General
- Target havoc-agent-triage-win-x64.exe
- Size 7.4MB
- Sample260813-tr41rsck7v
- SHA256 aee86125076e27cfdeacb91248fff43c0efc8a6e32a12186e9958a32f6a7ae6d
- MD5 de06e0d3383d769439dfedd6c2fea9a8
- SHA1 5c8391d611978c19190167c436e228a3661eac8f
- SHA512 4ab734ba760271e33100c17eebd2ae4787819216bd168b07a59cedfc2f187ed046dd2227e857b939958f63c015615cc354815522f54aaef095ef6ddab497930a
- SSDEEP 49152:BL62CQStF+FSOLs7S07G9L42qs4AaWxSeIfUqB4s2IRY7t9Z7J5EvD/UlV/zHEE5:BLIrnZ77rg/Z7E3HoUMXSg
- TLSH T1A9763A87FC6558E5C0AED3728A629152BB717C480B2123D72B90FF282F76BD0ADB5354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
havoc-agent-triage-win-x64.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
havoc-agent-triage-win-x64.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target havoc-agent-triage-win-x64.exe
- Size 7.4MB
- SHA256 aee86125076e27cfdeacb91248fff43c0efc8a6e32a12186e9958a32f6a7ae6d
- MD5 de06e0d3383d769439dfedd6c2fea9a8
- SHA1 5c8391d611978c19190167c436e228a3661eac8f
- SHA512 4ab734ba760271e33100c17eebd2ae4787819216bd168b07a59cedfc2f187ed046dd2227e857b939958f63c015615cc354815522f54aaef095ef6ddab497930a
- SSDEEP 49152:BL62CQStF+FSOLs7S07G9L42qs4AaWxSeIfUqB4s2IRY7t9Z7J5EvD/UlV/zHEE5:BLIrnZ77rg/Z7E3HoUMXSg
- TLSH T1A9763A87FC6558E5C0AED3728A629152BB717C480B2123D72B90FF282F76BD0ADB5354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Windows security bypass
-
Executes dropped EXE
-
Windows security modification
-
Drops desktop.ini file(s)