d56658c16fc6f9dc2fea0db1d75663e796f5a6a00b5b7f0d4585bf5c91e25e44 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Cosmic Cli...er.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
Cosmic Client Installer.exe
Size 14.7MB
Sample260811-tecezss1dy
SHA256 d56658c16fc6f9dc2fea0db1d75663e796f5a6a00b5b7f0d4585bf5c91e25e44
MD5 5a906260ff434009ab6a270ddb88c51f
SHA1 46d25e7166366624d0b4981d2c952fcb309f38cb
SHA512 5d5c4950fba4a32b1121e3609da91e5618d6d366163f92fd49ea5dc0cc257432b741617039d0a60909742bc512392e24cd30bac2a19e16138378963a32bceac6
SSDEEP 393216:oc2KzQ96zKDUf6I908SBoQ0i2TgnvzX4KDHJkc3Iw2b:/xQ8s6/90CQ0i1vzoKDzBw
TLSH
T169F61221B79BC53BC96219B06A2DDBAF1129BF650F7050D797C42F6E18B08C34632E67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Cosmic Client Installer.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

defense_evasion discovery spyware trojan

Malware Config

Targets

- Target
  Cosmic Client Installer.exe
- Size 14.7MB
- SHA256 d56658c16fc6f9dc2fea0db1d75663e796f5a6a00b5b7f0d4585bf5c91e25e44
- MD5 5a906260ff434009ab6a270ddb88c51f
- SHA1 46d25e7166366624d0b4981d2c952fcb309f38cb
- SHA512 5d5c4950fba4a32b1121e3609da91e5618d6d366163f92fd49ea5dc0cc257432b741617039d0a60909742bc512392e24cd30bac2a19e16138378963a32bceac6
- SSDEEP 393216:oc2KzQ96zKDUf6I908SBoQ0i2TgnvzX4KDHJkc3Iw2b:/xQ8s6/90CQ0i1vzoKDzBw
- TLSH
  T169F61221B79BC53BC96219B06A2DDBAF1129BF650F7050D797C42F6E18B08C34632E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery spyware trojan
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryspywaretrojan

© 2018-2026

Terms | Privacy