30f1b8798acdb3220de142fef60f5cb23bd0a07c3306c3974cb49bb7afa590ae | Triage™

Login
Reports

Overview

overview

6

Static

static

3

CBM209X UM...tw.exe

windows10-2004-x64

3

CBM209X UM...tw.exe

windows11-ltsc_2024-x64

3

CBM209X UM...in.dll

windows10-2004-x64

3

CBM209X UM...in.dll

windows11-ltsc_2024-x64

3

CBM209X UM...se.dll

windows10-2004-x64

3

CBM209X UM...se.dll

windows11-ltsc_2024-x64

3

CBM209X UM...le.dll

windows10-2004-x64

3

CBM209X UM...le.dll

windows11-ltsc_2024-x64

3

CBM209X UM...MP.dll

windows10-2004-x64

3

CBM209X UM...MP.dll

windows11-ltsc_2024-x64

3

CBM209X UM...en.dll

windows10-2004-x64

3

CBM209X UM...en.dll

windows11-ltsc_2024-x64

3

CBM209X UM...an.dll

windows10-2004-x64

3

CBM209X UM...an.dll

windows11-ltsc_2024-x64

3

CBM209X UM...WF.dll

windows10-2004-x64

3

CBM209X UM...WF.dll

windows11-ltsc_2024-x64

3

CBM209X UM...fo.dll

windows10-2004-x64

3

CBM209X UM...fo.dll

windows11-ltsc_2024-x64

3

CBM209X UM...ng.dll

windows10-2004-x64

3

CBM209X UM...ng.dll

windows11-ltsc_2024-x64

3

CBM209X UM...or.dll

windows10-2004-x64

3

CBM209X UM...or.dll

windows11-ltsc_2024-x64

3

CBM209X UM...ol.exe

windows10-2004-x64

3

CBM209X UM...ol.exe

windows11-ltsc_2024-x64

3

CBM209X UM...6A.exe

windows10-2004-x64

5

CBM209X UM...6A.exe

windows11-ltsc_2024-x64

5

BOSCH.exe

windows10-2004-x64

3

BOSCH.exe

windows11-ltsc_2024-x64

3

CBM209X UM...EC.bat

windows10-2004-x64

6

CBM209X UM...EC.bat

windows11-ltsc_2024-x64

6

CBM209X UM...ND.com

windows10-2004-x64

CBM209X UM...ND.com

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
CBM209X_UMPToolV72002020-05-20_B16A_0703.rar
Size 3.6MB
Sample260801-plj17aaq5v
SHA256 30f1b8798acdb3220de142fef60f5cb23bd0a07c3306c3974cb49bb7afa590ae
MD5 ed8ac1473c49d7075c69065f1b6f63c4
SHA1 1d90b397f8ec81499cad0f140add400b342a9d0b
SHA512 deee5992f1cd0665d08225161a7da5ee55141b449929bf7b098c97c2e74c1e1f410938bbd7126c09f02ed91d1e930c77c8617319ad708e3fb36aabf88910b21f
SSDEEP 98304:68+IZ4cZSeLeMSp+IXFfoJUmny8NLnRiRAGQG9KIyG3:6RIZzXOoJHhOA5G4IZ
TLSH
T13906234213A92BFB7EA241740A3E1E6D5FB083D151359F54141BD0CAABCAC1A8EB7DD3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/AutoH2/h2testw.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/AutoH2/h2testw.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/AutoH2Main.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/AutoH2Main.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceAnalyse.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceAnalyse.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceFormatAndCopyFile.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceFormatAndCopyFile.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceMP.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceMP.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceOpen.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceOpen.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceScan.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceScan.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceWF.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceWF.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/MPInfo.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/MPInfo.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/MPSetting.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/MPSetting.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/PMEditor.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/PMEditor.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/LoginTool/LoginTool.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/LoginTool/LoginTool.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/UmpToolV6A.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral26

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/UmpToolV6A.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

defense_evasion discovery

Behavioral task

behavioral27

Sample

BOSCH.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

BOSCH.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/bootFile/AUTOEXEC.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/bootFile/AUTOEXEC.bat

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/bootFile/COMMAND.com

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

CBM209X UMPToolV7200(2020-05-20)_B16A_0703/bootFile/COMMAND.com

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/AutoH2/h2testw.exe
- Size 409KB
- SHA256 029bf1846f7cc55cbcd83128225f8be3760d71901771d464340ac37ccafe3147
- MD5 716fe4603626a74e63179ef7803f3237
- SHA1 e45787836fbade4ebc1a178d656e9821267e133c
- SHA512 0efb1a3008770999bb86df67cb010da72269a81cf203cef097e490428166eec2e1b4b6fb4494be56653274ca4dc48acc4b5c8b29e67ef7cb14b7c789479e0b1f
- SSDEEP 12288:ZS8pyu8vquNsWvC3bTm7npfqqRIsr/d8E:BpHruNsW7npfq4L1
- TLSH
  T16A946B1177D0D036D2B235754A76E3746AAEBC318E31834B3B903B3E5E70691DA3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/AutoH2Main.dll
- Size 298KB
- SHA256 0e9bfee9f3f64b92c92bc69c60ed961a4a71307682b2131ae336d0e1149bb7cb
- MD5 9ed0ed280330169a7f2bc78fdaab64a8
- SHA1 37b21eb965996362a636e890b3050531d5ab7d58
- SHA512 8d0b60af5b066c133a8dc9759ca879152748e77f47db0402fc44f186ed42d4f5d18e90e432eda828436232a59f33aefa07e44dd0bc46cadbb4ffeca8ce75619b
- SSDEEP 6144:s/jBVquaFErbFvMQwt/QWiLdCSbxhdVad:sLB3bFvr+t4CS
- TLSH
  T19C546B117680C472C69E2239041AD77566EABC719BF4C6C7EF943B7E5F321C29E3824A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceAnalyse.dll
- Size 1011KB
- SHA256 955e7373e2164bcc5d7887332519d22a79fd5830928f3ebd15896e2404268161
- MD5 31b2319bb08bec768c4a9befb2f220a7
- SHA1 d99820b2539729eb40bb2342c0e5ff0a22e2b611
- SHA512 f59732302be7a65fd50a62afa28c4eadcfc1e6c00a5bd08a309434410be9f6d40061b5ea55c5b1449778375171760d31a2adb6dc730854f30846208bae6b3d61
- SSDEEP 24576:X0lQU17ER5792a+OfZiplD6FoVkHPk2dZyd6sH2ZHp:Nx9bMp4FogkQZ46sHAHp
- TLSH
  T173259F01EBC2C1B5CA4F11B1103A932AAA39561517349AE7EBA47FA9FD301D3F93D349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceFormatAndCopyFile.dll
- Size 392KB
- SHA256 ec0acb10ec78e9cae25a5cd69961b093b78bede07c112d10741f353370b34b77
- MD5 8482d33541b0baa95fccf75c6b1304f3
- SHA1 3ca9bc0fbb791d6766f1262648e16926fa8a2539
- SHA512 80e41de874d4225339b076359a638de6e5cb486e840508c678ce434185bc03bedef7fe82a1f57ed5a26c86db83ba688388d10f8f0ed490ac06eebfe1f9c0ba5f
- SSDEEP 6144:7CxiznXCYZph9ANhWY/QxHGkCPwAb/na7XAbjK+1eHqUjRHSTmwpM:7CEzXCY7h9Ii2wAb2Qbe+18qwRH4
- TLSH
  T115849E11FB81C071C55E2475616AEB7566AE6D606B348AC3F7D07E6E9F302C26E3C30A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceMP.dll
- Size 1.1MB
- SHA256 edf545fbd68498eb51f54ccd7cc18a57538cd441ecfcd080ee8676db4d6ccb53
- MD5 7fa5b29d9a8e6d29e3f8f206bd9c4dbf
- SHA1 8a79effea2e1acca1a17998c6648a56104c53e25
- SHA512 8dc5ddbb47ad014291aaf36bc6719222bddd852b3c9615e2f7e7b8f70e4569340dc2f821ad6a0135998a696cc4058da9bb31b8411e6ef2bca4e22989600270c7
- SSDEEP 24576:yEZuqDYqnC0Uc+1etthv0FPbEWJr+iedMvsKEt0SCgP:yEUX1e25EWt1eivsKEtHCgP
- TLSH
  T1E1358E41FBD681F5CE0F29B51076A72BA7355A0053348BD3EB907EA5DD312C2F93928A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceOpen.dll
- Size 648KB
- SHA256 7a4ec873daa8aeab6a18cc13f1f645f62f763d3571a6f7864c7e0852f6438823
- MD5 c74ed9eb0dacef1b9a5b5d36d86a68d1
- SHA1 66a3e6127d1fd606d33ab364f183d240726821b2
- SHA512 73880323f3e7bcf3a93c8ea1ddf7a04015ca17de5b9fd6c74764b9f057c3168f510bf46221553f029ae5cd2ebea51d09cf365be7a5bfb8674556f5756a7b4994
- SSDEEP 12288:mXLSFlxBQhtJcKQGKy9QQKDmM+osWu6+05qx7CJsdDW:mXLSFlxqcEQ1n+Z6+05qx7Ceo
- TLSH
  T176E47C123AC0C072D26E31364156E77937FAA9305F31D6CB6AD4AA7D5E349D26A3C30E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceScan.dll
- Size 491KB
- SHA256 96a6cc241e22513ee15bfca365c0a7bef8770d879ca98641128572b835540eef
- MD5 038b620a4cd5f36818ee788e3cf703e3
- SHA1 708306a0ef89680de82b359cbaf78df86d902fc0
- SHA512 3ba4f5a8c454301d1c73e91016daa32f94b4fc6fa7903d0214636c88be52ea2589079fd709198227fb264782c477b089116c4fe5f41442370ce673ca263eef88
- SSDEEP 12288:DBJCBKzXwCk7tojp5g9qbXQqVgVz9jmeH2BdH:DvCBKzgCkSjp5g9GERjmeH2
- TLSH
  T124B48D41F7C1C0B2C61F25752056D32A7ABA6E3257299AD3E7D43E7EBD701C2A93C209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/DeviceWF.dll
- Size 350KB
- SHA256 05196cc4e0b0dc83449938ac7206e7d9e1a4de356ea1365a22754e5317714b0c
- MD5 6957bc0e8d650bd1692167f7a495363c
- SHA1 2b6477c0a1dcddcc6cfa716e69179ccd2384e9bd
- SHA512 2e0df732cf9a402804c8d1a6d15e71c782df2ed174b357c8c24f6a7ac65d521ee5462636357f867491fad9617dbe0cc524e11804722fe9c94bcb8fbbc2963f4d
- SSDEEP 6144:wW1tIB8wFj9ZgV64zdSyNtY5fspQrBg4qsDYPQFA336oiIK2Kl9:ptIB8//NP/sDYPr3qL
- TLSH
  T154748D00F785C072C62E21756157D73A266E6F205B3497D3B794BAAD5E302C2AE3C36E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/MPInfo.dll
- Size 529KB
- SHA256 f93e886d6a4ba5b2426310f158847bdc03b9ebd4fb7fc50467359ca836d52482
- MD5 80ba9393301743463e652a6d5c0b7951
- SHA1 4dd93847e6b8de983a2e4a072c037bfdd0068d77
- SHA512 ac6c445d4c08d58aa7ac6b41fc8ea4645056accc1ccbebf48b43684137a2f7f02a4e489764437f9368a8a09d79c2c4a1ccad6a8aaf779d62715261276fad6fb7
- SSDEEP 6144:GOqpPpfVdt23r3q/TA6JjKOtaR3PQMoSTKzw2FokdE4icS1kYONPR:GOqpBftbjKOtaR3RoSFvEE4TN
- TLSH
  T127B48D00BBC5C076C20E153134A6D72562BD6E605B25C7CBBB947A7E6E323D26E3D349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/MPSetting.dll
- Size 810KB
- SHA256 8b070f8383d3965925300fa333c406defbd2f68d9f46574676b0013daf1daac9
- MD5 a9f1b3cddfe4d66436feabe7113c06f8
- SHA1 3730f4919deb5daa7cecb5fd7304e44a463bc97c
- SHA512 2e18d76b3515c52472b375ff64e33c21bea9ea09462c6668f05d4edfc01ae4f8e9562f9d5e969f585bfd57978fd5646d1ceab6abf901fe5081d0cdeb86ccf45f
- SSDEEP 12288:yDq+MlfFyQYUVrwkySCByRFHNmlo8ExnEea7Y9iKisBTsAf:4q+MZFVwDHBo4jExNa7tsBTs8
- TLSH
  T1E0056D119A41C43AE57E04B2847E5BFF66287A3007349EC3A3C4EA7E5AF54C2BA35717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/Dll/PMEditor.dll
- Size 327KB
- SHA256 f7dc983aeed1b927b120ae1b969455e4bb661120608d60f32f6bac7b16353b8c
- MD5 e93d232f63006546c65790221a394619
- SHA1 724217609d0e6e55f480db52847cb518d5a553cc
- SHA512 e5f3514e78d23ed4c853982710b3e253fbf693ba70277805997cfa7629b9a95f4db141eaa177bd1853879eb3cb582de672af0da5161c384bdae88e324698d562
- SSDEEP 6144:6WX/hovhHqQ9wzx6YAQOO9+DW6ueVjTBuBSE6:6WvGEzxx9+1uUTBu
- TLSH
  T1A7646B20BE81C0B2C55925394466D37917DD7A319FB49BC3FF94BB7D6D322C2A92820B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/LoginTool/LoginTool.exe
- Size 389KB
- SHA256 42332db5078f8364a3c29cd3c9e267e143daa45c7dc17fad41b2b51d7934ad7d
- MD5 1e813d9bdc87d4bde12d7a8b42ab31ad
- SHA1 7e7cf729466219299e7ff9764aeaf0b2ca89da6a
- SHA512 7e72d24df430c3384b16588be922ff1f888ec4246fe46e2eee61c6b84f607eb0da4fb0f7ff77d485b1d5115644bb27dd18dbe034f3f4493958447f8d5f67ef5c
- SSDEEP 6144:STrIQIwVvC1EihCJPSTT/kGtDyWMyJKakLBVJOkguMmZKItmBa:IihGPAWWMyJKaaYSlKgI
- TLSH
  T11D843A12378CD072C21233714B56D675E6AEA8615F2743872BB02BFD9E371D2993B70A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/UmpToolV6A.exe
- Size 1.2MB
- SHA256 0c9d965b406b37115858e83a02bfe3a00608abe90b4b40a77fbf0fd711acebbe
- MD5 28c2c80877c56e26114ba4f5a88f5c0e
- SHA1 aedffdd23af994dfa8f2c4619d1d72059df8394a
- SHA512 fac55841e4888808b217aab20ee6d096988dc8c61787b57c09df8429b6093609f1e1522abd48c837e0729c097448c1a1b64cdb12256770867a3a678a0f11068c
- SSDEEP 24576:1n9FoEAa1217ZayTBFwMtbgWDH6GdnEGa//VHDkHBPTmOaFmbTMLI:1n9Z121tTBFwcbgQH6KrKkxqFKTMLI
- TLSH
  T1C5557D20B743C133EDB720B28A7E869E6268AB70072554CBE3C45D3D1EB55E26F36257
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion discovery
- Drops file in System32 directory
behavioral25 behavioral26
- Target
  BOSCH.exe
- Size 289KB
- SHA256 d81ed08a8729715b36038f417c439f8e3ba426d174424aece3bc269b158c8a7b
- MD5 5d6fbce5f0b0220a9b8d03f3cad1088b
- SHA1 63fa8731ddc7cad0629a945e14b1f9676669ab99
- SHA512 bf27b728e6c92ad121f6d754782a082b0588d8046c1f94fbe3b3283c20c8695924fbb4e4bc1f65f35bec2b8b201f41d64f8f5882597ff78688424048f90175a8
- SSDEEP 6144:YrwPFyBtvwqncgzmhTmfws/2ScX1iGMCD7I9stx2pK:LYbc/TRo2l1PM+JP
- TLSH
  T14654324E02D684A4CD8A69A20EF3BADCFE91784D748B68347E64FD048C4D17F5ACD3A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/bootFile/AUTOEXEC.BAT
- Size 1KB
- SHA256 a6fd61aee15172be95f2a656d0315bee342e14c240322a4f39f64b41b9d9ad43
- MD5 ada36523ad72c4b9057da21de0e899a1
- SHA1 dfbaf5daa9cd0fe922c85efd920a5b757cceab8a
- SHA512 eea3dddcc2581a1064d9dba78ecc0552992985ada4384e4d220e367f9a1adffc8e0e99c5d19949a7b543c6612e07a5c4298d6dd56a225aef4e352a57731b6f44
- TLSH
  T17911FC21B8867440FAF31F629DB161B7DA26F4E333C2DE18848F5A70060D90972B1A69
- MD5 SHA1 SHA512 TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral29 behavioral30
- Target
  CBM209X UMPToolV7200(2020-05-20)_B16A_0703/bootFile/COMMAND.COM
- Size 92KB
- SHA256 931d25c31d04d61bb44394eeed1f64d4278d764a9eb7da4edf683d6893cb7006
- MD5 17c1021dd38323dd3a558e334dc7aaf2
- SHA1 13fa1e00940a541c61d5f53c8ba9fb689595f6a3
- SHA512 9787d6f07eab719aa6ec919519d770755282aa196bf998d8e98f7d735e965228c7d94f6800b56dc0737babc5749312cdc899886ea73b6bf055d4f1fb3018f5ec
- SSDEEP 1536:lCGWsTYWhSBFxfcfxzeXidzvU+Yv7FKHV:QGiDzJSdA+E7e
- TLSH
  T18C93BF0B1F8C125DF04ADBB45205D2A2D3AEC1AC327952057DECD61C3B2BE59A3EF994
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

defense_evasiondiscovery

behavioral26

defense_evasiondiscovery

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy