e5ba2ccf7eb829e4e6086fd57ba8935253a65f0ad8c84e6b119c7c6086d7ded6 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

e5ba2ccf7e...d6.exe

windows10-2004-x64

8

e5ba2ccf7e...d6.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
e5ba2ccf7eb829e4e6086fd57ba8935253a65f0ad8c84e6b119c7c6086d7ded6
Size 7.8MB
Sample260813-2za2nadh83
SHA256 e5ba2ccf7eb829e4e6086fd57ba8935253a65f0ad8c84e6b119c7c6086d7ded6
MD5 6fd0ddb642b372d17da7c53f0339a6c6
SHA1 d07facf5451ec45f09310444150533c76b037069
SHA512 8ec9aca2bc5e0811f85955431ccabab2cd694d7e468325783ca3ea162a0a001aa6ed659f6484b96370305a97f663d43035177923eea0bbd298cd5ab23ef20079
SSDEEP 98304:7eRLZpNct/Ujn6LdxYkPXo+GOKkT3JkLoEL78woli84Bqxa+1Zh3DLLAlxZUIB07:sZpNctMj6LdxYf63JXKod4qZnLkUww
TLSH
T1B9867C20E601E02BF8E200B1D66D57FE5558AF30035914DBB3CC7E9E6BB56D1BA32A17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e5ba2ccf7eb829e4e6086fd57ba8935253a65f0ad8c84e6b119c7c6086d7ded6.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Behavioral task

behavioral2

Sample

e5ba2ccf7eb829e4e6086fd57ba8935253a65f0ad8c84e6b119c7c6086d7ded6.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Targets

- Target
  e5ba2ccf7eb829e4e6086fd57ba8935253a65f0ad8c84e6b119c7c6086d7ded6
- Size 7.8MB
- SHA256 e5ba2ccf7eb829e4e6086fd57ba8935253a65f0ad8c84e6b119c7c6086d7ded6
- MD5 6fd0ddb642b372d17da7c53f0339a6c6
- SHA1 d07facf5451ec45f09310444150533c76b037069
- SHA512 8ec9aca2bc5e0811f85955431ccabab2cd694d7e468325783ca3ea162a0a001aa6ed659f6484b96370305a97f663d43035177923eea0bbd298cd5ab23ef20079
- SSDEEP 98304:7eRLZpNct/Ujn6LdxYkPXo+GOKkT3JkLoEL78woli84Bqxa+1Zh3DLLAlxZUIB07:sZpNctMj6LdxYf63JXKod4qZnLkUww
- TLSH
  T1B9867C20E601E02BF8E200B1D66D57FE5558AF30035914DBB3CC7E9E6BB56D1BA32A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy