02a1db535a529065295a232f66a86f9a0b5c63b92e2cedcb904762f0f0b194da | Triage™

Login
Reports

Overview

overview

5

Static

static

5

b1e3fc8f-c...81.exe

windows10-2004-x64

5

b1e3fc8f-c...81.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/app-64.7z

windows10-2004-x64

1

$PLUGINSDIR/app-64.7z

windows11-ltsc_2024-x64

1

LICENSE.electron.txt

windows10-2004-x64

1

LICENSE.electron.txt

windows11-ltsc_2024-x64

1

chrome_100...nt.pak

windows10-2004-x64

3

chrome_100...nt.pak

windows11-ltsc_2024-x64

3

chrome_200...nt.pak

windows10-2004-x64

3

chrome_200...nt.pak

windows11-ltsc_2024-x64

3

icudtl.dat

windows10-2004-x64

3

icudtl.dat

windows11-ltsc_2024-x64

3

locales/af.pak

windows10-2004-x64

3

locales/af.pak

windows11-ltsc_2024-x64

3

locales/am.pak

windows10-2004-x64

3

locales/am.pak

windows11-ltsc_2024-x64

3

locales/ar.pak

windows10-2004-x64

3

locales/ar.pak

windows11-ltsc_2024-x64

3

locales/bg.pak

windows10-2004-x64

3

locales/bg.pak

windows11-ltsc_2024-x64

3

locales/bn.pak

windows10-2004-x64

3

locales/bn.pak

windows11-ltsc_2024-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
b1e3fc8f-c27d-47d3-ab14-0afdcf0b6add__26f0c4f9-3b25-4b27-aec7-23d971635c81.exe
Size 73.3MB
Sample260825-stps7abm8w
SHA256 02a1db535a529065295a232f66a86f9a0b5c63b92e2cedcb904762f0f0b194da
MD5 e7c8d8b391c6d2f2a24c5bf12aa87d9d
SHA1 6c5e5a1150c809d32d72250eefe2539454e896cc
SHA512 b5a76bb9a001ea47017df46320e6485826db61c4022c1fa3a823e51028413272409b1701564ffe73903808a96fc9dffc96b0806cd7a4ababf2ea667367d9d27c
SSDEEP 1572864:BSe4hdV6xfrHTynQ3Y9GF0J2/3M4fvHLTkEY6C/BJ8G:BSe4DoxfreI/0A/3/vHLoyG
TLSH
T1A6F73323BD2E19BDD0D5B77ED16F00F5CA0B284F159E10D6727E92AB79F99020E1218B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution ransomware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

b1e3fc8f-c27d-47d3-ab14-0afdcf0b6add__26f0c4f9-3b25-4b27-aec7-23d971635c81.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

b1e3fc8f-c27d-47d3-ab14-0afdcf0b6add__26f0c4f9-3b25-4b27-aec7-23d971635c81.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/StdUtils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/UAC.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/UAC.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/WinShell.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/WinShell.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/app-64.7z

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/app-64.7z

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

LICENSE.electron.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

LICENSE.electron.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

chrome_100_percent.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

chrome_100_percent.pak

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

chrome_200_percent.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

chrome_200_percent.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

icudtl.dat

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

icudtl.dat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

locales/af.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

locales/af.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

locales/am.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

locales/am.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

locales/ar.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

locales/ar.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

locales/bg.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

locales/bg.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

locales/bn.pak

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

locales/bn.pak

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

resources/elevate.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

resources/elevate.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  b1e3fc8f-c27d-47d3-ab14-0afdcf0b6add__26f0c4f9-3b25-4b27-aec7-23d971635c81.exe
- Size 73.3MB
- SHA256 02a1db535a529065295a232f66a86f9a0b5c63b92e2cedcb904762f0f0b194da
- MD5 e7c8d8b391c6d2f2a24c5bf12aa87d9d
- SHA1 6c5e5a1150c809d32d72250eefe2539454e896cc
- SHA512 b5a76bb9a001ea47017df46320e6485826db61c4022c1fa3a823e51028413272409b1701564ffe73903808a96fc9dffc96b0806cd7a4ababf2ea667367d9d27c
- SSDEEP 1572864:BSe4hdV6xfrHTynQ3Y9GF0J2/3M4fvHLTkEY6C/BJ8G:BSe4DoxfreI/0A/3/vHLoyG
- TLSH
  T1A6F73323BD2E19BDD0D5B77ED16F00F5CA0B284F159E10D6727E92AB79F99020E1218B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/app-64.7z
- Size 72.7MB
- SHA256 2133a0e783fa2b0a8f2eb40d42377832eb19a638b653c373acb3c68ed11915c5
- MD5 564b62a3bd02443967e270a2857294d4
- SHA1 89220a5360b4e7c1a6761f139136011eafe19243
- SHA512 719728eb9e462649afacda4982765680e4d371bfb276eeefc0b9e62fd72ef58b9b4372b2ced50801b9bf8e5a437323c402068b2543dc0316a6973b501606a25e
- SSDEEP 1572864:Re4hdV6xfrHTynQ3Y9GF0J2/3M4fvHLTkEY6C/BJ8W:Re4DoxfreI/0A/3/vHLoyW
- TLSH
  T1C5F73323BD2E19BDD0D5B77ED16F00E5CA0B284F599E10A5727E82AB79F95020E121CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  LICENSE.electron.txt
- Size 1KB
- SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
- MD5 4d42118d35941e0f664dddbd83f633c5
- SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
- SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
- TLSH
  T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral13 behavioral14
- Target
  chrome_100_percent.pak
- Size 163KB
- SHA256 b7805392bfce11118165e3a4e747ac0ca515e4e0ceadab356d685575f6aa45fb
- MD5 4fc6564b727baa5fecf6bf3f6116cc64
- SHA1 6ced7b16dc1abe862820dfe25f4fe7ead1d3f518
- SHA512 fa7eab7c9b67208bd076b2cbda575b5cc16a81f59cc9bba9512a0e85af97e2f3adebc543d0d847d348d513b9c7e8bef375ab2fef662387d87c82b296d76dffa2
- SSDEEP 3072:IOzwJCGIekwdLpsXYFAXg6IL2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:IOzw1Iekam5QpK18Gb0OV8ld0GecQ3Ey
- TLSH
  T142F3E1D7B7B4EE3DCA5752B7626600B1ECB7452807A1434B178BD8763A72348D8C8793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  chrome_200_percent.pak
- Size 222KB
- SHA256 fac820a98b746a04ce14ec40c7268d6a58819133972b538f9720a5363c862e32
- MD5 47668ac5038e68a565e0a9243df3c9e5
- SHA1 38408f73501162d96757a72c63e41e78541c8e8e
- SHA512 5412041c923057ff320aba09674b309b7fd71ede7e467f47df54f92b7c124e3040914d6b8083272ef9f985eef1626eaf4606b17a3cae97cfe507fb74bc6f0f89
- SSDEEP 6144:QsDQYaSN6svydHLhQegx5GMRejnbdZnVE6YoppO4:QBfSN6svydrx6edhVELoXO4
- TLSH
  T1F024E1CB67B8DD3CC96706B3622601F1FCB6113856B6525B03DBEC357A9668988CD383
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  icudtl.dat
- Size 10.2MB
- SHA256 f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb
- MD5 e0f1ad85c0933ecce2e003a2c59ae726
- SHA1 a8539fc5a233558edfa264a34f7af6187c3f0d4f
- SHA512 714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28
- SSDEEP 196608:hpgPBhORiuQwCliXUxbblHa93Whli6Z86WOH:n8wkDliXUxbblHa93Whli6Z8I
- TLSH
  T1B8B63803A2FB4EC2F9F76F31D8F452679527BD496E32805A11042F3B5C336908A65BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  locales/af.pak
- Size 464KB
- SHA256 57670eae6d1871e648ad6148125ee82d08575bec5b323459fc14c3831570774a
- MD5 862a2262d0e36414abbae1d9df0c7335
- SHA1 605438a96645b9771a6550a649cddbb216a3a5b1
- SHA512 a789a4cad72106a5c64d27709b129c4ae6284076f147b7c3fcb808b557a3468b4efe3ede28033f981335d5eab986532c0497ddd6ed24b76189fe49366692ee73
- SSDEEP 12288:KYHoLheVm/Wnzo+E+VOSMKlNu+d2ZH2Jynua2VIzfXo0vIFNgRU2Sw+2Ss37xzOZ:LoL0Vm/Wnzob+wSMag+d2ZH2Jynua2V5
- TLSH
  T1D9A42C06EB81273D09A07696BA0945B7FF9CA26CD770B2BADD9D82360562EFC017D0D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  locales/am.pak
- Size 756KB
- SHA256 b05dcb8136751aee5eced680a5bad935e386bfce657dd283d3ec00ee722fd740
- MD5 4eaa15771058480f5c574730c6bf4090
- SHA1 2b0322aae5a0927935062ea89bd8bd129fa77961
- SHA512 b67e7dd24eadc91d4cd920f8864cfb23a9c67b2cecd54ec97e01705636604ce504dc417d6af1c53f374b58eddf71a12bb82248bd8fd68307161d4833342681a9
- SSDEEP 12288:sjsuGn8MVs2TZIuHzLzxBT2qE36jpECuzA+5P9LlVrClOwPQVx30jH8+F:HnG2TZVLzxwqEqjpECuzA+5P9LlVrClj
- TLSH
  T1CFF4B9547EF9F7570F8E8A19A4320E4E9594AD4652803C38C35AE3FC2B2DF1B4DDA219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  locales/ar.pak
- Size 829KB
- SHA256 ea49bc2ceb6b185030eaa0ee0155feca90e632390417299113b02fbe365ff731
- MD5 2b2dfafb0d258c1d2b58e51ae1ee9ab5
- SHA1 2a538491ff4023d29bdf2a053447c6016138d9f2
- SHA512 6b629ed83edfea1b1ff3c379009332e413c420de651a24160fae859e1e0948fbebab99c9da714df6dfad3b9e472dece7bee95815ceca428183f4ac0bd6d42ff3
- SSDEEP 12288:whjQkIYBukM/T/RJGX4Yxwv4UPCNakEz5cN01++QIYkpT:gjfGv9T5b++
- TLSH
  T184059BE21B2984720B96DF0FD1E23668D872BD23EB4BFC3124934A2156D7513E74E678
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  locales/bg.pak
- Size 861KB
- SHA256 50e4f6b9c387adf4baba3377c61d99326cc3987928d8d60b88d1ac29352820ea
- MD5 0e8005b17ac49f50fb60f116f822840d
- SHA1 f2486da277de22e5741356f8e73e60b7a7492510
- SHA512 5df18bbeabd56e70d4c5a80dee5b7ce48259000665941634937e556e3b3a1c6403aa45c410f6f755607549c9dd35d722987b447c50efca51228ffeca4628756d
- SSDEEP 24576:9MCo3qBsklYOdAs1axUYVbOAHi373Z5+3aAK5kVDV5uRumpod2JK5ITOuORx6QKq:9MCo3qBsklY/UYVbOAHi373Z83a1kVDj
- TLSH
  T1611524A15B9A68DF0101F45F98087E093CEB54FE3FE7879241642DBD39F10B886BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  locales/bn.pak
- Size 1.1MB
- SHA256 e6adcfb4f3b3bccd4a27edadc168b503c36551cd6b27fb24043efeb21f691ce5
- MD5 c8173f0cc63ca9e02c07abec94892b53
- SHA1 2688b199cc40bb2082247fa451eac1304608e48b
- SHA512 3d2317430722dc15c5d938fa55235af1caa03dcff7a574b44d37d89e7cf2c94dd2e84518b3eeca4a5a8dbec1b99d94aed97429aaf55c63998002d50ce9cb5019
- SSDEEP 3072:HPvKTlIymMTAKhwg8KgMokBw20kzhY0/ukfe0/Q8hhar6j7dkjBbJrlD+B5rwDlo:HPvtMTAKhwlFpKAShhG6j7wBb85mlo
- TLSH
  T14D35EE209C6E91B2A8C5CDC9434C6370C5236E9B9B61F74DDC17A25938ADC3C8CADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  resources/elevate.exe
- Size 114KB
- SHA256 dbb3c3c769d82b27dc03490eca8f8699b9a6a7b74c3a51bbd24700bc75aa21ed
- MD5 a5ed3826dcfb89a9af23cbddacd69828
- SHA1 90436dc636697a9bacc7504ade72f8d213a76ed0
- SHA512 296389c2a7c687988f4ba87b15efc29650efcabe67e545b2ca589ec07e279d9066fe5f8c584b6f5eaf6c78563b7fb09f0c36afe88b4f3d6712d2408c6fd4f409
- SSDEEP 3072:AxbLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlSVlxT:cPrwRhte1XsE1lYT
- TLSH
  T195B37C1278C0C071E9731A3559B4C9618E7DFD700E759EAF6398127A4FA02D0AA3AF77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy