Analysis
- max time kernel
152s - max time network
155s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/08/2026, 23:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DisksTriggerbot.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
DisksTriggerbot.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target DisksTriggerbot.exe
- Size 155.0MB
- Sample260812-2z7evsfc53
- SHA256 6e93cc46902f4551ed3094049115bd896bbfa5f640914db8f5fd0301b95c3838
- MD5 bc1f7b97747c3e82725627946a7465bf
- SHA1 305513e670007c7f30b8a7d42b023150a72d4fa6
- SHA512 7a114920a9d587e74af037c0b640601bee02da4acb3142d08bd1c8175a0437338e2f4c7e58503dbf4b703caf4b20459e8bf3bed910606b2d1291cd93e76371bd
- SSDEEP 786432:R2AeA8Oa89TsG5YWV5OtsFGtatWbhsCrTG5mfOm5cuA0zm767EPM:MtA838JsHWEd2CvG8fOkZboPM
- TLSH T12F788D1163E81A45E67B8678D77382A1E6B1BC535711C1CF0094FA4A2F73BC2BA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 4124 DisksTriggerbot.exe 4124 DisksTriggerbot.exe 4124 DisksTriggerbot.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4124 DisksTriggerbot.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\DisksTriggerbot\LJq7IV6F48CrAElamj8w8Dc2J2tOC_s=\D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DisksTriggerbot\LJq7IV6F48CrAElamj8w8Dc2J2tOC_s=\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 67629b6aaee39328d02b11e5d85a53b35aa6cea71d4d37a671295a76c02b240e
- MD5 38f9831155956106c61b9885d6113444
- SHA1 8cbc1aaf60edfd4155bb4f10fdb5257d7c4b84f8
- SHA512 e1e3859d83ee49bfdd0ea5b929772426d529e417c7d6d6bbdf251cc3d5ae5a2eaf055d0be62598231a444a5e54a1b0cea5eb60d4140d5e9739210c3b0d667b18
- SSDEEP 24576:/hNpKcF6kPHmTw+MLYpX7T3hjnHFOcJqCPoG5MupGJvaCbztQcfRYQXLFGvHLPa5:/xKcdPHmMLYpX7T35/fPoGPpGFjztQcR
- TLSH T1FC453A22E2E642E5C47FC1B8C646972BFBB07449131C66CB87608B552F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\DisksTriggerbot\LJq7IV6F48CrAElamj8w8Dc2J2tOC_s=\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 1c1c5d5ae7530615585b77a8b15588ed51ea66da9a75fceeea7f772970edc01f
- MD5 f344857a45f59103361fd5a5edbdb670
- SHA1 34ce32a1182377e612673add6d2644b9bd723d94
- SHA512 553baf174e8d0b5e8ef4d837a4c16a974b1b52693c3920baa4edc6177a4fc1a05a27923f78d8c3d84f4b7dcfe86b8f50a4ab942045f8afa6087b122b07e64898
- SSDEEP 24576:Dek+C9iX4izlWkFLgcUxwdHaKzhWjl9sIovgbAvJh5A2RwK2Ebie2K9dUghF0+J:4PoKlWkF3CwpaPl1oYbA35A252EbNDxJ
- TLSH T15495494AB6EC40E9C47AD23CDADB461BF63174152761A7CF23A0479D6F27BD00A7A360
- MD5 SHA1 SHA512 SSDEEP TLSH