3277bb57812a9d50bc980e5f98721b21d2a201016400ba4e81d5632fb5e0e5e0 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

SonicCat_P...IN.exe

windows10-2004-x64

7

SonicCat_P...IN.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$_39_/Purity.dll

windows10-2004-x64

3

$_39_/Purity.dll

windows11-ltsc_2024-x64

3

$_40_/Purity_x64.dll

windows10-2004-x64

1

$_40_/Purity_x64.dll

windows11-ltsc_2024-x64

1

Purity.dll

windows10-2004-x64

3

Purity.dll

windows11-ltsc_2024-x64

3

Purity.exe

windows10-2004-x64

3

Purity.exe

windows11-ltsc_2024-x64

3

Purity.pdf

windows10-2004-x64

3

Purity.pdf

windows11-ltsc_2024-x64

3

Purity_Ins...de.pdf

windows10-2004-x64

3

Purity_Ins...de.pdf

windows11-ltsc_2024-x64

3

Purity_Tro...ng.pdf

windows10-2004-x64

3

Purity_Tro...ng.pdf

windows11-ltsc_2024-x64

3

Purity_x64.dll

windows10-2004-x64

1

Purity_x64.dll

windows11-ltsc_2024-x64

1

Purity_x64.exe

windows10-2004-x64

3

Purity_x64.exe

windows11-ltsc_2024-x64

3

uninst Purity.exe

windows10-2004-x64

7

uninst Purity.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
SonicCat_Purity_v1.4.3_WIN.exe
Size 74.4MB
Sample260807-28s9laad85
SHA256 3277bb57812a9d50bc980e5f98721b21d2a201016400ba4e81d5632fb5e0e5e0
MD5 5f62327779b21ab9c28841c44bf3329a
SHA1 89d3a8f634b5a3b32032f629c39799423f402523
SHA512 44005626de8949ece6629f1a65c2b917e31fb6c82a16ca2c3c700eb0878fcaaf66acb93d1caa883cf560e7109e2bc06d47e0a2398b46d59bbd0befbf5638fa13
SSDEEP 1572864:ecLBOy12+cE+YpqMD2EXIHhCQo8FoiAZ4UuVgEWZ/ZzMxvWWUjY:egRI+/pqMKDC78FoiVQQpD
TLSH
T1EF08333060ED5441D2A1F83E59A3F530921A7D052287B716F2FFBC2BBB37E96DA98111
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery link pdf spyware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

SonicCat_Purity_v1.4.3_WIN.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

SonicCat_Purity_v1.4.3_WIN.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$_39_/Purity.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$_39_/Purity.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$_40_/Purity_x64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

$_40_/Purity_x64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Purity.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Purity.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Purity.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

Purity.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Purity.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

Purity.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral19

Sample

Purity_Installation_QuickGuide.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

Purity_Installation_QuickGuide.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

Purity_Troubleshooting.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral22

Sample

Purity_Troubleshooting.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral23

Sample

Purity_x64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Purity_x64.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Purity_x64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

Purity_x64.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

uninst Purity.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral28

Sample

uninst Purity.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Behavioral task

behavioral29

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral30

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral31

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral32

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  SonicCat_Purity_v1.4.3_WIN.exe
- Size 74.4MB
- SHA256 3277bb57812a9d50bc980e5f98721b21d2a201016400ba4e81d5632fb5e0e5e0
- MD5 5f62327779b21ab9c28841c44bf3329a
- SHA1 89d3a8f634b5a3b32032f629c39799423f402523
- SHA512 44005626de8949ece6629f1a65c2b917e31fb6c82a16ca2c3c700eb0878fcaaf66acb93d1caa883cf560e7109e2bc06d47e0a2398b46d59bbd0befbf5638fa13
- SSDEEP 1572864:ecLBOy12+cE+YpqMD2EXIHhCQo8FoiAZ4UuVgEWZ/ZzMxvWWUjY:egRI+/pqMKDC78FoiVQQpD
- TLSH
  T1EF08333060ED5441D2A1F83E59A3F530921A7D052287B716F2FFBC2BBB37E96DA98111
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
- MD5 68b287f4067ba013e34a1339afdb1ea8
- SHA1 45ad585b3cc8e5a6af7b68f5d8269c97992130b3
- SHA512 06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
- SSDEEP 48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
- TLSH
  T16BC19474B3C248B9C491513768AB33D36612EE746784500F9F6711AA38209F7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH
  T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH
  T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $_39_/Purity.dll
- Size 1.4MB
- SHA256 6a2d8a2264f03f8029ed4b9b55fd4dcb95a8453f271287d08a0467e6526897eb
- MD5 f485fb89410d7f7e5d7592b7f0541ca1
- SHA1 6d4779233024a26b56ca65de6c5401ca84b02a74
- SHA512 fb06a86f1176748f39306b4ff6ba578f6bde1b031c3dddfb004fe755cdb2a89330849c1ce4a6cc9e4fc4935c80cee7a6cf384e7eb01b7e1211c042876b6147f0
- SSDEEP 24576:X1KLmuZlVtJ1YL/XvI0ZuNpyDKi0DtywpIzrpoEl/14L5s9AvVv553+M:9rTPutywpI2tLbV333
- TLSH
  T167659D0275A1C075C19E12703A3EBBBF662D9A600B3C4AE76BC47C9D487A5D11DF3AB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $_40_/Purity_x64.dll
- Size 1.8MB
- SHA256 b3cf77b93584971824b22b2f621207acf1ca513aa1369163fe8e4c8ceddcf4f2
- MD5 a732e42adbe6cbeda7333f6bbe53914a
- SHA1 bc7bdf3ac51a7ed918ed4a469da0b2befdfcf3a4
- SHA512 72f59b60446badaf3979a407a5c4047d165895e5f34b68c81650bcd87aac83ae2c0a3109b6b4de507e8d025d56fec0ff67d8899c02e19e191e530ac2d958fa8c
- SSDEEP 24576:tgwTf9D+bQO4QBPDfdd6y4tV1Jevf9cH2StL5dTVkbaSXr3yU+Lwr+uL8hcAIqgK:ywj9CcOl/UyAV1JeuWSFZD+r3yU+LVl
- TLSH
  T179858D4AB2A4409CD57AC17C8A279A6AE77370140730ABDF12A1475EAF3B7D04E7F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Purity.dll
- Size 1.4MB
- SHA256 6a2d8a2264f03f8029ed4b9b55fd4dcb95a8453f271287d08a0467e6526897eb
- MD5 f485fb89410d7f7e5d7592b7f0541ca1
- SHA1 6d4779233024a26b56ca65de6c5401ca84b02a74
- SHA512 fb06a86f1176748f39306b4ff6ba578f6bde1b031c3dddfb004fe755cdb2a89330849c1ce4a6cc9e4fc4935c80cee7a6cf384e7eb01b7e1211c042876b6147f0
- SSDEEP 24576:X1KLmuZlVtJ1YL/XvI0ZuNpyDKi0DtywpIzrpoEl/14L5s9AvVv553+M:9rTPutywpI2tLbV333
- TLSH
  T167659D0275A1C075C19E12703A3EBBBF662D9A600B3C4AE76BC47C9D487A5D11DF3AB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Purity.exe
- Size 533KB
- SHA256 7589af6b74fb4c173206d0913d2142ff992adaf1bab61b4c6606a078cbb4aea8
- MD5 d2c3072c6df523bb0536db5eaa84fdc2
- SHA1 60763420fb5ce300442112bc50cf879dc756e9d9
- SHA512 954a8ed567c1cfe063885b6e4ec01db0a9066bb976d8813af4698053d59607dc1f3e840298af942486050cbd9bd204f77b6a0bf6d99d9fca212e34985752e2d5
- SSDEEP 12288:p0Lfi/4VYL1AYmGrlmyG1nLXVZhRU23Uh:GDVYj3inLXVXi2s
- TLSH
  T1DAC48D01B582C831C5622170A96DE7B5CA2D6E102B20B9D733E43E6F7D722D15F367BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Purity.pdf
- Size 12.3MB
- SHA256 280ec7e3d9a2321e42833709e9223d85a83548f313b6a9f0c65f14cc0715cf30
- MD5 a85674c473abc4d3a49abf43abc92516
- SHA1 07e40a4ae8b0465757a795c638f322107eb7054a
- SHA512 06ba95b6f6ef62e1c56aa714c23ad44632dc6481629cd2acfea45b0de44a8e7c67256eea42da24df77eb741a6f46b45977c4fddc79b275f6c6b73d80b45398ab
- SSDEEP 196608:ubpePnPaXSxluCtfotayuWl9nBeZD/oPUMbeT/yOuk+j+HaiJ2Yfwj5RXLEICTN2:CsP/Y8yBPnBq/T0eh+UaigYwjL4x2
- TLSH
  T1CED62211E899CC9DEC89C139E436299F0B09362BB188DC44325E5D19F3837A1AFE75DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  Purity_Installation_QuickGuide.pdf
- Size 1.4MB
- SHA256 081afceebc308443fe0b2760a2b9dc65cea8ecbdec4ea4bdeb144e58d4094a9b
- MD5 04664be18b9f8b27635eb08875297081
- SHA1 f9143ec1f5036a1f910236487dfb22dbeb1b0971
- SHA512 8eb3184a38bb04e0251d124c008c265bd69da4b31cf2142e3a99430f063886e7100ab5a647a8788f3675c741add11ef686b2765c8193c4156c6a3e2f8ea3d1e2
- SSDEEP 24576:qbDRCh3UVbZlEyWVTisHiACx12QqyE9dCkgMARzafFwPtokBnBMK5cVsVyQ8OZdw:+bvEyaQ12VLdCkgMQzaytok9z5cVsVyn
- TLSH
  T12865E002DA51183FF8098512B623395B4A143A3BB585ED4576EF7A0FB703FB49DB2D82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  Purity_Troubleshooting.pdf
- Size 449KB
- SHA256 d69e34347d0b9121adc7ef819a2374bd0f741a88bb28cd734b652bb323c663e4
- MD5 ea567447c64324423caacc820ab21e75
- SHA1 468e6996492c61934ee9b7bb779d5e9eb393bee0
- SHA512 8c9f965940fbf0a9ec3ef50e846f89ca04a45d17a0a21a86419f05b19178c1527b8d00c4af1e5aa88260e2d9b572494374736c06efc9ca047a671d75edffc90b
- SSDEEP 12288:o3NzjH+QJBXr3geCZ/1skUVbZkir2gSrLSQMG/MdYpM/O+nZf1o/:qbDRCh3UVbZpSrLSQMG/MdYpM/O+nZS/
- TLSH
  T16CA4CF62E8D55CADFC8BCA55943B3A5D072C732750DC788431AD6E02F30A6C9AAD36D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  Purity_x64.dll
- Size 1.8MB
- SHA256 b3cf77b93584971824b22b2f621207acf1ca513aa1369163fe8e4c8ceddcf4f2
- MD5 a732e42adbe6cbeda7333f6bbe53914a
- SHA1 bc7bdf3ac51a7ed918ed4a469da0b2befdfcf3a4
- SHA512 72f59b60446badaf3979a407a5c4047d165895e5f34b68c81650bcd87aac83ae2c0a3109b6b4de507e8d025d56fec0ff67d8899c02e19e191e530ac2d958fa8c
- SSDEEP 24576:tgwTf9D+bQO4QBPDfdd6y4tV1Jevf9cH2StL5dTVkbaSXr3yU+Lwr+uL8hcAIqgK:ywj9CcOl/UyAV1JeuWSFZD+r3yU+LVl
- TLSH
  T179858D4AB2A4409CD57AC17C8A279A6AE77370140730ABDF12A1475EAF3B7D04E7F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Purity_x64.exe
- Size 602KB
- SHA256 6f07d6755fe8a7e69e0d6bac6ca84e85f26ef2d893385b7a71412467a400e605
- MD5 5444b25a485499f63bf3d957cd7fdf46
- SHA1 f4542bbcf8f761f86746c1380408444155dd9b4b
- SHA512 2029de0e6ee3f7465e672adde04869dcac335ad104274cdd448675af4502869654531ce5f5209e3290643424be8723a46c6599f56f36a741320c498e1890ae70
- SSDEEP 12288:PU+X+Skiu0OL4NQzPgDz/2fSvASpP48YDqoK9AoByCWa3:PU+X+Shu0OLIQz4DyfSYSpP48YOt9AoN
- TLSH
  T113D4580572A558E4D5239038DA57C635E6327C110720EBDB22E8FE6B7FB36D06D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  uninst Purity.exe
- Size 201KB
- SHA256 6c0c1266353b9238869fa58d9618b831d61570faa94546ca326badf94c97a6e1
- MD5 6071f6369a3a29803790e060ac72fa52
- SHA1 e834b902256ef8d474cdd05b25646a32eece0476
- SHA512 518ac7a82edac2acc7cbb5be7a30df01bb8c0c7b88300fc8fff685e905b6d74964e929fdda8588dbe9284fccef12f930fdb25d10451b923155485a31d3d4a5a2
- SSDEEP 3072:21NjcVVnLpPuvwl03ITUiEuYuLSST+HPrwN2FJco:ONeZUwkIoBfE+v0IR
- TLSH
  T18514D4047548C827CD5A51334B2AD6BEDB626EDD6C30510B26ECBF5B39773720918AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral27 behavioral28
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
- MD5 68b287f4067ba013e34a1339afdb1ea8
- SHA1 45ad585b3cc8e5a6af7b68f5d8269c97992130b3
- SHA512 06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
- SSDEEP 48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
- TLSH
  T16BC19474B3C248B9C491513768AB33D36612EE746784500F9F6711AA38209F7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH
  T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

adwarediscoveryspyware

behavioral18

adwarediscoveryspyware

behavioral19

adwarediscoveryspyware

behavioral20

adwarediscoveryspyware

behavioral21

adwarediscoveryspyware

behavioral22

adwarediscoveryspyware

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy