68f57f1cc2acf8bb8f49230102135499811b8836baff04b61e46b0cd442dd9aa | Triage™

Login
Reports

Overview

overview

7

Static

static

3

RedeCanais...ws.exe

windows10-2004-x64

7

RedeCanais...ws.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/app-64.7z

windows10-2004-x64

1

$PLUGINSDIR/app-64.7z

windows11-ltsc_2024-x64

1

locales/pt-BR.pak

windows10-2004-x64

3

locales/pt-BR.pak

windows11-ltsc_2024-x64

3

locales/pt-PT.pak

windows10-2004-x64

3

locales/pt-PT.pak

windows11-ltsc_2024-x64

3

locales/ro.pak

windows10-2004-x64

3

locales/ro.pak

windows11-ltsc_2024-x64

3

locales/ru.pak

windows10-2004-x64

3

locales/ru.pak

windows11-ltsc_2024-x64

3

locales/sk.pak

windows10-2004-x64

3

locales/sk.pak

windows11-ltsc_2024-x64

3

locales/sl.pak

windows10-2004-x64

3

locales/sl.pak

windows11-ltsc_2024-x64

3

locales/sr.pak

windows10-2004-x64

3

locales/sr.pak

windows11-ltsc_2024-x64

3

locales/sv.pak

windows10-2004-x64

3

locales/sv.pak

windows11-ltsc_2024-x64

3

locales/sw.pak

windows10-2004-x64

3

locales/sw.pak

windows11-ltsc_2024-x64

3

locales/ta.pak

windows10-2004-x64

3

locales/ta.pak

windows11-ltsc_2024-x64

3

locales/te.pak

windows10-2004-x64

3

locales/te.pak

windows11-ltsc_2024-x64

3

locales/th.pak

windows10-2004-x64

3

locales/th.pak

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
RedeCanais-Windows.exe
Size 67.3MB
Sample260804-3wytzstbre
SHA256 68f57f1cc2acf8bb8f49230102135499811b8836baff04b61e46b0cd442dd9aa
MD5 8928522267f9f9a34a24641d5aecefbd
SHA1 4118b23b734d4b108f61940676582877aa7282e8
SHA512 91e9f57d85c411d6a05e426fb491ff46e40f62361ae79d1caf6bf195ab63ef1e3945d0786c787215113850595ab9722593fc1c87c0e90e7d8b41e0c76a05a3d7
SSDEEP 1572864:eLdkVkPt8GtktJp123dZQubjFLzhRJnuKACTCMlsnOHA7:e2Vat8GtkDL23dZQubjNh/uKrT67
TLSH
T1C4F733A785EA000FD44B5334531D4178D353AF6AF27B9217636AF83FEEBA2701AD8116
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

RedeCanais-Windows.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

RedeCanais-Windows.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/app-64.7z

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/app-64.7z

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

locales/pt-BR.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

locales/pt-BR.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

locales/pt-PT.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

locales/pt-PT.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

locales/ro.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

locales/ro.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

locales/ru.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

locales/ru.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

locales/sk.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

locales/sk.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

locales/sl.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

locales/sl.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

locales/sr.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

locales/sr.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

locales/sv.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

locales/sv.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

locales/sw.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

locales/sw.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

locales/ta.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

locales/ta.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

locales/te.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

locales/te.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

locales/th.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

locales/th.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  RedeCanais-Windows.exe
- Size 67.3MB
- SHA256 68f57f1cc2acf8bb8f49230102135499811b8836baff04b61e46b0cd442dd9aa
- MD5 8928522267f9f9a34a24641d5aecefbd
- SHA1 4118b23b734d4b108f61940676582877aa7282e8
- SHA512 91e9f57d85c411d6a05e426fb491ff46e40f62361ae79d1caf6bf195ab63ef1e3945d0786c787215113850595ab9722593fc1c87c0e90e7d8b41e0c76a05a3d7
- SSDEEP 1572864:eLdkVkPt8GtktJp123dZQubjFLzhRJnuKACTCMlsnOHA7:e2Vat8GtkDL23dZQubjNh/uKrT67
- TLSH
  T1C4F733A785EA000FD44B5334531D4178D353AF6AF27B9217636AF83FEEBA2701AD8116
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/app-64.7z
- Size 66.7MB
- SHA256 346362207f0f748c75b502d71732d10915a4f707f835969638ec5c8fa51c2b77
- MD5 331fe070e87b4f070574acef0fcf4632
- SHA1 5547697eb11db70c82894b39b62ee6a1ca4bc1cd
- SHA512 1d45c4c1be227dd7d37d1937dbdf11bc6fadb4e7273b47c0aa76b2c9e0b0d8a3a5a99b059e565d6cde6c54244cb37cf969cb9c7ee07f3594e686e7527d5ea50b
- SSDEEP 1572864:8LdkVkPt8GtktJp123dZQubjFLzhRJnuKACTCMlsnOHm:82Vat8GtkDL23dZQubjNh/uKrT8
- TLSH
  T1C5E733DBC575010A944EA220A31F4198535333A6677EA02771ADFE3F6D8F2B947EC12B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  locales/pt-BR.pak
- Size 524KB
- SHA256 3ef0114eaf2268262cd594bfe33b56b24fb416d23d6fd125a9ae022d8eceaa99
- MD5 f8bcb6fd83b0425abb9b214535025140
- SHA1 51e72f9b419393674e8cc9ac3ababd6fcdefa251
- SHA512 a5dc5e3ead99820d3ee9b83cf58670923edb8b538dae84ffc6b1aea9869fec58f0a5e8ad8ba5a792736d1a593b4b6664d734be3ef524fc2b036b268fe108b5a2
- SSDEEP 6144:cneZxthZ8l/gooNBXBLZWkoyVH553JBi90sRaY5Cs:rxOl/go+5NJ9sR15x
- TLSH
  T126B42B2A6DCA136605225351B74EEB43E9884745FD0ACA87DCFF4B05A3DCE40DA33BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  locales/pt-PT.pak
- Size 527KB
- SHA256 b9439000c1c75565c2f223612079a51971ac54a3786d5b631f20436447929465
- MD5 90964c1734b1c36442dd69edbd85882c
- SHA1 ba1ff66b255fe432278bc44860c6c4b3da975296
- SHA512 5a6afc90ff5a3a65e9e2f4347635a82ccbfcc9d1f5d6b206828650aa49a2dcc59d3c8833cbfb9fc7ce8f347a28d718567e1cc300758a2ea5126c67e0967aedc8
- SSDEEP 6144:rtptZSTJLUHxk7jZieJVJJxhHLshYfVh85FKybSRLi:rtpmtAkt85FKsSRW
- TLSH
  T137B41A296EDA132605135341770ADB03FAC8A655F80ACAC7D9EF0B0672CDF94D6B2F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  locales/ro.pak
- Size 546KB
- SHA256 5e5d1cde0fceb570c20e7485b32f0ef7ad59569b93574fcbbc7aead4906e7d14
- MD5 3dfcf8b66ce93a258d1631685a137e20
- SHA1 4b10119acb26c44edff2028d27e960b93c0bd812
- SHA512 17fe50ecd7d44ee5d652b4240cc3b01cf796f9ec11c5fdfe5af9de63999f10d2a50842fdf95fa2dbb4982139c34a9dfb11c8bc2261180862652a92f1497692c4
- SSDEEP 6144:JF04spOl5qs9TjmXHjvyJeyFodxOINkjK0yGZq5zZyo2ts2H/ktO3:JS4sAKQmXHuJRFozO/u0zq5zAoY/b3
- TLSH
  T17EC43D2391C81A972A9152B2B73634D3E88E105DF641D2CDA4EEC97D10CD9DBC52EECB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  locales/ru.pak
- Size 897KB
- SHA256 07dbeee5a0b9c6c978d1c593db5dd6152003fa12170a8189bdde77908d826dcf
- MD5 de3b5faf5d64b16867be213591e545b9
- SHA1 5b8bdaf38278604b5031e1c944349a31fdd281b4
- SHA512 5808a46dd05302338ef63b1f1815828840218324a6fbb1ae6b19f62d803795ba13f7ab7aee1e39137f61f99651ac80166781cdb1f295fbbfdbb218c5a293967f
- SSDEEP 12288:vzmSGKfQjRo4YS5KCx/K6NzJ9ZF/Aalla4qSGsN9z/0TYH8eXN2hVO3j/tSbzvMv:vYXxm506tU
- TLSH
  T1AE158661669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35619A42D7F35F2024C63E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  locales/sk.pak
- Size 563KB
- SHA256 be66b2442b5b4a6dc28a14545e2c4a0bc7f9e6547a89f974d7b8a63525c1855f
- MD5 421d713180d716a060629c334630ed80
- SHA1 fd2d0a0a6d7a27c40a725c1757299afe6d3a12fb
- SHA512 a6c8f62dfe81008a888fab89bccdca8242650771bc2b07cb6b51b77dda2c8eb9f2681d6260ca584ed2bdbc1eb6a60b78c8e07445faa4e15d2b30134989263eb0
- SSDEEP 12288:rSkwf/qsOkNEpiIip+RC5zwbLfrQzLPxt9eI:3wf/qsgpiCC5OLkBtEI
- TLSH
  T1BAC44D3FDFE7581E8E8D0148EFEA7110FD6E46508A4EB0A5940F368724E26EDCAB4D54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  locales/sl.pak
- Size 541KB
- SHA256 8095ce45373d8de8dd243fec034643060cbff67a48fa81414e31a0b9327eefc4
- MD5 c2c99e4b36e16403ded88cff651671c7
- SHA1 f3257f4b444cd2e33451a76bd55f81372f622681
- SHA512 d8c76b7c9c3b6a1cf5c72abed0b53e2552ee28d1575cbe3b680904281f07ec797d37a4d60590490984c6c0dcb33d3c688869dee9c51920d4b41862d1e5fd7dc2
- SSDEEP 12288:v/ym7W5Op5rB2I+EbME5G8coJHvbxi/fz4Cqc:Xym7Wop5T3ME5G8cii/fz44
- TLSH
  T12AC42C357AA79E0F0DAAB2CAFEB506007FDC044CD256E2A1FC8F33695015A3817BD599
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  locales/sr.pak
- Size 833KB
- SHA256 a50c82c0db17e2aa4a62068ca2b210fd9847d32bf2134d6d5af1fc4b7050091a
- MD5 d0045ef8d5ea1347f09983410efff00c
- SHA1 4c88aec2a3d54e44e0d05281201b06917faf17ad
- SHA512 1694cbd28bd29e5f394e3f6cec01f9efbb9da8358f59ff80f550d4059abdb02e02d4d4da007e0646fa5cfc812ff8f94fe0a747bdf8b6f8449f02d28d83d536d5
- SSDEEP 12288:QhjTzIuup7+q2YZAYI8glSDdrLuzQhrUPb7FW5YrT0xs7xH4rL37SjeYM/k/p:0jvwvwlW5nxoP
- TLSH
  T1070557A19B9E64DB0501F41BD808BE093DAF41FE3FAB975215601DBD34E20B847B939E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  locales/sv.pak
- Size 486KB
- SHA256 a615c0756155436781f8e8543d4b4163b7d96cbdf58ba86ddce8b39c5b7a17c8
- MD5 02ad118e6e093d71e32291958f5a44fa
- SHA1 111974cf0fbc304b1395a6d68ff3a79a25b72b76
- SHA512 717a438bbee8d21011c1da203b5126ef4ac330cd94013a93eeba518e5e33772a8667a84c368b1a9b2d1e151d8a81e53cd0c5c59c58a578bd4aa1345115c4a49b
- SSDEEP 6144:g3MKUcRe61TO/AYcNUAvSCZxemvZl1BI4RFcz9RyoxGOGW3IiRMaSOmDE/xWcqdk:g3/LCAYcGC1l5+5dzB
- TLSH
  T1F8B41C438A20F526FB72530DB508115B0AEDE25CE7E2958DB8D9883DAE8BD5805FF347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  locales/sw.pak
- Size 512KB
- SHA256 ecc84d9a40448772697c14f27b1297fcdce12df30d008a7d4149a6aa587d85a8
- MD5 ad41974eff2483e260b558ac010879dc
- SHA1 be8b566a4ce4a529f8eb0352abc7a2023a9b5355
- SHA512 2b731daad19ca5e43d29106c1ec06b8ba6b54ef44571fd51c2cf65da4c9ba1941d78808d03f2056a839e2e76844e979b775afc7b470640101328b572d10e0c4e
- SSDEEP 12288:Za8pzL2fuucrB5G7CCRdCAUQbQW4243EaeFNUq89F1ggt45rUAcw06yJMkJPe/Bb:HkJ5IY
- TLSH
  T12FB4C5629871E0181633518603DDFF731BDCED6C2D2B28935A46BF4F218F98C56ABE49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  locales/ta.pak
- Size 1.3MB
- SHA256 3c8dce29bcf2b60bcc273229afca64eb07a73c729d0d20e35455cc5d933e9a69
- MD5 2f628abbfe91a7738cd47142e42a4ccb
- SHA1 9fb966c32d237e3addbed97478cb84697bcf1fe3
- SHA512 9a1f0a40e8ff8e68dd08dbea55dcff45e7bbe76de45520323832a9004698e6ab30d53eca58efe6db08621f940a80c3ae441e038bcefa4206cafaf664e6cc0bfb
- SSDEEP 6144:obtBkiv2nWiuF5uzGtR6cA25tm1vYpiMyj:afdenWzF5uz/cA25tm1vYpiMyj
- TLSH
  T164550CCE923EEE890F93288F0319536912986155C47BE3A67C766E1198ECC5DCF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  locales/te.pak
- Size 1.2MB
- SHA256 7f28d607ed94e339b677cd5556202fb60f7e801e74af16397ef610c7302f6957
- MD5 44c01878b175e976e75ce036e4d7a495
- SHA1 91ecd7611c7c25f8615f234537819be42799b288
- SHA512 3afbfb3d6a95f1d61fe6a409729c768f1e4f0b3b4c1b6e35af806f0aabcb6ff516cc70e9a112c2c6cede88c2778bfae08a3e6affd05c9d5bc8a5dd4a4ec9bdd3
- SSDEEP 12288:sHU9G7McKNBJhot56d4e/gb0HrWs05Bk3p1FZNViFlV2wtg+NFqIrOlHXAAFwQVV:s0X1u5EM2X
- TLSH
  T1624590023A6AD310DAE70273752CF66C49681B8161D6732C1EAFA357FB87D7E0843676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  locales/th.pak
- Size 1.0MB
- SHA256 f5118ca292c570e69972ff8a7a81940a98dbf4519532ceff133488a329825f78
- MD5 8470d57577f417da93d40889cbe9f4bf
- SHA1 6b497939f2b196a1b84e06d8ac2449b554c14a60
- SHA512 efa31d2c3dc584aaa4120c931749ff1cc0f21d263530dd6bd2d9f66bec74159998cbf679a78b8d231fab5da1f0cb48a9d9dfacd0e0e85336b234b87b2457bff3
- SSDEEP 12288:78XSN9LyZYArTJz1L/L1XPhHsbhRy1cW+v1H5UJEyL3ftj8wlz9eTRo94G+K9uLO:78XBS5j5k
- TLSH
  T1AE253B737247D9D479441B5B262A77896B3DAE693F73F8E00089215A73F071A8422EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy