hxxps://tria[.]ge/260804-l3j6qscm8z/behavioral1

Analysis

user interaction
yes
max time kernel
5s
max time network
12s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
04/08/2026, 10:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tria.ge/260804-l3j6qscm8z/behavioral1
Sample260804-l4pslsxdlb

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 14 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3054922120-1500138384-519748408-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3328	firefox.exe
Token: SeDebugPrivilege	3328	firefox.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
3328	firefox.exe
3328	firefox.exe
3328	firefox.exe
3328	firefox.exe
3328	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3328	firefox.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 3328	2368	firefox.exe	83
PID 2368 wrote to memory of 3328	2368	firefox.exe	83
PID 3328 wrote to memory of 4972	3328	firefox.exe	84
PID 3328 wrote to memory of 4972	3328	firefox.exe	84
PID 3328 wrote to memory of 4972	3328	firefox.exe	84
PID 3328 wrote to memory of 704	3328	firefox.exe	85
PID 3328 wrote to memory of 704	3328	firefox.exe	85
PID 3328 wrote to memory of 704	3328	firefox.exe	85
PID 3328 wrote to memory of 704	3328	firefox.exe	85
PID 3328 wrote to memory of 4676	3328	firefox.exe	86
PID 3328 wrote to memory of 4676	3328	firefox.exe	86
PID 3328 wrote to memory of 4676	3328	firefox.exe	86
PID 3328 wrote to memory of 4676	3328	firefox.exe	86
PID 3328 wrote to memory of 1176	3328	firefox.exe	87
PID 3328 wrote to memory of 1176	3328	firefox.exe	87
PID 3328 wrote to memory of 1176	3328	firefox.exe	87
PID 3328 wrote to memory of 3336	3328	firefox.exe	89
PID 3328 wrote to memory of 3336	3328	firefox.exe	89
PID 3328 wrote to memory of 3336	3328	firefox.exe	89
PID 3328 wrote to memory of 3336	3328	firefox.exe	89
PID 3328 wrote to memory of 3784	3328	firefox.exe	90
PID 3328 wrote to memory of 3784	3328	firefox.exe	90
PID 3328 wrote to memory of 3784	3328	firefox.exe	90
PID 3328 wrote to memory of 3784	3328	firefox.exe	90
PID 3328 wrote to memory of 5252	3328	firefox.exe	91
PID 3328 wrote to memory of 5252	3328	firefox.exe	91
PID 3328 wrote to memory of 5252	3328	firefox.exe	91
PID 3328 wrote to memory of 5252	3328	firefox.exe	91
PID 3328 wrote to memory of 5328	3328	firefox.exe	92
PID 3328 wrote to memory of 5328	3328	firefox.exe	92
PID 3328 wrote to memory of 5328	3328	firefox.exe	92
PID 3328 wrote to memory of 5328	3328	firefox.exe	92
PID 3328 wrote to memory of 5336	3328	firefox.exe	93
PID 3328 wrote to memory of 5336	3328	firefox.exe	93
PID 3328 wrote to memory of 5336	3328	firefox.exe	93
PID 3328 wrote to memory of 5336	3328	firefox.exe	93
PID 3328 wrote to memory of 5344	3328	firefox.exe	94
PID 3328 wrote to memory of 5344	3328	firefox.exe	94
PID 3328 wrote to memory of 5344	3328	firefox.exe	94
PID 3328 wrote to memory of 5344	3328	firefox.exe	94

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://tria.ge/260804-l3j6qscm8z/behavioral1"
1⤵
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://tria.ge/260804-l3j6qscm8z/behavioral1
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3328
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2012 -prefsLen 27100 -prefMapHandle 2016 -prefMapSize 270279 -ipcHandle 2072 -initialChannelId {b3bb4bf8-c987-490c-a93a-eacdc7e7f28f} -parentPid 3328 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3328" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4972
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2484 -prefsLen 27136 -prefMapHandle 2488 -prefMapSize 270279 -ipcHandle 2496 -initialChannelId {8f49e108-746f-47ca-8848-506465c46726} -parentPid 3328 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3328" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:704
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3908 -prefsLen 25164 -prefMapHandle 3912 -prefMapSize 270279 -jsInitHandle 3916 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3924 -initialChannelId {6308289a-8725-4090-99f2-7b87b1459ded} -parentPid 3328 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3328" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4676
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4092 -prefsLen 27277 -prefMapHandle 3912 -prefMapSize 270279 -ipcHandle 4144 -initialChannelId {3f2995eb-b2d3-4a58-8b50-2e14884784f8} -parentPid 3328 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3328" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:1176
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2856 -prefsLen 34776 -prefMapHandle 4364 -prefMapSize 270279 -jsInitHandle 4368 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4376 -initialChannelId {c875691a-9cb7-40c1-9adc-b96dbfec05dd} -parentPid 3328 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3328" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:3336
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4724 -prefsLen 32712 -prefMapHandle 4728 -prefMapSize 270279 -jsInitHandle 4732 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4700 -initialChannelId {0556453e-10fa-4a24-a60c-a1609890f952} -parentPid 3328 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3328" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 tab
    3⤵
    - Checks processor information in registry
    PID:3784
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5228 -prefsLen 35013 -prefMapHandle 5116 -prefMapSize 270279 -ipcHandle 4672 -initialChannelId {9a485083-a35d-4e37-b741-b005e2f31d47} -parentPid 3328 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3328" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 utility
    3⤵
    - Checks processor information in registry
    PID:5252
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5496 -prefsLen 32900 -prefMapHandle 5500 -prefMapSize 270279 -jsInitHandle 5504 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5512 -initialChannelId {6f69d7dc-4b8c-42d8-bf82-684a69fbbe00} -parentPid 3328 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3328" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    PID:5328
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5536 -prefsLen 32900 -prefMapHandle 5540 -prefMapSize 270279 -jsInitHandle 5544 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5552 -initialChannelId {26abaaa2-da55-4dbf-86f3-dc34e37b4caf} -parentPid 3328 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3328" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    PID:5336
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5572 -prefsLen 32900 -prefMapHandle 5576 -prefMapSize 270279 -jsInitHandle 5580 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5588 -initialChannelId {d5153b89-4ffe-4245-9121-558f384ba29d} -parentPid 3328 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3328" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    PID:5344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 5a777723dd214a4163beb1eb8a7820a65233f197563d165654f73a849ae1b9de
MD5 c3815f530322cfde224d9cc6ddf5c4cd
SHA1 6380a122fec98dda6bc6cafb7e7f3842d773938f
SHA512 393c1e8e67083810a41264e74591e4e160b363dd8011acf3d606b5c0943e68a59cce7d2f6aeac42b373d37c4015989a749a9f9699f6e5c94c29dc837e1ce7500
SSDEEP 192:3Ov5zbojZrOhyjwyy1d66Joz1zgCl6mc0dz:IbojZrYyjkd66Joz1zgC1jd
TLSH
T1BDE1EE64F629863BC405027BCCA61F414F3A799B9C8E3F1935AD65482C472DE378E27E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 2b4954e9d17c14daa7a31d31b926e47db305603a65b40e77aea9f0ca46a6a8c4
MD5 92f1b1925b309d05cc77e694d09ba9b3
SHA1 82c5a83d172220a424685d2a78b87f2a1ecbdb26
SHA512 abaead48fde90c213c0d9838486bb0b85dcb5dbed4d575024df0a702727b9b346eb5aee41b0a2eea01bea93f6a3f0ade36b16b7acf1479bf2050fa8cfd365ddb
SSDEEP 192:b1d66Joz1zgCl6mc0dvOv5zboBMrOhyjwyh:Zd66Joz1zgC1jWboBMrYyjZ
TLSH
T1B7D1EC64FA28463BC405127BCCA51F414E7A799B988E3F1935AD65082C472DE378D2BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\events\events
Size 1KB
SHA256 3fc6ff96ac14e10d437d68cbbf9a783a2fd7d1e710fa9f9c57f618d68ba808e4
MD5 af86014933572fa617c32702d001021b
SHA1 73a45bac2719c1e64464e89e34de908323fa2243
SHA512 e8fc44045277242d15326dddc4dc29d598f3e74831e877bc1022859115f1f58d820376918f5c9aba643de3724e98bb340ffae152f7ab750c460fb4cd8f482b06
TLSH
T1CD214B5C3FB84D2A6CC7E7AC7441158D73914E0608471C531D82EE8CCED19DD31AA439
MD5 SHA1 SHA512 TLSH

Submit Download

31e6afea-b38e-46e1-ad4e-01f6af5eee34

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\31e6afea-b38e-46e1-ad4e-01f6af5eee34
Size 883B
SHA256 b10721f53c14f646f0448152fa89fdb6041e03f05c995f09b24e35960dcaef73
MD5 797663e2cbc1d2423cec7dca3dd1d34f
SHA1 d724a89536312084f94789e20474cee9105acc0a
SHA512 1985f7eee24f354f31e44df50a51cd771b0079cb8dbf62d9f7325ef3ad6637e890c85ed22ab96115b51c1ddf090cde4886de7335a96bee588e422d11e39c78fa
TLSH
T12711004056307AB2CC78C28BC9653B029BE8B52380C654183DF51E080C7A51EA3AA70B
MD5 SHA1 SHA512 TLSH

Submit Download

6f6e026b-9eab-4405-ac42-4dc125ebc3b3

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\6f6e026b-9eab-4405-ac42-4dc125ebc3b3
Size 931B
SHA256 1e7e81a00d85ab3a276d8dd877cff7ea87267c7e2e041df639a06a76f97b58ad
MD5 21fcfaaee7c776b0fd8e8d201c6e4207
SHA1 0ae2ad71b29b9ad155c2474b332addad21e7ad63
SHA512 fab79f256e526a584ea4e8671b782ef57f74e0caf5cfce4adfe4ad579f45f9a6b83b2408be39f94a05503055357a33392789fa98a81f552d795f57c81ec69af5
TLSH
T1D51110506A247DB28C7CD2CF94B437039EE8B123C0C649047DF12B080CABA1E935A71B
MD5 SHA1 SHA512 TLSH

Submit Download

7526c966-908a-4e0a-9e15-8e1eedeccf0c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\7526c966-908a-4e0a-9e15-8e1eedeccf0c
Size 280B
SHA256 e5ce555e824e50890381adbe9f27baa08dcf6ae57013cc06f270285fd8e97ce8
MD5 b5a60b00c975fa639c55ca68967520a7
SHA1 9dc7df07808b07e85c9663c05c2c4afecde21e77
SHA512 1424278c6c82f87dc13eda8ed7ad4cedbf6755e76586423b8b4a7f68b77cfcc53a96572f2e62342c35e77b46cc15dc6dca214ca09575af393d2d51965e984490
TLSH
T1D3D02BD42C98736D0CAD4F16B0F168D630754C3350F55890D9B2067496FEEEB816694B
MD5 SHA1 SHA512 TLSH

Submit Download

7bd24af1-f3fa-45ce-9c9e-8569d33b27ab

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\7bd24af1-f3fa-45ce-9c9e-8569d33b27ab
Size 16KB
SHA256 d1d355cc264e59751fd2d0627ddec72c029152bfc40f9951dcc47cca07aeb047
MD5 f54134b82f4ec1060f5c7e3978e1424b
SHA1 1445ee35fa66c070e3fd1a3135bf054dd8cd29c3
SHA512 413bd4daf38e2f2db34a20c84b77228e1126ca78f60ccf584394eb008f4d67eea8a6a4adf37c1edeadaae334a2ede9a0654e7c9a7b46e853768f9917ee6f8fa7
SSDEEP 192:Wj5lMLRn9xn9zeYh6F7KyVjTeCVWYCzzEEWaygjxs8m0XRTUKeWy3UbR4twmkKBp:q8d3n9iYhM7KyVjTegRCznx1UGyNH
TLSH
T16972D9166460457A9351E3A894FC7FC3E6F528CF4C019FCA9BF47D0869DA0AE112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d109af7c-d0ae-45dc-afd8-559d3800c4e0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\d109af7c-d0ae-45dc-afd8-559d3800c4e0
Size 2KB
SHA256 6e56bfdc65ea1b7fcc6820c6ef339795ac373fb20acd78c6b997dcdac1cdef37
MD5 d82f8e970d567ee87e211bc287d3cc51
SHA1 87e57bfb1efc439a9d7e37f342638b69866937c2
SHA512 afd1082b1be3430d58d47e95a60b89423730dc0a02e511fdd2bb5827dfd28a414033dc9eb1428022358a59b367a0b9181cd72b1f4ca1cbba0fcdd7226f147921
TLSH
T13941315835784DB6DCDAE18DD851234E57A18B0300C168932E62EF0CCD9A6DE336A53B
MD5 SHA1 SHA512 TLSH

Submit Download

e3065f0d-1d56-4cae-82a0-5de3c5330f0a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\datareporting\glean\pending_pings\e3065f0d-1d56-4cae-82a0-5de3c5330f0a
Size 235B
SHA256 faa36395be44a090eb277d9faecf87ded5d5460f14cfaea946b8c72dc79dac0c
MD5 5c3cf7d5bfdd280a9bc9abd56ecf721d
SHA1 da1c61509c21c151913d68c5138cc965968ac921
SHA512 7f344979eb6a6a831b1c40aeb54066af714175e49ecc20754df86773927ff584a7a3a2085d74df011acb477ee06ede42a0637ebc949657d4f1506a3af85df9b2
TLSH
T18AD097856898235C08040F07B0A039C330C58C332070D890C66141B4EEFCFC44113D0B
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs-1.js
Size 6KB
SHA256 39573e77d679a5fa1d247f010c68c4ff4382403a42e881be17dda93849a864c8
MD5 362559eb4f606c02232b2f16315b2ea8
SHA1 9dc57f747f1f3d9ec6586d21ce589bcfde1e0f0a
SHA512 5261e6133df8ad1ca78cc75ff2e41e1d75fc6172a8dfb135ba6af45453d5966f7a939cb0ad7b99fff19f5dfd02bc1850150910dd753c545558f14fe43e83475a
SSDEEP 96:xHThUTUQqGqyf1BcT1zSvySSlNdv9jknZRHboedaBw88P8L4cnVWE:zrRyf/cT0ySSq9bT4Bw88m
TLSH
T179E11F789508CB7F74B677ACAC6488316AB2413B77BF28D750B95884050CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\prefs.js
Size 6KB
SHA256 2667764c0f731825b0dc8903abf0c0a4b0b4f72f22c8a8cc7396d358f558e8c3
MD5 9f5938202a2735dda5ba2963728fe051
SHA1 564475e577281b6320f3e8ddf2fe57a29d56afa3
SHA512 c24ca0540d474647c9109f84676bf78d8b4213d05db41224c26abe406021025c5f7b6d3074e9791f402e4e0baa61c73a8711eaf774a5df8429ac08ab561459bd
SSDEEP 96:xHThUTUQqGqyf1B3J1zSNSSlNdv9jSnZRHboedaBw88P8L4cnVWE:zrRyf/3JoSSk9bT4Bw88m
TLSH
T173E120789408CFBF74B676ACAC6489315AB2413B77BF28D750BA5484050CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\33iyexir.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.5MB
SHA256 74dd1302cba2a04f27aec067234e6330c491c204d2df88f84585878e868b5c48
MD5 5136444e1e06cf88b018fbef798553a4
SHA1 fe4ff27240965e1582dee56da4343874e0e3b6bc
SHA512 edc38527df47754731c8f88796a5eff66eed38bd6b09e3340bd23f5c25cfc95ed1779743f4b2426a4332c0b96862320d514fffd37332c5aea2be8453ba7014d7
SSDEEP 49152:oVDPx4URVScAJfWnGenNzT+ghHReb9QYsP+cai:sD54UjScAJfW/NzT+ghHr+cz
TLSH
T1B32639E860D1A257F3814073B64553EB21FFD00C6037DE084BA956E9A4B8CDF9E16B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads