a8947aedc780e79b459e613e6dcdacdd9cb401e71575a96377c9ecd85b7c48fa | Triage™

Login
Reports

Overview

overview

8

Static

static

3

iontemp2.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
iontemp2.exe
Size 2.6MB
Sample260823-vxhkdshr3z
SHA256 a8947aedc780e79b459e613e6dcdacdd9cb401e71575a96377c9ecd85b7c48fa
MD5 45623c07b5abc95d62f08d33f0e185d7
SHA1 d17676f7c1d9fc1cd8f7bc98ea1f9b7a4ab38cc0
SHA512 595b041854677bdfda73fd34d13fd0a0f0f3b2672ad22e11cc3804a168cf826de8e3abfae3beb040475e06a00052c22c763b6a5e3e5c6a48f1802ddc3f8790ad
SSDEEP 49152:7HPEEI99PISaBpXKRR8cJihUnMPyNbHjR:rQaHKTaXyNb
TLSH
T13AC5BF47A31C82ECC566993886A2978BF3F5BC591714DFDF32E42EA45F431E05A7B280
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

iontemp2.exe

Resource

win11-20260513-en

windows11-21h2-x64

13 signatures

150 seconds

discovery execution persistence

Malware Config

Targets

- Target
  iontemp2.exe
- Size 2.6MB
- SHA256 a8947aedc780e79b459e613e6dcdacdd9cb401e71575a96377c9ecd85b7c48fa
- MD5 45623c07b5abc95d62f08d33f0e185d7
- SHA1 d17676f7c1d9fc1cd8f7bc98ea1f9b7a4ab38cc0
- SHA512 595b041854677bdfda73fd34d13fd0a0f0f3b2672ad22e11cc3804a168cf826de8e3abfae3beb040475e06a00052c22c763b6a5e3e5c6a48f1802ddc3f8790ad
- SSDEEP 49152:7HPEEI99PISaBpXKRR8cJihUnMPyNbHjR:rQaHKTaXyNb
- TLSH
  T13AC5BF47A31C82ECC566993886A2978BF3F5BC591714DFDF32E42EA45F431E05A7B280
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution persistence
- Sets service image path in registry
  This determines the executable launched when a service starts. It can be used to establish persistence.
  persistence
- Drops desktop.ini file(s)
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistence

© 2018-2026

Terms | Privacy