2745968ba69072cd4926d0e750a2792b6567df8864856f85bc9745620a6a76cc | Triage™

Login
Reports

Overview

overview

5

Static

static

3

modengine (2).zip

windows10-2004-x64

1

modengine (2).zip

windows11-ltsc_2024-x64

1

ModEngine/...ne.exe

windows10-2004-x64

5

ModEngine/...ne.exe

windows11-ltsc_2024-x64

5

ModEngine/...gs.lua

windows10-2004-x64

3

ModEngine/...gs.lua

windows11-ltsc_2024-x64

3

ModEngine/...s.json

windows10-2004-x64

3

ModEngine/...s.json

windows11-ltsc_2024-x64

3

ModEngine/...ce.dll

windows10-2004-x64

1

ModEngine/...ce.dll

windows11-ltsc_2024-x64

1

ModEngine/...32.dll

windows10-2004-x64

5

ModEngine/...32.dll

windows11-ltsc_2024-x64

5

ModEngine/...64.dll

windows10-2004-x64

5

ModEngine/...64.dll

windows11-ltsc_2024-x64

5

ModEngine/...pt.bat

windows10-2004-x64

3

ModEngine/...pt.bat

windows11-ltsc_2024-x64

3

ModEngine/...32.dll

windows10-2004-x64

3

ModEngine/...32.dll

windows11-ltsc_2024-x64

3

ModEngine/...64.dll

windows10-2004-x64

1

ModEngine/...64.dll

windows11-ltsc_2024-x64

1

ModEngine/...gs.lua

windows10-2004-x64

3

ModEngine/...gs.lua

windows11-ltsc_2024-x64

3

ModEngine/...86.dll

windows10-2004-x64

3

ModEngine/...86.dll

windows11-ltsc_2024-x64

3

ModEngine/...64.dll

windows10-2004-x64

1

ModEngine/...64.dll

windows11-ltsc_2024-x64

1

ModEngine/sqlite.dll

windows10-2004-x64

1

ModEngine/sqlite.dll

windows11-ltsc_2024-x64

1

ModEngine/...ne.exe

windows10-2004-x64

5

ModEngine/...ne.exe

windows11-ltsc_2024-x64

5

ModEngine/...86.dll

windows10-2004-x64

3

ModEngine/...86.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
modengine (2).zip
Size 17.7MB
Sample260820-yaag2sfe28
SHA256 2745968ba69072cd4926d0e750a2792b6567df8864856f85bc9745620a6a76cc
MD5 e042423d1c17f0f6a3a54cd2a57dd8f7
SHA1 dc128808cc05e8502170170aa466b6a5878b4f39
SHA512 289574c5ee73ac1874a2d8bdea885caede5fa63c567138d66862d9f6fe0c679e26df2f3dec76071a904c5564b7327bda8351632d3b598f37c3b209fc601fd3a6
SSDEEP 393216:ymrvrkTEfYn+nDyFaQBZlMfSdsoodWUfbk9mLuG6LUSQg8ez:drCjDFNlrOpdWUkmLurLEbez
TLSH
T11B173317B65784C3D2387A7C5E70880DED19DAEE48F697C64480BCBBAC89B43598E077
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

modengine (2).zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

modengine (2).zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

ModEngine/ModEngine.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral4

Sample

ModEngine/ModEngine.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

ModEngine/lua/additional_settings.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

ModEngine/lua/additional_settings.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

ModEngine/lua/dlls/DotNetInterface.deps.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

ModEngine/lua/dlls/DotNetInterface.deps.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

ModEngine/lua/dlls/DotNetInterface.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

ModEngine/lua/dlls/DotNetInterface.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

ModEngine/lua/dlls/MonoDataCollector32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

ModEngine/lua/dlls/MonoDataCollector32.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

ModEngine/lua/dlls/MonoDataCollector64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

ModEngine/lua/dlls/MonoDataCollector64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

ModEngine/lua/monoscript.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

ModEngine/lua/monoscript.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

ModEngine/lua53-32.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

ModEngine/lua53-32.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

ModEngine/lua53-64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

ModEngine/lua53-64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

ModEngine/settings.lua

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

ModEngine/settings.lua

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

ModEngine/speedhack-i386.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

ModEngine/speedhack-i386.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

ModEngine/speedhack-x86_64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

ModEngine/speedhack-x86_64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

ModEngine/sqlite.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

ModEngine/sqlite.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

ModEngine/startModEngine.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral30

Sample

ModEngine/startModEngine.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral31

Sample

ModEngine/vehdebug-i386.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

ModEngine/vehdebug-i386.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  modengine (2).zip
- Size 17.7MB
- SHA256 2745968ba69072cd4926d0e750a2792b6567df8864856f85bc9745620a6a76cc
- MD5 e042423d1c17f0f6a3a54cd2a57dd8f7
- SHA1 dc128808cc05e8502170170aa466b6a5878b4f39
- SHA512 289574c5ee73ac1874a2d8bdea885caede5fa63c567138d66862d9f6fe0c679e26df2f3dec76071a904c5564b7327bda8351632d3b598f37c3b209fc601fd3a6
- SSDEEP 393216:ymrvrkTEfYn+nDyFaQBZlMfSdsoodWUfbk9mLuG6LUSQg8ez:drCjDFNlrOpdWUkmLurLEbez
- TLSH
  T11B173317B65784C3D2387A7C5E70880DED19DAEE48F697C64480BCBBAC89B43598E077
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  ModEngine/ModEngine.exe
- Size 16.3MB
- SHA256 ef06322f836bc425100e8a7e0d99c55fb4ce21d14912cea1de0625750e24ce96
- MD5 1637744561923c9b04cd19a858119344
- SHA1 af79bcbcab03797ecf3b533f1737e586f7018f7b
- SHA512 8cc40eb6f4cefb3c782d29da091023095cc366d6cde76e554a21fd8895c4c63d2b542b8e2e7b1e11c8a844c369cac980d20e717160a9b5e9479a1898662bf80f
- SSDEEP 393216:NALETwfCcrv2bd2DOzOo0rOaBFob2QY6jiYG6+w:JyCd56drOa62K2Yh
- TLSH
  T12007339234DD51ECD3A38F32E506334EDA553AB21DB6854923C43E071563DE6BA0BEE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral3 behavioral4
- Target
  ModEngine/lua/additional_settings.lua
- Size 426B
- SHA256 a0343d322f042622040d129c7b5d9f9b4cd10e0ee3b249f280b9da7c1f7c0222
- MD5 1f73e4d6e1a5c6eb97b31813ec21d0db
- SHA1 2b7be02d9a14c3141dcc1a147928cc617e198ebc
- SHA512 570f8228f08cda9514d548ef2b6602be677cf03886c2c33cb46e2bde1c74ead077dd6282742bf8bbfaa2b9ef51dec931270e268b4d2520ba273c1a1778da8871
- TLSH
  T166E02B90368391A51BF0D379CC8B7403F245A78301AE0028799E06917FB07DCA2F4E51
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  ModEngine/lua/dlls/DotNetInterface.deps.json
- Size 1KB
- SHA256 e80618cc2eea23d14764ce357d8e48c60cfaf9aac548cd9a8907d21c7faeef44
- MD5 1af5b8ecc43a1b62f78047514bb6f481
- SHA1 b6286ea3117f3ab1f4f64e0e459d6a035fe0a270
- SHA512 b448a2f8de00aeb951df656e4db297bb3250d61888e19acb6b63f4f88956f888877cd87b8507eea3796c876fcc6783fb1e53bbd22eb652b9ed62acd89f51b5ce
- TLSH
  T13C31AD18E5A45E7782B166A2507A0542F637AB7B45031D1F35FC178C8F73E5B6048F36
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ModEngine/lua/dlls/DotNetInterface.dll
- Size 38KB
- SHA256 3dc9ea4350e99e6216da0840c53ed8ccca39ba7df7a4146b47affcab128a4432
- MD5 ed7867296697880928f297914d80f211
- SHA1 1cc9b65d8f94a04ea59b7511df522fcb68c275e9
- SHA512 044fdeccb4a46edf37bbef8e6cbb36ac586a2aa505b34f71977a2e404fff088a60ff8277d0251b23c7f5d090a337b4cb5af1fea1a638b408eec6f334bc416ad8
- SSDEEP 768:3N8So6jKJjZr25rm7V1VaXLkjYr25rm3V1VaXLkjn:3N8FaeF2m7P012m3P0A
- TLSH
  T192035B8F2B2C6603DF8E8EBDD0DA94132D74B3C39CDEE05B9456916969053D13B8863D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  ModEngine/lua/dlls/MonoDataCollector32.dll
- Size 407KB
- SHA256 eb26b38a604cf98b95a39fd249c0771e351061a9894d22284cdfe984e8fc7a6c
- MD5 c5b870ce07da5206d8a81e139920b7dc
- SHA1 f868450ed5f886f084c00345c75143c65fd9338e
- SHA512 7dfb3e9940ec0d14b42c77483f71274701c46483e65ee57a0853a31f688cc5c3d0c0af2050229ba196d9beff9813f259e3f92eec9d8352cc0e416feb4eb1a6be
- SSDEEP 12288:CLM9vziuDEVmqU2Im5/P1OhGKexP+gVuQ:lLiuDEV15/tVP+ouQ
- TLSH
  T13994AE1135C2C133E9BF0574387AE65616BEA9301FB988FBD7D85A2E0E742C19735A23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral11 behavioral12
- Target
  ModEngine/lua/dlls/MonoDataCollector64.dll
- Size 535KB
- SHA256 15ee5851ff1b33e369b43c66d44e3d1452a212c2a37f337b680fe8bd88df8748
- MD5 4237719534b21bb179480ed8bb23c0cc
- SHA1 a1c8db76137b6131b7b8fe379841cb3df62f3b7d
- SHA512 4ace9a2ca9beaf64a3b097922300e6bf46729375cb4dfa4bc3d81b0420ff28cd45c2cfdb9c05e4885ddd39cb6bf160d932be4711c219302d684d23afeadb4f72
- SSDEEP 12288:7dShHq6xdR8zWUjwmoRb2qORTCKTJ7PYn:Z6xdqzWUjwmr8n
- TLSH
  T1EDC47C1ABB9843B5E067D138C8939542E6F1B40A1B70DBDB53E0427E1F773A15E3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral13 behavioral14
- Target
  ModEngine/lua/monoscript.lua
- Size 131KB
- SHA256 96c10aaa7603c29c31614faff16c9030aacdc11adecf4be7b85d3d7b6e65d23e
- MD5 ce632d2f40ba5f9fabae5e780d2e0cb0
- SHA1 e499c18592bdc0842ae2ab57989a5de7e48b0a82
- SHA512 db41ba373cc04e2aefb2d64be8cbbbc408956a1a5c2a13c6e7f4d574da2a7eb3454be9552fee974037a07fe0f014ee554edeed071f65d71d0168548dded512ac
- SSDEEP 768:St5zmxQLPqWuiXL9eqiK8uthP/xoiEFLWiP8bTg1b3lDWIkGkxv0C2r0EcD+JZSb:dXfQ21CGi7hXz4XYHo6BG7236nDs
- TLSH
  T1FFD3A516241262B55AFBC3756CCF1807F3210053612A2A19BAECE8E63FB536CD1F676D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  ModEngine/lua53-32.dll
- Size 453KB
- SHA256 58b206ab9a3d84fdafb537b419f721ecdeade489707dbab227b043d5343db369
- MD5 ad3f33bac8eadab224adaf4cf6d5b97a
- SHA1 6ccfb97236c5ad3b48a3eb7a113e3e297422e808
- SHA512 c319a1c3d0d90afefd27dc0379c79e38993490ffa14cb281f419bc94fde5776cd7eab54351c57f6eaeebcacf7f965fa0b8a8dd67489e799fcd84d39393c62a3e
- SSDEEP 12288:dBj8paX8fQ/T/md4OASZAOLRwRai6wXGn+hfy:dxLrLmd4OA4L8DXGnmy
- TLSH
  T1CBA4BF12AE52C031D5B9047695B8A5628D3C7A300B3CEDE7A3E948394E742E1FD3BB57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  ModEngine/lua53-64.dll
- Size 528KB
- SHA256 6d0a06b90213f082cb98950890518c0f08b9fc16dbfab34d400267cb6cdadeff
- MD5 b7c9f1e7e640f1a034be84af86970d45
- SHA1 f795dc3d781b9578a96c92658b9f95806fc9bdde
- SHA512 da63992b68f1112c0d6b33e6004f38e85b3c3e251e0d5457cd63804a49c5aa05aa23249e0614dacad4fec28ca6efdb5ddee06da5bfbfa07e21942976201079f3
- SSDEEP 6144:FshVOadaiL9mUHQMpgL8LgpqClZNKX6SumisBEb/NUidzSky3uDMK/LXTMBQqN5T:hOL9J2L8E5VKKSuLGEhXGstCXoYkc7BV
- TLSH
  T1D0B47CA9A6781AB9FD3BD13AC8834917F7B234110B62DADF02E166750F137E2167B314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  ModEngine/settings.lua
- Size 10KB
- SHA256 8c250bf04985206746ea6666df3620ef8323bfefe381fbbd80a1a17bc7e059d6
- MD5 253f2eadf4776273b05da320f18ed76f
- SHA1 f62882c58355aaf8d89cdeaef3885bbe0c9d8c03
- SHA512 f428572f62ec11094c5da08b63d4441cd14d82a75af7dead1612d938e5ce1e3675dc2ad965481a2628d070376babeb27fad4499ce5cbfbcd02bfa328ee37da6c
- SSDEEP 192:3HArrHdkVkyEd8fdtINfbLmFSCEpt9qh0VBv5pek1rNUKK9ETxs8X:3HArcEd8FtIF5dqOpDahm
- TLSH
  T1DD32535D09920137483E9E531DD6822989C03E2D85C0DAF2B2DE4FECAFE57688675B3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  ModEngine/speedhack-i386.dll
- Size 189KB
- SHA256 2f77a5e845ee6838bfdc73005e748084a79e18ae0e2de4702224041cde78e0ba
- MD5 4acc9d3311fff9d1ac7697010b43f90b
- SHA1 6874d871367bb522c6c6c08b5234b87f1c3e1c69
- SHA512 b842da8bd37a7df85e9776eed956406cbf3b595e23748121170f57e906123ae3b70a561dc28669b19622ff33007830bd8b248b26526ff95a50ff1f897c92bc12
- SSDEEP 3072:ZNyaW1Pg7kFtOp8+vRha0DAyheYn13qaIhRFXOucMEx32zPzIy2G:ZNyal78m8+vRMEe4a4OEOb8G
- TLSH
  T194145C57E6128237CA6B7FB8474A49D12AB4E6103CB1D4DF3DD94E8E5B70B606F28207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  ModEngine/speedhack-x86_64.dll
- Size 245KB
- SHA256 3bd69d00774b40132bd621c09c11093f188f06d634db64a19a78c46a27388c8f
- MD5 156249ce92b9a15d71c39160dc05b4a1
- SHA1 2c2a926456f2c1929fecbe33f9aaf7842d1961a1
- SHA512 5229ca79ca70ecc4e0581bdf1e859a711ca47d4dc226de437dea58fd49a854e80b9368c4d216eb60b0d10b8fa75bb74ce37f8659c0aa59b436fb44570ebcb5d7
- SSDEEP 3072:5ViiO5Ea9m3XJusq4opSm7Im9SC2w/iKhF58jfq65bgusSVIRZOl0vDoD4CfOMst:5VZcWJusRPm7kCdKfkkASX/S
- TLSH
  T120340BAF7512CE7CC0CFCB35488687E19630FE9049F1A74611D0272BDE7AAA46E6C94D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  ModEngine/sqlite.dll
- Size 1.3MB
- SHA256 60c16c2fab14b344b8343778dcd6bbfdee3dfe5f83d1ac8d2e50c6877419eee4
- MD5 c11138204609ea63a3e88b4c8c09b035
- SHA1 b0829124f7e275b0f341c6af0fdd3dd5f65667a4
- SHA512 28d9e92498433c1f6ec41893fc17db76d6cb7a1c565461eb6e67eebc2b924dd4aa65486c29874caa9ac5c78f804a8799c7ce1c641dd9f080bf1bf94b58ca208c
- SSDEEP 12288:aHnKY5WcmiyfogSknJbjhrbXBbrxaLsBDJbVQAjXwcasznMbDz43X6dmM:aqY5Wcmi4FJbXdsLsBNRQAjgH
- TLSH
  T1A2557D47B3B941B8D4AB927DCA534B4BE7B175451320ABDF469887A52F03FE21A7E300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  ModEngine/startModEngine.exe
- Size 1.3MB
- SHA256 65e30ef1e660ab1e0dadf73c94f6772d092292685dca10d69d848f816518d203
- MD5 a36a3d178bf4af6a7805e0e7b1b8aff6
- SHA1 3e5d48269026ade587ea5e3111cc701542fd5029
- SHA512 4830c8477c4ed4dd8fd15456178a3a411d951fd3152d89cf5c0116937283576e2bec41af8937c6366429d7feb16cbf1e808d7771d889df81cd4548299a4e4572
- SSDEEP 12288:7ia/nlf4cMRqOTEPN2ySosXWApDp0hUyp4qw:V/nlfBM1aN2a+pDp0Fhw
- TLSH
  T1AA554064A6788E32C2F95774906F0BA05768401E4FD7735B12E4C4F8FC8D36B1AB668B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral29 behavioral30
- Target
  ModEngine/vehdebug-i386.dll
- Size 293KB
- SHA256 9a7e39788bcaac1ea29898f4fdfdcb252785f70d551cf602ad87b77b9a64d6f0
- MD5 e427a09c9df940d8e642679a0742079c
- SHA1 d39d1d47edb20b666a2ffe59a1075639f3a47bde
- SHA512 76870d7482133bce6bf02dcccce46f438c0deb43daffcf440b2d6b7e8e507376c0e6aee262006ad0ec1964630b1c6f62ebfd6850815a24818a94ebdfed8e1382
- SSDEEP 6144:VMek30eIejllI8n1b7nBzwlt/VCWs4zzcwgsaH8E4U:1k30eIkllhxjSlHFzQwgsaHWU
- TLSH
  T1CA546D51E9028337C0EB3AB8564966D406E5DF2038E1C4DB7FCA1F8F6EB19A17E24716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy