2f90539debba9bed0bc284a6f93c6640ecac332a5fe73158f7f8ed85c8a8d421 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

ImmoLogScanner-2.exe

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
ImmoLogScanner-2.exe
Size 360KB
Sample260825-b7739awbqe
SHA256 2f90539debba9bed0bc284a6f93c6640ecac332a5fe73158f7f8ed85c8a8d421
MD5 83ddfe4b7dc05d18ac718a7bd1433f77
SHA1 c7b3b8c78893157e6b41356a7e259d97cb6dba7b
SHA512 3ae130a735833e643a3358657658d0ab042d0f6306e5f765edc87b7064ef04e1973596b452f3367e84b33ad3039e55f6ce42ca19c13414dcb73b0c36670abad2
SSDEEP 6144:yfdlKlfl0X/wmbt5ROYKx7X9btPSfczIQmL1enrD4ElW:HmYq6V1+OI31enf4
TLSH
T1E5749D13FE9641AFE672A036032E8A5A7076B4C90B15A5FF429981343F1BED72FB5314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ImmoLogScanner-2.exe

Resource

win11-20260513-en

windows11-21h2-x64

11 signatures

300 seconds

defense_evasion execution persistence

Malware Config

Targets

- Target
  ImmoLogScanner-2.exe
- Size 360KB
- SHA256 2f90539debba9bed0bc284a6f93c6640ecac332a5fe73158f7f8ed85c8a8d421
- MD5 83ddfe4b7dc05d18ac718a7bd1433f77
- SHA1 c7b3b8c78893157e6b41356a7e259d97cb6dba7b
- SHA512 3ae130a735833e643a3358657658d0ab042d0f6306e5f765edc87b7064ef04e1973596b452f3367e84b33ad3039e55f6ce42ca19c13414dcb73b0c36670abad2
- SSDEEP 6144:yfdlKlfl0X/wmbt5ROYKx7X9btPSfczIQmL1enrD4ElW:HmYq6V1+OI31enf4
- TLSH
  T1E5749D13FE9641AFE672A036032E8A5A7076B4C90B15A5FF429981343F1BED72FB5314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion execution persistence
- Looks for VirtualBox drivers on disk
  defense_evasion
- Looks for VMWare drivers on disk
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

File and Directory Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecutionpersistence

© 2018-2026

Terms | Privacy