fb105064e083632a0291210329ebdef3c851ce968704e44e93f4beacd748f2fe | Triage™

Login
Reports

Overview

overview

3

Static

static

1

p5.3/clt/b...ld.ps1

windows10-2004-x64

3

p5.3/clt/b...ld.ps1

windows11-ltsc_2024-x64

3

p5.3/clt/connect.ps1

windows10-2004-x64

3

p5.3/clt/connect.ps1

windows11-ltsc_2024-x64

3

p5.3/clt/d...ct.ps1

windows10-2004-x64

3

p5.3/clt/d...ct.ps1

windows11-ltsc_2024-x64

3

p5.3/clt/l...ld.ps1

windows10-2004-x64

3

p5.3/clt/l...ld.ps1

windows11-ltsc_2024-x64

3

p5.3/clt/l...her.js

windows10-2004-x64

3

p5.3/clt/l...her.js

windows11-ltsc_2024-x64

3

p5.3/sv/bn...14.pyc

windows10-2004-x64

3

p5.3/sv/bn...14.pyc

windows11-ltsc_2024-x64

3

p5.3/sv/bn...14.pyc

windows10-2004-x64

3

p5.3/sv/bn...14.pyc

windows11-ltsc_2024-x64

3

p5.3/sv/bn...14.pyc

windows10-2004-x64

3

p5.3/sv/bn...14.pyc

windows11-ltsc_2024-x64

3

p5.3/sv/bn...14.pyc

windows10-2004-x64

3

p5.3/sv/bn...14.pyc

windows11-ltsc_2024-x64

3

p5.3/sv/bn...14.pyc

windows10-2004-x64

3

p5.3/sv/bn...14.pyc

windows11-ltsc_2024-x64

3

p5.3/sv/bn...14.ps1

windows10-2004-x64

3

p5.3/sv/bn...14.ps1

windows11-ltsc_2024-x64

3

p5.3/sv/bn...14.pyc

windows10-2004-x64

3

p5.3/sv/bn...14.pyc

windows11-ltsc_2024-x64

3

p5.3/sv/bn...14.pyc

windows10-2004-x64

3

p5.3/sv/bn...14.pyc

windows11-ltsc_2024-x64

3

p5.3/sv/bn...14.pyc

windows10-2004-x64

3

p5.3/sv/bn...14.pyc

windows11-ltsc_2024-x64

3

p5.3/sv/bn...ent.js

windows10-2004-x64

3

p5.3/sv/bn...ent.js

windows11-ltsc_2024-x64

3

p5.3/sv/bnd/agents.py

windows10-2004-x64

3

p5.3/sv/bnd/agents.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
p5.3.rar
Size 6.3MB
Sample260806-rbe1laxthw
SHA256 fb105064e083632a0291210329ebdef3c851ce968704e44e93f4beacd748f2fe
MD5 9f0abba7bdc015f1a0a9cd06f34e12b3
SHA1 3763cda466df6caac7c489f1bb60ef18f990293c
SHA512 02a0e0d8a6644b037b8ac5d784669f23d626e2c96a7754c89c748bd525e92b2195162c5aa3c93653693844391221b9947246578e1a7c6f5fca137a8a5c14803d
SSDEEP 196608:FuWVqt8aHyCkCG6ledPJJBQo13x2SvHlukdNJ:FJqSMyCPG6leQoj2S/hNJ
TLSH
T11C6633ADEB32231BDA7C50D07D9E2375B30CC5028A6574FAF88A2BB374E5939655C350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution persistence

Static task

static1

Behavioral task

behavioral1

Sample

p5.3/clt/backup/build.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

p5.3/clt/backup/build.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

p5.3/clt/connect.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

p5.3/clt/connect.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

p5.3/clt/disconnect.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

execution persistence

Behavioral task

behavioral6

Sample

p5.3/clt/disconnect.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

execution persistence

Behavioral task

behavioral7

Sample

p5.3/clt/launcher/build.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

p5.3/clt/launcher/build.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

p5.3/clt/launcher/launcher.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

p5.3/clt/launcher/launcher.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

p5.3/sv/bnd/__pycache__/agents.cpython-314.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

p5.3/sv/bnd/__pycache__/agents.cpython-314.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

p5.3/sv/bnd/__pycache__/api.cpython-314.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

p5.3/sv/bnd/__pycache__/api.cpython-314.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

p5.3/sv/bnd/__pycache__/config.cpython-314.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

p5.3/sv/bnd/__pycache__/config.cpython-314.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

p5.3/sv/bnd/__pycache__/db.cpython-314.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

p5.3/sv/bnd/__pycache__/db.cpython-314.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

p5.3/sv/bnd/__pycache__/gen_certs.cpython-314.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

p5.3/sv/bnd/__pycache__/gen_certs.cpython-314.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

p5.3/sv/bnd/__pycache__/payloads.cpython-314.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

p5.3/sv/bnd/__pycache__/payloads.cpython-314.ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

p5.3/sv/bnd/__pycache__/screen_stream.cpython-314.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

p5.3/sv/bnd/__pycache__/screen_stream.cpython-314.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

p5.3/sv/bnd/__pycache__/server.cpython-314.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

p5.3/sv/bnd/__pycache__/server.cpython-314.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

p5.3/sv/bnd/__pycache__/ws_helper.cpython-314.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

p5.3/sv/bnd/__pycache__/ws_helper.cpython-314.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

p5.3/sv/bnd/_templates/agent.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

p5.3/sv/bnd/_templates/agent.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

p5.3/sv/bnd/agents.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

p5.3/sv/bnd/agents.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  p5.3/clt/backup/build.ps1
- Size 718B
- SHA256 f03117f7f0949db0c90ded84b2485593d44caeabee67db5bf3c01177b4d46de0
- MD5 a018355245ceecde597132c240807593
- SHA1 3a2e9a9518da6cc8cf08497b706b1f51257b2ed4
- SHA512 f295fb4eb1719f5540e6c61b66a40eb5b8af421af49c910cc84f17b06ec925647d43ffafe0a536103b4c6664384e9d742b754c2bebc637edb8f02fb5d42a836f
- TLSH
  T1F30144A4C50FE46B82F461D1F495DA54E04DC03FE42D1834E0F410862778B2C8932ADB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  p5.3/clt/connect.ps1
- Size 248B
- SHA256 28cd2b69fa5869b9b2d3dcec732ab7bcff2560ae97119a5b98cec2497e06c495
- MD5 a0cc336793edbd365ed3d5695a713dcd
- SHA1 b7ced30bed97cbc3aa03e213f21c93f671e85807
- SHA512 2fbeff429bdff498a832cb5e3914e05d7b381cc450c9f5b8f4be202d1bdd8a17049c7e6d1c615b760cc682fbd9bc2cec21c0142d50830f71b9fc34a740afe3f0
- TLSH
  T18ED02BA7410447F088082691902A8748D36403C7259D5851A2CA4B30F58AAD882D7042
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  p5.3/clt/disconnect.ps1
- Size 3KB
- SHA256 c53039dbbff69a0dea5c18825f8c8b8cb731cf1075629d6894dfff43e16d6d4d
- MD5 edbe60dbd25b2a07a37a4c50e3d67f30
- SHA1 30b23a3f1729d0a19039add994b16a9a9d7a55f0
- SHA512 2e63a6582290c0ac0d4ae8a13dee8d7abe4cafba49c8b4a063c8890a281714dba4fb5bdc0529c99f5e091e56c8e508c95a08f355e1dc6865887f3382117c53e1
- TLSH
  T198713211A15858DAA6F21B5366C7A266BEDB007FC02D0F40B85DC286BBD253D87582BE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution persistence
behavioral5 behavioral6
- Target
  p5.3/clt/launcher/build.ps1
- Size 1KB
- SHA256 52d596aeff91440745dfe29969520f08ff50384692ff9c42724b7fe34730aaf9
- MD5 2581ce313a6c94a73dc091fe49dcd689
- SHA1 8656b885fad5afb0bc55940f6587c1d8c9717951
- SHA512 97b43677a72c6af82528cf88754b9dd99308fa8c1bfdbd01507196775caee910f398bf0d451d816378b0e87403a31987a91242e56903155c3f87ac21debed6df
- TLSH
  T177417115C28E981923F273D5F5D8C11CF305805F99281974B8FC48663BB977C4AB4BE6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  p5.3/clt/launcher/launcher.cs
- Size 2KB
- SHA256 c13fb7cb042c5c126d5a6ea669cca1919d6b851dc5de88fb33fde469aa357761
- MD5 c21757738fc3cd7675027bd2487ff5c1
- SHA1 941bb482fc9fca56fb6b01a0b2bbb7c79f5e7fd6
- SHA512 d515a64b7a99c34a05b29312cbeba482366fec232d6b5588f2dac933d3afdf8643ff436c5610045582482e00872ba3270b559c320fc44cf7b8916811d0303986
- TLSH
  T1B741F2193EA7D2150BF710279B9B11506323621303BADCB0FDDF0540EF685BE4B79AA9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  p5.3/sv/bnd/__pycache__/agents.cpython-314.pyc
- Size 17KB
- SHA256 45d3182a5c4abfd7eadd1377665a339fd5f14897e054e7db55d280062da43282
- MD5 7847bc9f8fb3292e32ceb199f81159cc
- SHA1 aa45e48d49a15f7895eef58c99e7a5ef05f5e534
- SHA512 e566ce46f6c716e8c7494b63ac39e8fc639129d4b78422b1ef79e12195fbcfeb7282d850a61c23df404b937d7dc9f3b4ed0d681e8c65d992c1990fe3518a60e1
- SSDEEP 192:F8oELb6r8g7reD8SyO0g/tMegSWNhE3L0JOZ5d0tbp8eX+rWaxohjbUV:SoGqPe860SWLE0S0j5OJWhj4V
- TLSH
  T11F82B6F848409933FDBEF53831D3E686932581447606C607D1748DFEADCA3A0E9A936D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  p5.3/sv/bnd/__pycache__/api.cpython-314.pyc
- Size 38KB
- SHA256 862d930aed1fa30a7c5a9e1772e3b3cabf8418ac2244839eadaa45707f7c10f6
- MD5 65686d6f924bee9d40289872838f55ed
- SHA1 c1ca15b1a68da5ae6dc4fdb6f4ec17a2cf3904bc
- SHA512 a698dfd66d0f643a0445152e185eebcfe6226f3612e6a6dba31d3697ac74e4b2d2af2cf614b7c856229494b2fbe843e4cf611afada83b8761d5555f2d2a65983
- SSDEEP 768:vhbI52TNQDnVkJDxRipOPBnxPQg0UnbPQQeHribVM26jpDtpaDtR2l+4:CqQDn4no4BnxPQg0IbPQBHribVZ6jfpn
- TLSH
  T1AC03C4F8DA186027FDDDF63972EADAC5AB258180B200D747E1340DBD6DD93209A9534E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  p5.3/sv/bnd/__pycache__/config.cpython-314.pyc
- Size 3KB
- SHA256 30bc629943f334ba99662cf81fe6a3f4f130458ff9bf2de4b5a77f7525a160f8
- MD5 d7d8912f5f99b871e6b53304e9c8c83a
- SHA1 8774e706b727460ee8f71748a0dd9e58563e8db0
- SHA512 e89fc3bd1e1f2418da394b551e51f722eb801bda1d31063dcb25e49661b59eb7158850b0c066b49d75e93385eb1ccf82071740807cb49395ab5117872d8f46f6
- TLSH
  T19F61C9F5C6D4E136DDBE883579DE8549B770A1CA30D2E797F82258EC5EECB408431858
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  p5.3/sv/bnd/__pycache__/db.cpython-314.pyc
- Size 3KB
- SHA256 d09129017aff07dd9dc371f2f3a75a0a849bc2f211f16a433b4f14bcf923287e
- MD5 97fbc642da8e204bc2bb4652d4a33aba
- SHA1 8d7d617d8862d317a528c25b92cc8aabec26aaef
- SHA512 7fa0ec576ce20d9086d7565fa84718e35b90e0e77d0af9a39f2f98e71b7e692ac775d7d9e445d1f0459d66f9aa7b1ba9d1c65681bf882f0eef23b5572bbe2892
- TLSH
  T1375154D85941292BE965F13571E79B296371C292E610C307913C8EB97CDF281AAA210E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  p5.3/sv/bnd/__pycache__/gen_certs.cpython-314.pyc
- Size 3KB
- SHA256 974db63887987e0804a0c5098747964652016dff6226d23f9ba4b5e008381a01
- MD5 856bfa5729e4f4d820ea7e4d6854f7ab
- SHA1 144cf3a52139569b546b9d7e30c914ef28248ef2
- SHA512 615893b822315f57431b7036fd9f271790d77293db1c4bdd2f2dab444d711dd21778dfb193e53e9e67506f20d61e575a3256e99f32ced452a4fa66189429ac58
- TLSH
  T10971C67C4965E7B7CCC9D23470F7C181673196426266CB8BD640AC5CACC63464BA5B3E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  p5.3/sv/bnd/__pycache__/payloads.cpython-314.pyc
- Size 9KB
- SHA256 3da2171886f181123889fd5f6207f59c50a23f70f16384a5e34f3fe8f54f2b1d
- MD5 48933f6b37d7f8a7d36977743b9cb66e
- SHA1 ae29cd9d85ff607a5eb3a13aecf9b44fa47b094e
- SHA512 b12a015f5067a486bf897c315218c61f3e01114489aa394490dc53aec653caf4df2b592886623e418882746dfa50c912920da457be8c2a85136a9d773c2a0c21
- SSDEEP 192:+TZOio4+2m3X8vEmEVqY9MofuI8x1NsJdEWPjGwjVULISSPAUR:wfoF3X8vEmEVqY9MCSFWPjGaVUESSP7
- TLSH
  T16112D97096558C6FCED82676F2CAE1818B3083FFA1BC9D02A5C8D93AC84954CE62075E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  p5.3/sv/bnd/__pycache__/screen_stream.cpython-314.pyc
- Size 4KB
- SHA256 1afe300b6b732a9354ab05001663de55f2e577397468a3c9df4b08ec7b36f230
- MD5 f07be4c822229ed71de377ace0d11470
- SHA1 2ab12483c7c5ab8b8d305595499a73b63a479762
- SHA512 5b59d668935117360039a80fdd7487ed6558c0cd4c1fbf76d2740f87b3f194bf34e3d061d8e3d03e0ff029ffae3030e2301ed37d5ee3576fcb82a922edfc4bc2
- SSDEEP 48:bVh3yG3YfEFKT2qlgVhJgekTCZvOichw8XhzuApGS3PEC:bqG6EFKT2qlgVTgSrGRzJT
- TLSH
  T18981D674D86040EFFDC1F079B4EF2582577391868288E30BF72818A63988B27CE5861C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  p5.3/sv/bnd/__pycache__/server.cpython-314.pyc
- Size 3KB
- SHA256 05717356c768a9a482658b658350ab62ed710ba6881b7110717ff533a2af5656
- MD5 63a1dafd74d787a85487714b0b354885
- SHA1 e8843acb5f33ed39dcc1c640d218def2920c9ad9
- SHA512 552fd3713d1e54ab6b8ca22ac0ddb6aeeafe8088d9b6f49eafa262d826045a1bc930c0d2e3afac469f517a61c930333b57e2ccaa2df9076254579accba3c90c3
- TLSH
  T1EA51C8F3C1A8B9EDE89C8172F296DDA8F764954270A7DB86FA10561D5C9880081E826F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  p5.3/sv/bnd/__pycache__/ws_helper.cpython-314.pyc
- Size 4KB
- SHA256 4b1601f30120019a05a5f19757710824128943b00f85f358004c6181781631cd
- MD5 eb1c7e908520bdf6484522b0c09ed3ad
- SHA1 282ea115730c7c3388722af2eb4b38d6886bbc73
- SHA512 3841aea882612e899377f8bf5a49ac1e4a37dcb8a1bffeddd28cb74bdec2c9a450a1d6310ea0ec5583e327a1b76d29441ebc1d50b9941c568270f20d19b29081
- SSDEEP 48:eAztgay/d6+sOjl+QfUZbOD9YtIDVdWqycdcnADfHCNylXKuLo81EK3u6JzIPzQa:eAsA+s+XUZSD9YKhQqy1SfiN08IXZI
- TLSH
  T1BCA186AE99505467EDE4E83C20EFA48A9336C140F210CB4BA538ADFE6CD9755E5A011D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  p5.3/sv/bnd/_templates/agent.cs
- Size 6KB
- SHA256 c7dc10a960b3aa7e4803262d671e34ade130af3dd8d7b02b4429fb6a879a8817
- MD5 e3eb43a2e3d69eb827f282b87b975d41
- SHA1 62b02680b530397084dc69b8627b9d5583f3411e
- SHA512 ad0635a1ab9043f510ee023f40fb07cdcc0c8970f349c85d1298063c87e05279e122a2ba078099d1afb2833e9876fef34d3de70257c5374c850f1425b13acad4
- SSDEEP 192:CFzdMZXei1lpmEbTT9doY0afB40vnHDLx0qAicyk4xnKiHUq:CFzdMBNTT3oQZtxJPH
- TLSH
  T155D1D600B26AD5769893281859F94E209777526302B9DCB0F9EFC900CF2E17E43FE679
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  p5.3/sv/bnd/agents.py
- Size 10KB
- SHA256 fccaa3555a8043d10ce37d98445f29b935bad236e8fe39e307207cad4eca3d47
- MD5 ee79ed3daca4defeb082ced291369c7c
- SHA1 2b26c1fc6fc8ebe2c68118eb8e7aeb5da9616f02
- SHA512 bdbff7c040a9f0096af7faf2e35605633aab1722c0f6b1c8b4907ae45d1dfb176117aa32a21415fd1ebfef810dd3c5c92c2bade1ad15106a37ecaa44dafa45c0
- SSDEEP 192:zzNskOd9XeVp2dHI9A7nMPvfmpu2LPFWL179uV4:1sxDjHI9knMELPFq79j
- TLSH
  T1AB2261A468B54431C3639B2E6D37C092A3567C17290875B8BE9CE710BFC6172E2B57F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

executionpersistence

behavioral6

executionpersistence

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy