d99d1f730281d722194b029bbe76329769b67937d3cdfdea50845d2a4d1fd6de | Triage™

Login
Reports

Overview

overview

8

Static

static

3

WinRing0x64.dll

windows10-2004-x64

1

WinRing0x64.dll

windows11-ltsc_2024-x64

1

WinRing0x64.sys

windows10-2004-x64

3

WinRing0x64.sys

windows11-ltsc_2024-x64

3

demo.bat

windows10-2004-x64

3

demo.bat

windows11-ltsc_2024-x64

3

inpoutx64.dll

windows10-2004-x64

8

inpoutx64.dll

windows11-ltsc_2024-x64

8

installSer...sk.bat

windows10-2004-x64

3

installSer...sk.bat

windows11-ltsc_2024-x64

3

libryzenadj.dll

windows10-2004-x64

1

libryzenadj.dll

windows11-ltsc_2024-x64

1

pmtable-example.py

windows10-2004-x64

3

pmtable-example.py

windows11-ltsc_2024-x64

3

readjust.py

windows10-2004-x64

3

readjust.py

windows11-ltsc_2024-x64

3

readjustService.ps1

windows10-2004-x64

5

readjustService.ps1

windows11-ltsc_2024-x64

5

ryzenadj.exe

windows10-2004-x64

1

ryzenadj.exe

windows11-ltsc_2024-x64

1

uninstallS...sk.bat

windows10-2004-x64

3

uninstallS...sk.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
d99d1f730281d722194b029bbe76329769b67937d3cdfdea50845d2a4d1fd6de
Size 140KB
Sample260804-h2zy1sfa87
SHA256 d99d1f730281d722194b029bbe76329769b67937d3cdfdea50845d2a4d1fd6de
MD5 302bbe5772dc2ad914bce419513fcff1
SHA1 8ab07865b4892cc9f98fc6c1470d3dafb642c85c
SHA512 ea9251eff9b67279c11e8c90f7efbc1b7aef6cec55cb89fb008c9d49273d0f2bbac7c6170831eac01afa1d1ab850ab020f97c418dc21e5e565c0bc1050ced191
SSDEEP 3072:nPumIqOcVNZseoXCHSatEQjcWpm0jqfvTC2iwlZ5i:2XKVN+eoSyaSQZpm09Oi
TLSH
T1C8E313087A3347F8E55C1EB3E4D4BE2379A7F909D2A4B8894122E7B275420F25F7A01D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution persistence

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

WinRing0x64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

WinRing0x64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

WinRing0x64.sys

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

WinRing0x64.sys

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

demo.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

demo.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

inpoutx64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

inpoutx64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

installServiceTask.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

installServiceTask.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

libryzenadj.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

libryzenadj.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

pmtable-example.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

pmtable-example.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

readjust.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

readjust.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

readjustService.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

readjustService.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral19

Sample

ryzenadj.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

ryzenadj.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

uninstallServiceTask.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

execution persistence

Behavioral task

behavioral22

Sample

uninstallServiceTask.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

execution persistence

Malware Config

Targets

- Target
  WinRing0x64.dll
- Size 61KB
- SHA256 a746fd5728e7485f741cc330a279674bc8590b1b8007d8614046c49f58698485
- MD5 eb31c77ef331ec4cbf7262cda4d1233a
- SHA1 ffeb0f08f18a4eca1bf8c4e827f9111ae3c64716
- SHA512 b1143d419e278c1b09ad5d750d5dea1fa95ffaec1c0ee7d9c0d7160929981e1b5815fd45d6e0f8ab7aff1cae4518cb4baf1ed69441a040bb584024c99aaea0d0
- SSDEEP 1536:7Vz2GiL9ZooLCYtdm2R6CKQlqlLLuNsCMku1fT:Pw9ZooftdLTKBLLAsCMkk
- TLSH
  T183535B8A235540B5E4B7927CD8E30E56E6B1B4211B7203CF473487594F733E9AA3E7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  WinRing0x64.sys
- Size 14KB
- SHA256 11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5
- MD5 0c0195c48b6b8582fa6f6373032118da
- SHA1 d25340ae8e92a6d29f599fef426a2bc1b5217299
- SHA512 ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d
- SSDEEP 192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ
- TLSH
  T1096218874B7E1906FB969F7592E9C7936D34F6C0CFA825CF421299982C413E0AF2861C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  demo.bat
- Size 100B
- SHA256 26673a45ecd9335be8062d70a20bc303b3bb6f6ad2f6d5c4f4d93d355bb87cb3
- MD5 2b1aa83eea0d99f70ceebc46c1aa52fc
- SHA1 a698db0aa01fcb4c06b45b469e2e7767da99cd5d
- SHA512 96063c6f6d270384e451a48669c2ca19c842bc18828facc3f55e54a957f124aa37830bfa03e515868cec98ae918275f9eddc6f5c68c2740bf276a45c77689151
- TLSH
  T10FB09248000D8578F7C143F2B030F506286870381A5B24886C18A2213CAD050435140B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  inpoutx64.dll
- Size 96KB
- SHA256 5f27ed4d5cd58a1ee23deeb802e09e73f3a1d884ce2135f6e827f67b171269e7
- MD5 ac0c3ae82ec0764c605fa59e7bf05614
- SHA1 3d4980be66fe424475e73c45a2d14a73ff4197f0
- SHA512 27468b3708e11bd598f0c7293f6b51e3ff2928568b174691e00067359ce76c6d1c95a51115f83fee0cccf1df58744785e0076d599f73f01f53c1b92e0a2c2fab
- SSDEEP 1536:Mtd/d3mXwZIBrv9aWWIRkuLoN/e9Lu1pnI0jqSG0jVG:Mz/d3mAZuv9a12V0N/e9Lu1FwSR
- TLSH
  T1A3A36BD6739550B9E8B3C238C9E38B16E672F4050B7553CF16348A9A1F637E05A3E326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Drops file in Drivers directory
- Executes dropped EXE
behavioral7 behavioral8
- Target
  installServiceTask.bat
- Size 1KB
- SHA256 fc0e1df23bb0d4101ce2461c4b41a71f53ca3b3b843e799366294b46d0dbac0e
- MD5 a317a317cc2f7c53a7709b779316ae47
- SHA1 df63e123177aad7945d7269064e74b5d9e1da7be
- SHA512 1aab3ae02544a2f339681fd30e95c88ceb28e53a27c2b7663817b69ad7d7974130c31151c5930b021e1bbcbf069bfffe474e697ef536c220623624406e8f4aa6
- TLSH
  T124212482949271FD6A521A39556F2AC93F381086812D3485B6FB851C21CCDBCA9D7BCD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  libryzenadj.dll
- Size 60KB
- SHA256 6ba6667d00a21b0109eaa1b84d12ed3b1c89936b88768f49e548aa1e51d134c0
- MD5 d8c39fb4d43de749a7db4cd2794797dd
- SHA1 219c4f3c10ffeb7db8806728e55131e8acf82a9f
- SHA512 898371385f87c5386adbb4ea885fb5912835f8d4bc6b739773231c4c3811eecbc0f7515d0faaf66c0eef881c5145a5eb5ea90f1c97408411c8d8b8ec4252ca0b
- SSDEEP 768:DcGr2lex1d3vOKlGfIKfMRtlr2MuZosAZ3jrvLg4ec6t7/PAJsuhJ:DL1VOgGfIeMRt5kos6vLMd/4a
- TLSH
  T11F5373282080AA14E8FB53382E5205D0D49A7EC01BCA7BDFEB9DE95E57304D5C7776B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  pmtable-example.py
- Size 2KB
- SHA256 a5b8a0c050fecb28f3adbdd5fb87e6f7a27b07187abc6ea3742e4be1c64f06c2
- MD5 92b84014913ddfeec42d7308936d064e
- SHA1 41c14b0b1cb2661ff05c5d391f9696e4bec66ad8
- SHA512 df79afa818887def05248b741e50c67c65a040da62e69d8ef80cdf4973c234c66e459d901ceba771302bdc020f739dc0d1c0b39dc21255b1bdcb4a9ae9145cb6
- TLSH
  T15F41DE225E577520B1BAEA198986CD785B1302234E325837BDCD94544FB0C35453EE7A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  readjust.py
- Size 2KB
- SHA256 000b90dc4fcea055eced9f0a044eb5a83567a93ccc247abb4176a6adfc342510
- MD5 754b97387d7671ad8e6e72bbc394898b
- SHA1 1f5cbd632bdf08a5767452c16f35c976daee0cc3
- SHA512 2ebcaaf6aa7a0e6e564d90694bc4529b9b9f57f3bdffd3537a99b39ffdf583624cf348193268501a52f281d7743fc830206a78720ec9b3105e2e5465c35734c4
- TLSH
  T1F2412F028C577832B8B3C3389A178548D63620734BBA3A037ADC50D89F7CC29C166E7A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  readjustService.ps1
- Size 23KB
- SHA256 61c2e0e293226e87c9d149b2304799c064b83051e70e41e1a305159621a0196c
- MD5 5bd7ee9dec279d1932c3af0473c4dba5
- SHA1 2af3b111d0333e716f2f9a31042f64f2acd0d333
- SHA512 59d442e83c83cf632b27d9043f1248b002bf46beaf3ebd8af2f1b72cec65d8b56ce1d922d377d4da71a176f87a67cd77dee2b37ac97cce899007655a01ffb4af
- SSDEEP 384:bxslEuM3NtqpQsfj38y0rr+Yw3plKTlSgSb:bxUpQ0zFcri3n6lSgc
- TLSH
  T1E8B272146D4099268BF267289489C57CEF23A1333DA71650F9FC15806FA6424CBBEF7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Drops file in System32 directory
behavioral17 behavioral18
- Target
  ryzenadj.exe
- Size 89KB
- SHA256 68c274068b03d78e6b797e4033f57fa4eae4ab25fc81307b1ff2d19c5cdec954
- MD5 1ad5c6cd37df7554a065ab4d42d96ed6
- SHA1 a857edf825dfd14bad5f75af406a23b7b8641c00
- SHA512 bdebbbe2e3596d13d6d58fc9cd3d1f2e3f9a2b8dc6b8929b8b232b6f97487fc0b87b581835045082d4b89f4cc9b49d13af5bce59d92b24559c97aa7ab824bb6c
- SSDEEP 1536:5+Wr8vIk+cO/CzWD+FsgAgUplIvA6m923gxxBYV98SG/v4YM:5+WwvIk7/C/IvR6drmnhG/v4Y
- TLSH
  T19293D42825849A74E4FB42741E5114E1D9DA7AD017C5B7CFB7ACE84E1B340E4CB3B6B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  uninstallServiceTask.bat
- Size 517B
- SHA256 0aa9a4472767cb1529c0964209c6daade4114b69232a2443700f2ac2b010609d
- MD5 b2d554205a5ae117c7c2d925ccdf7d70
- SHA1 133a15df8c30230e267a593210fb95a85aa3f477
- SHA512 70f2eb242ff4740a6a10957e503d611909cef18538d78710febc062cc18f99c4f49eff37dee0a33d8e4efe13ed5819c392a893d455c79382e9e3983a1add8bea
- TLSH
  T144F08471B01321E8AF012B56E82622C7FB1D46C8C02370DBB2B5113129484BCDDC224D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution persistence
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

executionpersistence

behavioral22

executionpersistence

© 2018-2026

Terms | Privacy