b6cea51856b8a65cc27d4ead0474df1975dff69f438d6647cdf99e24a6670b1a | Triage™

Login
Reports

Overview

overview

6

Static

static

5

update.zip

windows11-21h2-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
update.zip
Size 812KB
Sample260817-wpw89afk8z
SHA256 b6cea51856b8a65cc27d4ead0474df1975dff69f438d6647cdf99e24a6670b1a
MD5 ce176366d3ada881ffcb0984a2a2ba23
SHA1 eb7255d7249a9470beffe3c91201d44a66ea3472
SHA512 0324621304bc907674395190eee44f1702b27b8edeff3e44c354cdf828959472b6dbbdb55fd3714bff837d533e8ff6e3a332bfc92972ebd1fbe90d42d02b2e0b
SSDEEP 12288:s/LpXHVH7DkvRmOZMLDQ84NqFKNyyvSk+qJewNP3fC7xXW9OjZNgfYmmmmmmmmmS:s/5H57gvRm4M3gkoOYFP+hWeefZhK
TLSH
T14E05129B2F2E1B5F24A6946E58014A63FF6917E5C8638DE24DF70FCE140742919E0FAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution persistence ransomware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

update.zip

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

150 seconds

execution persistence ransomware

Malware Config

Targets

- Target
  update.zip
- Size 812KB
- SHA256 b6cea51856b8a65cc27d4ead0474df1975dff69f438d6647cdf99e24a6670b1a
- MD5 ce176366d3ada881ffcb0984a2a2ba23
- SHA1 eb7255d7249a9470beffe3c91201d44a66ea3472
- SHA512 0324621304bc907674395190eee44f1702b27b8edeff3e44c354cdf828959472b6dbbdb55fd3714bff837d533e8ff6e3a332bfc92972ebd1fbe90d42d02b2e0b
- SSDEEP 12288:s/LpXHVH7DkvRmOZMLDQ84NqFKNyyvSk+qJewNP3fC7xXW9OjZNgfYmmmmmmmmmS:s/5H57gvRm4M3gkoOYFP+hWeefZhK
- TLSH
  T14E05129B2F2E1B5F24A6946E58014A63FF6917E5C8638DE24DF70FCE140742919E0FAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution persistence ransomware
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

executionpersistenceransomware

© 2018-2026

Terms | Privacy