8087f32f8a58a8fda4670efee7291650392582fb10702b5d83d36e1333163145 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

agent-wind...56.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
agent-windows-amd64-cdebac56.exe
Size 49.1MB
Sample260813-ve7rkavble
SHA256 8087f32f8a58a8fda4670efee7291650392582fb10702b5d83d36e1333163145
MD5 53d33ffa8db2d3959a0b86e3624342d4
SHA1 39a3c5779da942cb2675f5b7be3f658f32e3aa64
SHA512 dd842f9fbd502ef917497060fdba2b331ec602d23f234d2173fa74064930bbddc4c50dd19a3549092f544188d1118ab60b4f27eac197cd03e1c7429f65cebc79
SSDEEP 393216:5NRQ4I0JPIFdICmyZ9t3RUVTtBBeKapSWpDncDwsNoMc:52KEICmyZ9t3RUTt4wWwxc
TLSH
T1E7B72A63E8D21696C4EAC174D3728177BBA17C0D077863E706A0F3602F36BE09AB6755
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

agent-windows-amd64-cdebac56.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

900 seconds

defense_evasion persistence privilege_escalation

Malware Config

Targets

- Target
  agent-windows-amd64-cdebac56.exe
- Size 49.1MB
- SHA256 8087f32f8a58a8fda4670efee7291650392582fb10702b5d83d36e1333163145
- MD5 53d33ffa8db2d3959a0b86e3624342d4
- SHA1 39a3c5779da942cb2675f5b7be3f658f32e3aa64
- SHA512 dd842f9fbd502ef917497060fdba2b331ec602d23f234d2173fa74064930bbddc4c50dd19a3549092f544188d1118ab60b4f27eac197cd03e1c7429f65cebc79
- SSDEEP 393216:5NRQ4I0JPIFdICmyZ9t3RUVTtBBeKapSWpDncDwsNoMc:52KEICmyZ9t3RUTt4wWwxc
- TLSH
  T1E7B72A63E8D21696C4EAC174D3728177BBA17C0D077863E706A0F3602F36BE09AB6755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy