46bb5ecc9b630b82a24c4ac33fb2d31b195c8986ea6ed331feba0e588c103b08 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

ramsayscripts.exe

windows10-2004-x64

7

ramsayscripts.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
ramsayscripts.exe
Size 2.4MB
Sample260822-3j38yavyb1
SHA256 46bb5ecc9b630b82a24c4ac33fb2d31b195c8986ea6ed331feba0e588c103b08
MD5 0d40f6a49492cb52f243262fec6f2a41
SHA1 eb10e12da34a02612390d43351b268d80c871ebe
SHA512 d76846f3eabe2634e31cb8b9cbe176454374ff40bca7bcc0fb6954ee0e4b2b63f02d5f1a85c31e449e441fd24b6cab82d326a77a8123f9ffa101f8ec5959b966
SSDEEP 49152:2xOs0KiiGK3juTGz9bFhdy5fXzNdjCzxDGL8YeCi:qj4izYGz9bFhQPdjWSFi
TLSH
T102C5F1E6A3B0407CD0E347F8DF725965773EB4766720868B236C4EA42F53ED0D92AA50
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery persistence privilege_escalation trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ramsayscripts.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation trojan

Behavioral task

behavioral2

Sample

ramsayscripts.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  ramsayscripts.exe
- Size 2.4MB
- SHA256 46bb5ecc9b630b82a24c4ac33fb2d31b195c8986ea6ed331feba0e588c103b08
- MD5 0d40f6a49492cb52f243262fec6f2a41
- SHA1 eb10e12da34a02612390d43351b268d80c871ebe
- SHA512 d76846f3eabe2634e31cb8b9cbe176454374ff40bca7bcc0fb6954ee0e4b2b63f02d5f1a85c31e449e441fd24b6cab82d326a77a8123f9ffa101f8ec5959b966
- SSDEEP 49152:2xOs0KiiGK3juTGz9bFhdy5fXzNdjCzxDGL8YeCi:qj4izYGz9bFhQPdjWSFi
- TLSH
  T102C5F1E6A3B0407CD0E347F8DF725965773EB4766720868B236C4EA42F53ED0D92AA50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence privilege_escalation trojan
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Accessibility Features

Privilege Escalation

Event Triggered Execution

Accessibility Features

Defense Evasion

File and Directory Permissions Modification

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalationtrojan

behavioral2

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy