16637168f9d85bb5abe9dbcd2586ee859fd2981e7ea173c031e0cf3bf0ee4da8 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

setup.exe

windows10-2004-x64

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Resubmissions

08/08/2026, 01:16

260808-bm3yssba487

08/08/2026, 01:03

260808-beldsafj2v10

08/08/2026, 00:50

260808-a68sqaztaz10

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 90.0MB
Sample260808-bm3yssba48
SHA256 16637168f9d85bb5abe9dbcd2586ee859fd2981e7ea173c031e0cf3bf0ee4da8
MD5 a4a52244c3f8b83b049ad426cf41b1ef
SHA1 7c205b888de4da3cbda69fd6ed99c5973de98e41
SHA512 3b0148bdd68ea7d8386d5b1a011a47413e2323027ea71f43bd12672f25f975056ebe06a6235b385fcf85067ff5b11f0dbcb85d1f324f50faafb27750aa8edfcd
SSDEEP 24576:VbB07bbr9qsQ7N7LaRmWs0/SoCzeWikqPuHTt++pv0bQ1PzGYSYHXKK19FiO:E7bsv7V63sAyzSjPm++pcb0PzGR471B
TLSH
T16A282BB91615B64EC2DE49B4B3B1498C26172FBF60204FD7E606E056B3EF4087F6A931
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery execution persistence spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

setup.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

16 signatures

150 seconds

discovery execution

Behavioral task

behavioral2

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

adware discovery persistence spyware

Malware Config

Targets

- Target
  setup.exe
- Size 90.0MB
- SHA256 16637168f9d85bb5abe9dbcd2586ee859fd2981e7ea173c031e0cf3bf0ee4da8
- MD5 a4a52244c3f8b83b049ad426cf41b1ef
- SHA1 7c205b888de4da3cbda69fd6ed99c5973de98e41
- SHA512 3b0148bdd68ea7d8386d5b1a011a47413e2323027ea71f43bd12672f25f975056ebe06a6235b385fcf85067ff5b11f0dbcb85d1f324f50faafb27750aa8edfcd
- SSDEEP 24576:VbB07bbr9qsQ7N7LaRmWs0/SoCzeWikqPuHTt++pv0bQ1PzGYSYHXKK19FiO:E7bsv7V63sAyzSjPm++pcb0PzGR471B
- TLSH
  T16A282BB91615B64EC2DE49B4B3B1498C26172FBF60204FD7E606E056B3EF4087F6A931
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Executes dropped EXE
- Loads dropped DLL
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 8165c7aef7de3d3e0549776535bedc380ad9be7bb85e60ad6436f71528d092af
- MD5 08e9796ca20c5fc5076e3ac05fb5709a
- SHA1 07971d52dcbaa1054060073571ced046347177f7
- SHA512 02618317d6ab0302324aae4d3c5fca56b21e68c899e211cfa9412cf73820a1f931e56753c904fd7e510c638b4463aedbfe9536790279e096ea0387b67013e0c4
- SSDEEP 96:/Uspq2y5jOEEQrhySvUgfj74/vvrTBzfYZA4YF3Telac1nIq/2:/erjOELhySv5f2vvBjiAflaB1nIq
- TLSH
  T116C1F7B656C005F3E40D04B93E31280F87FEE426073242769E9B1ECA19D2AA6FD68751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery persistence spyware
behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

adwarediscoverypersistencespyware

© 2018-2026

Terms | Privacy