9853f3d99943f9b6a3d823be28eec65c4f2c3efd1768e6af2d377
MD5 4595b3e9df8f5b6641321607224b70c7
SHA1 4b13a3d464050c834bf951f4e78b317f4c95c978
SHA512 4cb64b5fc3305ee0dec09825036dc1df68b76aa7d35c9743b289bbd74c2e147e11a2665a2a4e9a45e257876c4ac21172d99a041efb51edded8dbc058c47edeaf
SSDEEP 1572864:/YB4LVChvCHDGJSxd4wBv+6du/ytqdeYVMaEA+w+obJ7KZVY9VqfA:/YBnYHh4wBjD4deXaEA+w+oVu/0qfA
TLSH
T1DB0833BE22E1A4CAE964CEBB1547AFFBC0F04C4E59514EB397A035D744B4A0B17DE01A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SeeMTA.exe

Resource

win11-20260513-en

windows11-21h2-x64

12 signatures

150 seconds

discovery execution spyware stealer

Malware Config

Targets

- Target
  SeeMTA.exe
- Size 80.4MB
- SHA256 aded61dc8ff9853f3d99943f9b6a3d823be28eec65c4f2c3efd1768e6af2d377
- MD5 4595b3e9df8f5b6641321607224b70c7
- SHA1 4b13a3d464050c834bf951f4e78b317f4c95c978
- SHA512 4cb64b5fc3305ee0dec09825036dc1df68b76aa7d35c9743b289bbd74c2e147e11a2665a2a4e9a45e257876c4ac21172d99a041efb51edded8dbc058c47edeaf
- SSDEEP 1572864:/YB4LVChvCHDGJSxd4wBv+6du/ytqdeYVMaEA+w+obJ7KZVY9VqfA:/YBnYHh4wBjD4deXaEA+w+oVu/0qfA
- TLSH
  T1DB0833BE22E1A4CAE964CEBB1547AFFBC0F04C4E59514EB397A035D744B4A0B17DE01A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution spyware stealer
- Reads ssh keys stored on the system
  Tries to access SSH used by SSH programs.
  spyware stealer
- Command and Scripting Interpreter: PowerShell
  Start PowerShell.
  execution
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionspywarestealer

© 2018-2026

Terms | Privacy