a43e13c6255a4abe5e43ae6fedb10f347edec8a248b0c88bcdd2781542c53579 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

opti.exe

windows10-ltsc_2021-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
opti.exe
Size 390KB
Sample260802-fytxgsvfnb
SHA256 a43e13c6255a4abe5e43ae6fedb10f347edec8a248b0c88bcdd2781542c53579
MD5 2299c3c4ac65a350c64ee7b7e9e09f8d
SHA1 5b285146e29b1206eb35a53e401101f4a86e0cda
SHA512 c81950010d3049a7efe2a7f711b798eb19f6a52ea22ac0aa20d44fb11cb668f70f99f30ad75ce5864641714861c35192d15729614734ce17178818a2dc55c62b
SSDEEP 768:VqTkobESwjzL9L6sXDqbA8VbnWPowgB0im5NzhQA/2sfnscdEE:V2koTIf4sXe8kWQ79m3h9fnyE
TLSH
T1F88438C377D080B6C4660230D467EB705DAAACF016A486CB7BF47C8F7E35906DA27666
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

opti.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

10 signatures

150 seconds

defense_evasion discovery execution persistence privilege_escalation

Malware Config

Targets

- Target
  opti.exe
- Size 390KB
- SHA256 a43e13c6255a4abe5e43ae6fedb10f347edec8a248b0c88bcdd2781542c53579
- MD5 2299c3c4ac65a350c64ee7b7e9e09f8d
- SHA1 5b285146e29b1206eb35a53e401101f4a86e0cda
- SHA512 c81950010d3049a7efe2a7f711b798eb19f6a52ea22ac0aa20d44fb11cb668f70f99f30ad75ce5864641714861c35192d15729614734ce17178818a2dc55c62b
- SSDEEP 768:VqTkobESwjzL9L6sXDqbA8VbnWPowgB0im5NzhQA/2sfnscdEE:V2koTIf4sXe8kWQ79m3h9fnyE
- TLSH
  T1F88438C377D080B6C4660230D467EB705DAAACF016A486CB7BF47C8F7E35906DA27666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy