dfc4ac4c72fc3443821894b3de9064d1dd80ad4a24b39d15c9afb1f68049c9a1 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

IriunWebcam-2.9.8.exe

windows10-2004-x64

5

IriunWebcam-2.9.8.exe

windows11-ltsc_2024-x64

5

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$TEMP/devcon.exe

windows10-2004-x64

1

$TEMP/devgen.exe

windows10-2004-x64

$TEMP/devgen.exe

windows11-ltsc_2024-x64

$TEMP/iriunv.dll

windows10-2004-x64

1

$TEMP/iriunv.dll

windows11-ltsc_2024-x64

1

$TEMP/iriu...er.dll

windows10-2004-x64

1

$TEMP/iriu...er.dll

windows11-ltsc_2024-x64

1

$TEMP/iriu...er.dll

windows10-2004-x64

1

$TEMP/iriu...er.dll

windows11-ltsc_2024-x64

1

$TEMP/iriu...er.dll

windows10-2004-x64

1

$TEMP/iriu...er.dll

windows11-ltsc_2024-x64

1

$TEMP/iriu...er.dll

windows10-2004-x64

1

$TEMP/iriu...er.dll

windows11-ltsc_2024-x64

1

AdbWinApi.dll

windows10-2004-x64

3

AdbWinApi.dll

windows11-ltsc_2024-x64

3

AdbWinUsbApi.dll

windows10-2004-x64

3

AdbWinUsbApi.dll

windows11-ltsc_2024-x64

3

IriunWebcam.exe

windows10-2004-x64

8

IriunWebcam.exe

windows11-ltsc_2024-x64

8

adb.exe

windows10-2004-x64

3

adb.exe

windows11-ltsc_2024-x64

3

avcodec-62.dll

windows10-2004-x64

3

avcodec-62.dll

windows11-ltsc_2024-x64

3

avutil-60.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
IriunWebcam-2.9.8.exe
Size 2.6MB
Sample260825-ah2dqs1tav
SHA256 dfc4ac4c72fc3443821894b3de9064d1dd80ad4a24b39d15c9afb1f68049c9a1
MD5 c8933b2997cd88fc70b2dc36b307c5d9
SHA1 47e95379c1cd9cb60db654d66b98fe38cabfbc0c
SHA512 4c1647b3df3e34f927853b112dcc65e04454579050b11de10a66db11a900df83a3dab7fc1540e7af15547af7a723509d33a91fbc63481aeb373b80d4eafaebc8
SSDEEP 49152:R/pk1XYnGDiMtI8LQCzUWDT4orWk0YVp6v+4UdCS7wIEVaHvsP:RGisBLWBorW6VgUpwIgaHvs
TLSH
T126C52384E268C9D1C8404A3498BBC57355377CF74BA9421AAA5CFE1B693FA318DC731B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

IriunWebcam-2.9.8.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

IriunWebcam-2.9.8.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$TEMP/devcon.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

$TEMP/devgen.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

$TEMP/devgen.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

$TEMP/iriunv.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

$TEMP/iriunv.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

$TEMP/iriunv0Driver.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

$TEMP/iriunv0Driver.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

$TEMP/iriunv1Driver.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

$TEMP/iriunv1Driver.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

$TEMP/iriunv2Driver.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

$TEMP/iriunv2Driver.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

$TEMP/iriunv3Driver.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

$TEMP/iriunv3Driver.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

AdbWinApi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

AdbWinApi.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

AdbWinUsbApi.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

AdbWinUsbApi.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

IriunWebcam.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral27

Sample

IriunWebcam.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

discovery persistence ransomware

Behavioral task

behavioral28

Sample

adb.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

adb.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

avcodec-62.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral31

Sample

avcodec-62.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

avutil-60.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  IriunWebcam-2.9.8.exe
- Size 2.6MB
- SHA256 dfc4ac4c72fc3443821894b3de9064d1dd80ad4a24b39d15c9afb1f68049c9a1
- MD5 c8933b2997cd88fc70b2dc36b307c5d9
- SHA1 47e95379c1cd9cb60db654d66b98fe38cabfbc0c
- SHA512 4c1647b3df3e34f927853b112dcc65e04454579050b11de10a66db11a900df83a3dab7fc1540e7af15547af7a723509d33a91fbc63481aeb373b80d4eafaebc8
- SSDEEP 49152:R/pk1XYnGDiMtI8LQCzUWDT4orWk0YVp6v+4UdCS7wIEVaHvsP:RGisBLWBorW6VgUpwIgaHvs
- TLSH
  T126C52384E268C9D1C8404A3498BBC57355377CF74BA9421AAA5CFE1B693FA318DC731B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH
  T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
- MD5 cf0351a2ab9128838be6b54cea8238d3
- SHA1 c3b1abb890d92a6058de7c3ac2b2185b2f4fd03c
- SHA512 f1a68557d3825ca879f66c1b6828342528e41b8c746d137c51b85e8f8341dcf69bffc5bab76a498113cb53de3f4502644de8a26adaa27c22fa005ee7186f7785
- SSDEEP 96:oXEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3Y8NqkzfFc:oXEvCu5e81785qHFcU0PuAw0uyWIFc
- TLSH
  T16012F892E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
- MD5 c953dd0aab774f1446fcd63fa7c5f613
- SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
- SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
- SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
- TLSH
  T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $TEMP/devcon.exe
- Size 117KB
- SHA256 8b9bf2c01136e203732dda5232924aff40ae67d6168d05ca80efd19902cb8fc9
- MD5 320e3210bbffe99e5f0b6ce4dc943b9d
- SHA1 23c131c8603ec8f9e064c05d302a557714cbe806
- SHA512 6e6d58995f5f668ebba52b51c73fa86839a750acd35c7daeeec5ab8371ca660a3077cabfaadd8b80b0463055b099a4b2c863fdadff75eaa553e8611ac91b692e
- SSDEEP 3072:C4xbslWCBChVAyJCMhcuk6cqp2vJVx/6TuOp4oEk4ZBMHWxS:rbslrBChVAyJCMhKQ
- TLSH
  T1DDC3C60263E85659F6F77A3069B552215A777CA1AF38C6CF0298912D0BE3EC0DC74B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  $TEMP/devgen.exe
- Size 49KB
- SHA256 7a8503cb534e005ef3c756a59758e6404dee22faea047dcf5e7ba32f4813ca9b
- MD5 161545cbd1d5f80cc8fcc577b418f0c4
- SHA1 8ee77b283e8ae47d07931a6fd851a2a8870a1841
- SHA512 ca8a6ca5e9f0df1be74f0aa842dc3177b6c5dfda3a8c9bbf0e2af6286910a201004f33156c389481c6d15240a737c7c5220cc320f68b00a76e7b39e21e7da662
- SSDEEP 768:C9f2BdPbvMpICaDuDElxeo++Va+6KQsoFAsXszi9zZOT:Gf2Bd7KaDuDELN7Vj6KkFbcyzZQ
- TLSH
  T18E33F78123DC0545FAF67778D9B4485A583FB9A68834C61E2179818E8FB7BC0D9B03E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  $TEMP/iriunv.dll
- Size 171KB
- SHA256 c053d6e7e490a286370e9114a2ad4bb360c2824a5f3184b1433c9c37998d001d
- MD5 bd204fc42b59b93394ba3fe68f98011a
- SHA1 5c2ae01b59b657222725ed38edb9e838bbd9ea4c
- SHA512 fcc237d0e4245025ed0a91c60ceef73b342113232d427d46372e4b751d88edbc2e03b95c68777f2e38d5155fd8715d35e6249a1f74bea8d8bed202ace8864c52
- SSDEEP 3072:Kl45dialP7me4dBlhrnToLJn1gX1M+M2XLpLngJ8n2VCpaSh+A69KfpmoB:j5v7me4dBlhrnToLJn1ge+P0HSh+A690
- TLSH
  T15B044BA2278C5422C1C6D97D9FAB9E65363BB538C7348747B04A432EFD2B7C4ED94122
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  $TEMP/iriunv0Driver.dll
- Size 34KB
- SHA256 1efd96d336cd84559428ddb41f477800f4107898fe95173d355a4ebf254bc67e
- MD5 df3c5b0f567dd6510eb18dd4bd9be814
- SHA1 ef7856178b8c199573957a4ae7bd0d57db6f0dd7
- SHA512 7d815694eb5500b729ecf2f9593de460645eaa5f9e747f74c2dd067eaa75a47b6f30826ee0c4fb51e913e18db36ff8e875fea137c755e78ccb625e0e120634fe
- SSDEEP 384:NXfCNvyTA29jq8VsRICtTy5MPvkVxQHLYfHAxMElSs1dqnP3h3tEtifX7R9zA5ag:NXaNvSAvTXfrSDqSSq53tfF9zA5KM
- TLSH
  T19AF24C9057981883D5DBDA38C896DD5A383FE7A59521C51332BA130EDE5F3C0AA780EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  $TEMP/iriunv1Driver.dll
- Size 34KB
- SHA256 081c700ab291f07bc082c623f189a565e54dd72eac044ce6b8d790f613607a40
- MD5 084d983652b7db8b10944886ff5687c8
- SHA1 d0f3befbbc11bad9bd54e7b504f6feab163fa183
- SHA512 8a249670dd0fab10e0ee12685ccd31d8201eed42ba7d7774af129b2e3b1ede5de1c5b007a3422fa7d3162506faf3573a732e777bd1b86c4207210896badbfb57
- SSDEEP 384:IXfCNvyTA29jq8VsRICtTy5MPvkVxQHLYft3MElSs1dquP3h3xojR9zMS9P:IXaNvSAvTXfrSGqSSqK3o9z19P
- TLSH
  T155F24C9067981883D5D7DA38C8968C5A393FF7A99121C41323BA530EDE5F7D0AB780E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  $TEMP/iriunv2Driver.dll
- Size 34KB
- SHA256 df8801aa8ec84e96b389bf6c7cc35322f46c6447e993be78e3415762d87b2948
- MD5 0b21ea2dc78bbb1ae6544c1bebe28e9d
- SHA1 d8f4e3794a0fdab34210c7d30c36fff38495c2b8
- SHA512 47ca6b6962810519d0ad0caebd84e9e76e4460a020fd29e3c3f4a910be29af21613ee5c943bc8cb9e6c5ffb620015e7c6fe689fcccde96c985aecc4d370de903
- SSDEEP 384:WXfCNvyTA29jq8VsRICtTy5MPvkVxQHLYfYx4MElSs1dqRVP3h3EyjR9zMSsT:WXaNvSAvTXfrSWqSSqJ3Ec9z1sT
- TLSH
  T11CF24D9097A81883D5D7DA38C8978C4A353BF7A99121C41273B6530EDE5F3D0AB780EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  $TEMP/iriunv3Driver.dll
- Size 34KB
- SHA256 25f08ed7bdeb98a071da6f5a2c752b615e6d2a2a070bd37ad64ac290385d4843
- MD5 825e34392e4699500f15e4455ed57ac6
- SHA1 f5d53046a863aba6a9afdf3ab7ec5d26172d634b
- SHA512 f363e20c35616e582339715a33b1077de71c9e9af7b01a33cbd36f9e970304667a42622159158b362e3727dd8ee67dab0468ce63c335610699909e165da7b046
- SSDEEP 384:0XfCNvyTA29jq8VsRICtTy5MPvkVxQHLYfg9MElSs1dqeP3h3tlMgYR9z6SsVl5:0XaNvSAvTXfrSRqSSq63t6gE9zPm
- TLSH
  T1D6F24D90A7981883D5D7AA38C896DC56353FFBA59121C41373BA130EDE1F3C0A7690EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  AdbWinApi.dll
- Size 95KB
- SHA256 d60103a5e99bc9888f786ee916f5d6e45493c3247972cb053833803de7e95cf9
- MD5 ed5a809dc0024d83cbab4fb9933d598d
- SHA1 0bc5a82327f8641d9287101e4cc7041af20bad57
- SHA512 1fdb74ee5912fbdd2c0cba501e998349fecfbef5f4f743c7978c38996aa7e1f38e8ac750f2dc8f84b8094de3dd6fa3f983a29f290b3fa2cdbdaed691748baf17
- SSDEEP 1536:Jwqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCP:JwqD3L8Tezq0et+ui1y
- TLSH
  T17BA3592138A1C172C8D261B90AECF76193AEF4B10B3599C7379803DEDD653D25B7528B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22 behavioral23
- Target
  AdbWinUsbApi.dll
- Size 61KB
- SHA256 25207c506d29c4e8dceb61b4bd50e8669ba26012988a43fbf26a890b1e60fc97
- MD5 0e24119daf1909e398fa1850b6112077
- SHA1 293eedadb3172e756a421790d551e407457e0a8c
- SHA512 9cbb26e555ab40b019a446337db58770b9a0c9c08316ff1e1909c4b6d99c00bd33522d05890870a91b4b581e20c7dce87488ab0d22fc3c4bbdd7e9b38f164b43
- SSDEEP 1536:l72doFmOiHizFbPlspcsbj5ZsP+YeTs1p:lSSfN9+YeTs1p
- TLSH
  T1C8534B227991C072C89661B909FDE651A27FBA601BB184C7779C03EBED303D1AB79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24 behavioral25
- Target
  IriunWebcam.exe
- Size 503KB
- SHA256 a321ce1ab7516afaf6de60097f5967cb0d899d781b3eadbd10dd8942c421b292
- MD5 781e6f76d202842e1b989f56a6c224ba
- SHA1 dcb8a8850fb22789c147d687f0c48961f81d298c
- SHA512 f154233c90536ec4120f9c0e9ab104dd78d62848ce52ca61361fb7a856b55d8c2e307cf00d41225bfcca588acae623058144fd45db12c473b6eb503a64718631
- SSDEEP 6144:bMXF+7Gh6xcl4btYpl1wfxRf5gXQDdrmY5Ky5:bMA9q4bQufxRf0QZToC
- TLSH
  T1A3B46994F28585A2D511067284376AB7462BADF39B2492E327ECFC5B89733B10DE3713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral26 behavioral27
- Target
  adb.exe
- Size 1.9MB
- SHA256 766bd599dc2012ec79826cc54690276b46682d067ca8723e322a65a921a24226
- MD5 96c1a1f9ece6eee131f57117717d5990
- SHA1 304fd11cd4fa1694ad572c44edbae34a5d2be7e1
- SHA512 8995af1b47e115c249619634dfead94193b979fb53b923b822f56f3f94e3bfd0dc5d8cad3333c5b7987eb717fceddce072fdf722255e22399994f29ed7c4809c
- SSDEEP 49152:0RiLyc3hcPSsYKKRo+EqGxhznNhYnQk3:Ii9WkxEfxhzAQk3
- TLSH
  T11A958D0EF6C3E1B9FA8714B0512EB3BF7E3506009526CEF7C6808D706D625126A9E76D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28 behavioral29
- Target
  avcodec-62.dll
- Size 1.6MB
- SHA256 f0d91729a24dba84020badaaf7bb6f429b8283840e8f9239d0c8bb69fdc183a4
- MD5 c3296cd76144c7c69d7633e04b6122a0
- SHA1 9e8cedb2520dd9b84528c56811f262464b4f9873
- SHA512 0c757fd9354ffc512478f4d1e29d42027ecaf9d1d3267c92007e9e655da66789f44dc7d41e98b48436b466274d1d7838a65fca2b3116cb96214cb8422e5ba4c0
- SSDEEP 24576:Jt4HOgRuXRuqO6yonXQpr+neDGbzK3cu9c16XmVkml3cRRQR6XmH+MKuuJKC55v9:qOgRuXRuId5TcgRYTCsVh79rAbwz
- TLSH
  T1A3759E81E69713D2E94A14B4426B773FA63C2E2D0310DAF7DB846F61F872BC0953B649
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30 behavioral31
- Target
  avutil-60.dll
- Size 865KB
- SHA256 8cd48c0566ce5cd67172d0f38ece80f4975ed23309a58db0fc8b0331c1041b4b
- MD5 bfc5b541343a76e5bb80d3b1ca4a6c2c
- SHA1 564eb6629234e36b5295eb756b094fe2c24ab210
- SHA512 00ca35496e997b6c8b1fbd05f61da029a8450ae64e3e52dc9ba9a02dcf0759efb10e8bfe6a3e5d18a4ad0a7962f2916b9f6ac4dc38be3ca07a048c92d10fc2ee
- SSDEEP 12288:H8WW3TFEgj0zvIHxRVUuFTgh8pGe4fvVtJ9uZyMkePo1HYNEulOlSs3re16eypXW:OCpzAHxRVUv1pnh9SZs3rA6eYNQtx
- TLSH
  T1F015AE40F6D785F1D49D247832ABB37BAA3A22550B2CDAF7D7D05D6A9C302D09CB7284
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

discoverypersistenceransomware

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy