94eb96fba42ff4069c4fb5c3269130020fac13412101b6db775926e61bb0960a | Triage™

Login
Reports

Overview

overview

Static

static

3

94eb96fba4...0a.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
94eb96fba42ff4069c4fb5c3269130020fac13412101b6db775926e61bb0960a
Size 562KB
Sample260825-pp53tsywcy
SHA256 94eb96fba42ff4069c4fb5c3269130020fac13412101b6db775926e61bb0960a
MD5 8afd637b7c924810ac1211dd5487246a
SHA1 4d6a30306911216fb2b0315b7b95eb9a04dfa2da
SHA512 b3a31dfcfecc1e2efa8ba8015484fe4e9bfa4fd3ff223370c16b8ad1184e94d6b4092d43705e57a24dc5ffbfaa062857673fd5b0168241ad06125715760b1320
SSDEEP 12288:AG6o0TAv5TgX3KAvKZ4mkGLt1jmNm+IMfZUwxBoxXsRkUHNE4E:AG6lHKZpkYRp+Px5omLHSV
TLSH
T147C42222B6D46AF1C462A3F496957B76D39FEC341836BA87C75C1DEB1826083C21DB43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

94eb96fba42ff4069c4fb5c3269130020fac13412101b6db775926e61bb0960a.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

discovery persistence

Malware Config

Targets

- Target
  94eb96fba42ff4069c4fb5c3269130020fac13412101b6db775926e61bb0960a
- Size 562KB
- SHA256 94eb96fba42ff4069c4fb5c3269130020fac13412101b6db775926e61bb0960a
- MD5 8afd637b7c924810ac1211dd5487246a
- SHA1 4d6a30306911216fb2b0315b7b95eb9a04dfa2da
- SHA512 b3a31dfcfecc1e2efa8ba8015484fe4e9bfa4fd3ff223370c16b8ad1184e94d6b4092d43705e57a24dc5ffbfaa062857673fd5b0168241ad06125715760b1320
- SSDEEP 12288:AG6o0TAv5TgX3KAvKZ4mkGLt1jmNm+IMfZUwxBoxXsRkUHNE4E:AG6lHKZpkYRp+Px5omLHSV
- TLSH
  T147C42222B6D46AF1C462A3F496957B76D39FEC341836BA87C75C1DEB1826083C21DB43
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

© 2018-2026

Terms | Privacy