185bcd41c1d283efb9847dfe4adc566aade992fac3a027f72cf1c363f92cc215 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

Qwen_pytho...bj.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
Qwen_python_20260802_yfeu4evbj.exe
Size 29.2MB
Sample260802-h9w74afa52
SHA256 185bcd41c1d283efb9847dfe4adc566aade992fac3a027f72cf1c363f92cc215
MD5 bf1d3ff43fa47e451fc05d27c79c9548
SHA1 a6b5bb3e0d1b8ae3512e9ab0756c3b5aea1f6628
SHA512 c89059b5558b4a5a6d0d5883e080e0fcc53975eb4dbcfffcfef9a288a6de860bfea765be1a5a968717cb5a16d198a1c13584cb7a2f1479946cfc3db4a866e270
SSDEEP 786432:UvUMOtzyW8zPpakOjTNGCgeNg5Fm22LAS:UvUMOtWW4PpakK4cNgzm2CAS
TLSH
T197673355EB8919A8D64A6638E2C0C937BB817DAB0264C1CB1AF45D560F530EDFF39F20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion persistence pyinstaller ransomware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Qwen_python_20260802_yfeu4evbj.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

defense_evasion persistence ransomware

Malware Config

Targets

- Target
  Qwen_python_20260802_yfeu4evbj.exe
- Size 29.2MB
- SHA256 185bcd41c1d283efb9847dfe4adc566aade992fac3a027f72cf1c363f92cc215
- MD5 bf1d3ff43fa47e451fc05d27c79c9548
- SHA1 a6b5bb3e0d1b8ae3512e9ab0756c3b5aea1f6628
- SHA512 c89059b5558b4a5a6d0d5883e080e0fcc53975eb4dbcfffcfef9a288a6de860bfea765be1a5a968717cb5a16d198a1c13584cb7a2f1479946cfc3db4a866e270
- SSDEEP 786432:UvUMOtzyW8zPpakOjTNGCgeNg5Fm22LAS:UvUMOtWW4PpakK4cNgzm2CAS
- TLSH
  T197673355EB8919A8D64A6638E2C0C937BB817DAB0264C1CB1AF45D560F530EDFF39F20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion persistence ransomware
- Disables Task Manager via registry modification
  defense_evasion
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Sets desktop wallpaper using registry
  ransomware
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

defense_evasionpersistenceransomware

© 2018-2026

Terms | Privacy