cd00eb69e9fc9d50f5353130fc1aba03c977e4cfaafa1179b950026f4c465833 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

loader.exe

windows10-2004-x64

9

loader.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
loader.exe
Size 3.4MB
Sample260801-vpm5xa1hpd
SHA256 cd00eb69e9fc9d50f5353130fc1aba03c977e4cfaafa1179b950026f4c465833
MD5 02951dd89e5335719472ad57d1e3ceaf
SHA1 c60f29b30314547493ed4576b6251e06a5133e9d
SHA512 3547af7c918532def291ddbf85ba55849a1ecd66aee098229b7f17321b97791c9f600879c4bbea23866568b1765e926506892d667a86e4ae657e710340fce56a
SSDEEP 49152:vcu8yvtbfScL6OSX+zJx0xZIcZtxqyK01/ADbHg8SjTf6/PzOwoQfLLzIU6i7jzp:rbfc9IcZtK8/NAw+7x
TLSH
T109F57C82F6A280E9C47AC074D356A533FA727C89073176EB16D486353E62FE06B3E745
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

loader.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

loader.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

13 signatures

150 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  loader.exe
- Size 3.4MB
- SHA256 cd00eb69e9fc9d50f5353130fc1aba03c977e4cfaafa1179b950026f4c465833
- MD5 02951dd89e5335719472ad57d1e3ceaf
- SHA1 c60f29b30314547493ed4576b6251e06a5133e9d
- SHA512 3547af7c918532def291ddbf85ba55849a1ecd66aee098229b7f17321b97791c9f600879c4bbea23866568b1765e926506892d667a86e4ae657e710340fce56a
- SSDEEP 49152:vcu8yvtbfScL6OSX+zJx0xZIcZtxqyK01/ADbHg8SjTf6/PzOwoQfLLzIU6i7jzp:rbfc9IcZtK8/NAw+7x
- TLSH
  T109F57C82F6A280E9C47AC074D356A533FA727C89073176EB16D486353E62FE06B3E745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery trojan
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for Parallels drivers on disk.
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VirtualBox drivers on disk
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare drivers on disk
  defense_evasion
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

File and Directory Discovery

Network Share Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverytrojan

behavioral2

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy