f6fa2d9f0a2bf7efe15ec8beb4dea02a57ed9cc2c8becaa1f274e358c8c68ecf | Triage™

Login
Reports

Overview

overview

8

Static

static

3

Elite.Leve....0.exe

windows10-2004-x64

8

Elite.Leve....0.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/app-64.7z

windows10-2004-x64

1

$PLUGINSDIR/app-64.7z

windows11-ltsc_2024-x64

1

locales/uk.pak

windows10-2004-x64

3

locales/uk.pak

windows11-ltsc_2024-x64

3

locales/ur.pak

windows10-2004-x64

3

locales/ur.pak

windows11-ltsc_2024-x64

3

locales/vi.pak

windows10-2004-x64

3

locales/vi.pak

windows11-ltsc_2024-x64

3

locales/zh-CN.pak

windows10-2004-x64

3

locales/zh-CN.pak

windows11-ltsc_2024-x64

3

locales/zh-TW.pak

windows10-2004-x64

3

locales/zh-TW.pak

windows11-ltsc_2024-x64

3

resources.pak

windows10-2004-x64

3

resources.pak

windows11-ltsc_2024-x64

3

resources/...te.yml

windows10-2004-x64

3

resources/...te.yml

windows11-ltsc_2024-x64

3

resources/app.asar

windows10-2004-x64

3

resources/app.asar

windows11-ltsc_2024-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

snapshot_blob.bin

windows10-2004-x64

3

snapshot_blob.bin

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Elite.Level.Account.Manager.Setup.2.0.0.exe
Size 73.0MB
Sample260808-ybsp1sxxhs
SHA256 f6fa2d9f0a2bf7efe15ec8beb4dea02a57ed9cc2c8becaa1f274e358c8c68ecf
MD5 dd11b2ec4b19977efa419063c2b20dd0
SHA1 ae296d274c50a5eb88f1da25defb97a53d451198
SHA512 0b22f60dcc5ecb39c6cdabccf2ab050d00a562e3e524dda1854db581c143659edfc4aa1f4e9e5d7e57290bb1dc003c3875b4b0a3fa90b2a09362a12331aac98c
SSDEEP 1572864:1Ge4hdV6xfHH1I0LynQ3Y9GF0J2/3M4fvHLTkEY68xsqBJY9:1Ge4Doxfn1ITI/0A/3/vHLosEK9
TLSH
T131F73363AD3E09FDD0D5B77ED56F04F5864B284F098E10A972BF91AB78F85060E2118B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Elite.Level.Account.Manager.Setup.2.0.0.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

discovery execution

Behavioral task

behavioral2

Sample

Elite.Level.Account.Manager.Setup.2.0.0.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/UAC.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/UAC.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/WinShell.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/WinShell.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/app-64.7z

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/app-64.7z

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

locales/uk.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

locales/uk.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

locales/ur.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

locales/ur.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

locales/vi.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

locales/vi.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

locales/zh-CN.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

locales/zh-CN.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

locales/zh-TW.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

locales/zh-TW.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

resources.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

resources.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

resources/app-update.yml

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

resources/app-update.yml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

resources/app.asar

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

resources/app.asar

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

resources/elevate.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

resources/elevate.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

snapshot_blob.bin

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

snapshot_blob.bin

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  Elite.Level.Account.Manager.Setup.2.0.0.exe
- Size 73.0MB
- SHA256 f6fa2d9f0a2bf7efe15ec8beb4dea02a57ed9cc2c8becaa1f274e358c8c68ecf
- MD5 dd11b2ec4b19977efa419063c2b20dd0
- SHA1 ae296d274c50a5eb88f1da25defb97a53d451198
- SHA512 0b22f60dcc5ecb39c6cdabccf2ab050d00a562e3e524dda1854db581c143659edfc4aa1f4e9e5d7e57290bb1dc003c3875b4b0a3fa90b2a09362a12331aac98c
- SSDEEP 1572864:1Ge4hdV6xfHH1I0LynQ3Y9GF0J2/3M4fvHLTkEY68xsqBJY9:1Ge4Doxfn1ITI/0A/3/vHLosEK9
- TLSH
  T131F73363AD3E09FDD0D5B77ED56F04F5864B284F098E10A972BF91AB78F85060E2118B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/app-64.7z
- Size 72.4MB
- SHA256 c6e5c30448de52d6cf2937c8f4f6493bfb6a3a4a9e478dab2caafa314b894624
- MD5 a885614cbbfb28e95128b38e53b8d2a9
- SHA1 fdcd430b24fe5bbe46918195ec94e7f02399a80c
- SHA512 92f1e3343c191ed66002cac95dd711bf5e4f0eed01e661589b301def46a7dc3057960633c62ca517f616286f3e9441b40bf69fe0527635af942ac7f1421d3e3f
- SSDEEP 1572864:pe4hdV6xfHH1I0LynQ3Y9GF0J2/3M4fvHLTkEY68xsqBJYI:pe4Doxfn1ITI/0A/3/vHLosEKI
- TLSH
  T138F73363AD2E09FDD0D5B77ED56F04F58A4B184F098E10A971BF91ABB8F85060E211CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  locales/uk.pak
- Size 870KB
- SHA256 29d68d90512ee9952635c7e074d5ab210531d93ae24c11a8f91bca20b685e9a2
- MD5 83e5f0092b6d72403b60fe0e1e228331
- SHA1 989ed480b7ef55dfc9ccfbef1a5b9b0e104693d8
- SHA512 9895928ee516db7d4395b2788135a814031b9ba45e3a837e633bc253b08d6f380e4078d4d3fd51ae37502a39ff45a0166969fb62365e890f4960a51040b20941
- SSDEEP 12288:OnyGlcHZ1U6nnzKT0hsEiwIt35GB3IjZAmXEN7OucLNiXEqqb6Red:OyGlNMi5rEo
- TLSH
  T19615A9A19A9D58DF0106F05BE84C7A0D7DA741FE7FA6471625A43DBF38F20248A3C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  locales/ur.pak
- Size 761KB
- SHA256 2520ba8471c840aa075075524c4ad2bde10f43fa7a1b623aa14555180ecd30ef
- MD5 29403f3d5c8f6ae2a768de2fbe8b368e
- SHA1 da83015565980ea1a24f5493be6311f06427269e
- SHA512 a0709280adec39633ca19daf9f8bac6c17a999101246778a63cd9e172dbea2f281b20ce197290c4af6c7601ee7956da42f17e31461a1bd8b8a4bce3c36dc87b7
- SSDEEP 12288:Yf9virukH8PG7ODK5y6/eXE5hwbEFfW+BJnRQYrFwadcJKwUcumco/9NjjFpvM1:Yf9viJN51Wg
- TLSH
  T139F40FD2E7BC96B24A21D92780D33C34CB635F13D34AF286E56106C54E9A0139F6DE7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  locales/vi.pak
- Size 602KB
- SHA256 25aeee59775ae38b21a091107022312fc228f96dbea906042bf3626b7cf86b98
- MD5 e088be14dded779f50feabc4906d5ae7
- SHA1 0eeca2c7ea82a03b6373c84adf1a890f29e18b05
- SHA512 af9d1e415a6d06c28df9abaae1f337bf4dd3e323dfd5560df5fb35d01c6801b9145072ee85ab4c524c489fb6cdea956ce327b8c4f6820197d76fc2f33171ca3d
- SSDEEP 12288:tvN+cBwJGroEw/au9nPgsHvL04vCFsN91xe5c8hp6IDkivwziMHq3wtk5:tF+cBwJGiawPgsHT04QP5c8r6hivKiMY
- TLSH
  T114D4841117E0702580AC553EC6CE540E6FCAE42FF7C18FE56FE429757A221A46F21BAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  locales/zh-CN.pak
- Size 435KB
- SHA256 6a9a1f5b7674da36f20cb76af7e3e75e9e56873539e8a3b32895ebba439af83a
- MD5 d1145f2dcb13c5ba797df5a0792553c8
- SHA1 e8d9604300d6413fc896d252a0261be2dfdebfbd
- SHA512 f54adffc7d40866fd53dbb238687116d46354f79580877b5d4d93840494e604deaeaeb7e825f6a00d020f3c58d1fb9df8af667feb64c86f243ecab57765623e9
- SSDEEP 6144:UBs0tawPNPvzgIa+X7956i0dhpDt5p6LNuhe39w14lW:UTtjP5vz1ao56i0dHt5MLNuhe39m
- TLSH
  T193947FA911E8BDEC044640E03729627D7C40B60BF667AF766DD248DD2BA2F9D0717E0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  locales/zh-TW.pak
- Size 430KB
- SHA256 6a43c8fac5a0ce7c7a21b30ac7bc2167488e17c81c76c00f0b92b49e9e46e469
- MD5 1eb532e97b84db33a50055bbd7d36200
- SHA1 7aaf0560a16a9754059871a000d237964f3ab0c8
- SHA512 c946d82bd6ced6e61b35acaf7ace1a61f226c4891caaeeeec9ce4a3ab45e6f43c35dbb388d6d5fa925ed020d7d10f951fa2048269d0585ad3b723f5ad8f4eabc
- SSDEEP 6144:kXS7RfHbcTzD+J1ke82TuVnQh2Y5fHIzwHobAy+77zeJTs:kGR4TzVdnQh2Y5fHIzpZS7z
- TLSH
  T109947DA609FBDAEF0901F884B7CD562E7C8B746CDD373636FC4918D82E6AF540A5104A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  resources.pak
- Size 5.1MB
- SHA256 1d241f5d4403a6e802e898c61e4753f8508ae4dda8fcb7750558ec1ecade52c6
- MD5 0e69910860463d5045ec257234bd8dd4
- SHA1 33c923c33129d1dccf0bb2dcbe8af983a7000444
- SHA512 f6bb7c7b51bb202877739801498522095637caf8a03e2e1f2c6319fede3d3ca656f552061e171ec5e35e176c267fe278c326805d760add1371590bed58e12375
- SSDEEP 98304:Ct1j25juJgWPVcz+cd31rJ7JBXbwHgf3IvVrwrWBpcdmTHWCF3UlfPcauPFcHNp:Ctp8CJPdB831FJ5wHwOVkrWBQmTHWo0l
- TLSH
  T1EE363320F6385C36D0F0A2BE816812738B39D8139665781DB1DF932C5F7CA5E85B47AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  resources/app-update.yml
- Size 134B
- SHA256 e1dc69716afc2a4b960faffb2853870f29a0dad579c9f0e0438e43837e59d85b
- MD5 cb77de8e5550bce0dd3135b4c6f16eb0
- SHA1 6c4bf2fec35b3b76595dfc006ef7603af77c1d51
- SHA512 ca8cb64c676063ebc9b62246664189637b3dfd98539287b2a8cc3d240f89c07ddf1a1117aa9140617ead0767ea87775e43bd163508c2b8a32a776e8092d10919
- TLSH
  T1E1C09B79934CF2148D354C17F48976753069D0FDE04685BC55F5176C44135AD1E940C5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  resources/app.asar
- Size 1.6MB
- SHA256 332c06a0af881823d6d9ef055b0004e448b2700f764adedc8af9568d2f1d8be1
- MD5 687f7bd4a7762283345787ebc3a656ad
- SHA1 f04595e2644d339cf845271d9f6ce12567714566
- SHA512 7ad4844a96f89f7bc0ac115cde62ffeef4d4a5800ac34f4534f41a75406b6ac2a66dc4f872a418ac436add1c8525527bd54f42f31c869ee11359bd48892fad5a
- SSDEEP 24576:Qfbl5ZegD6nAocXOfxoNA710ltNTTW6C/fINI8QFTj:KbjZ1D6nAocXOfxoNa10eHINI8QFTj
- TLSH
  T1C085C80115F699333667A2E70ACB4052FE2094073D18AA54B9CC8354BFD2F39E9F7EA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  snapshot_blob.bin
- Size 270KB
- SHA256 b6bea91727efb8c88e7c059856553d3a47abd883e60dd60efc01b04dc6eec621
- MD5 d20922aefcad14dc658a3c6fd5ff6529
- SHA1 75ce20814bdbe71cfa6fab03556c1711e78ca706
- SHA512 dbd63a9f01feb3c389c11b55d720b5d689558626041fb1dd27ded2be602e5e2a8d210f785fde025d7b9959f81de3df7fef06981269b58be564df05aec190dd1c
- SSDEEP 3072:FPXttcgbBDoChde06wbRMYKHUeynXtxZ4fQe1:tXPh9oCWCNMXo6
- TLSH
  T12B445493B180DF27D12536B4B8CFA58A6126712A7F86420B3779B3BD3F712722F05166
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy