ad2e34b6b2dd2544dc8ec53882f6f60c0f5375a70e66b2511d963560b415a37d | Triage™

Login
Reports

Overview

overview

Static

static

3

ad2e34b6b2...7d.dll

windows10-2004-x64

1

ad2e34b6b2...7d.dll

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
ad2e34b6b2dd2544dc8ec53882f6f60c0f5375a70e66b2511d963560b415a37d
Size 1.1MB
Sample260804-ymwwtaw1dv
SHA256 ad2e34b6b2dd2544dc8ec53882f6f60c0f5375a70e66b2511d963560b415a37d
MD5 6ea4542f6d0ba9ee1e57686ff573690e
SHA1 f63e40878a706cbef07f730a991238e1a6dbe8e8
SHA512 1ae22941a404a4ff6f401341cf2ecbd42662636193b47865e8f63e74339ab6b0701a8b9891abff4bfc1fde695260f991896bb37ded01601d46ff82eba594d41e
SSDEEP 12288:k49urElyc6Dcx5PMUX1r+Hd+bNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8dNgg:furEoc6DcLEd+l2D
TLSH
T16C35A324B9BA412DD037FFB83EDDF49EEDAB3A151545A46B0041034B8A26AD0CF5B63D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

credential_access defense_evasion execution persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ad2e34b6b2dd2544dc8ec53882f6f60c0f5375a70e66b2511d963560b415a37d.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

ad2e34b6b2dd2544dc8ec53882f6f60c0f5375a70e66b2511d963560b415a37d.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

credential_access defense_evasion execution persistence trojan

Malware Config

Targets

- Target
  ad2e34b6b2dd2544dc8ec53882f6f60c0f5375a70e66b2511d963560b415a37d
- Size 1.1MB
- SHA256 ad2e34b6b2dd2544dc8ec53882f6f60c0f5375a70e66b2511d963560b415a37d
- MD5 6ea4542f6d0ba9ee1e57686ff573690e
- SHA1 f63e40878a706cbef07f730a991238e1a6dbe8e8
- SHA512 1ae22941a404a4ff6f401341cf2ecbd42662636193b47865e8f63e74339ab6b0701a8b9891abff4bfc1fde695260f991896bb37ded01601d46ff82eba594d41e
- SSDEEP 12288:k49urElyc6Dcx5PMUX1r+Hd+bNzUzv3IgNaSWYdU4881GNT0Qkb3NnX+S5m8dNgg:furEoc6DcLEd+l2D
- TLSH
  T16C35A324B9BA412DD037FFB83EDDF49EEDAB3A151545A46B0041034B8A26AD0CF5B63D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

credential_access defense_evasion execution persistence trojan
- Modifies Windows Defender Real-time Protection settings
  defense_evasion trojan
- Modifies Windows Defender notification settings
  defense_evasion trojan
- Windows security bypass
  defense_evasion trojan
- Boot or Logon Autostart Execution: LSASS Driver
  Adversaries may modify or add LSASS drivers to obtain persistence on compromised systems.
  persistence credential_access
- Executes dropped EXE
- Windows security modification
  defense_evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Boot or Logon Autostart Execution

LSASS Driver

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

LSASS Driver

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

OS Credential Dumping

LSASS Memory

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

credential_accessdefense_evasionexecutionpersistencetrojan

© 2018-2026

Terms | Privacy