4a7e91aecefeb0445360837e734bb0720c61bd7a564cf0876c6f0421984d255b | Triage™

Login
Reports

Overview

overview

6

Static

static

3

Kestrel.dll

windows10-2004-x64

1

Kestrel.dll

windows11-ltsc_2024-x64

1

Kestrel.exe

windows10-2004-x64

6

Kestrel.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
compiled.zip
Size 1.3MB
Sample260825-wzmskaxejf
SHA256 4a7e91aecefeb0445360837e734bb0720c61bd7a564cf0876c6f0421984d255b
MD5 d29c681a703028e3dcb016290f12a9e9
SHA1 dfda5ec8e92842a3285b806f385025ec2d226162
SHA512 25f67614d58042846feecc7e7b0452e299ea29627b62c39673c10ef541b5079032faaf2273a421b8dcb7cefcab9551f639104198100c156ac25876b2093a220a
SSDEEP 24576:E4WdoO/+3b2puL8EjYLei0h22zavVTG9+5xmLh3OoWTEnDEzsT7:ELORAeT25VS9+r63OoWTEnDD
TLSH
T14E5533660EB8D14B25EACB3DD1EF26509FB50609B878754172E4067D1DEA8F292CC38F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence ransomware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Kestrel.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

Kestrel.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

Kestrel.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

900 seconds

defense_evasion discovery trojan

Behavioral task

behavioral4

Sample

Kestrel.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

19 signatures

900 seconds

defense_evasion discovery persistence ransomware trojan

Malware Config

Targets

- Target
  Kestrel.dll
- Size 1.9MB
- SHA256 4521b9941c8dae5732fa38b661ab6c68064c17e0a0a98539df627d6679e06312
- MD5 5227dfe48f974e361f13bab01462f533
- SHA1 aff95ef8aafbeba2b08619d5514d9aae8e908e7a
- SHA512 2c39875ce66eaea554f4bf5dfb575b6d4c89215ba097b401cadebb5571d6e9fe83a1d8d7773b6a953c2142f75dedfc5938fdde43cc5068b0793897ff1d448642
- SSDEEP 49152:FB9zblfhYam1Lj6HwXy+ZNafuPwJ4nyndrm:ThspjmqGGPwJNm
- TLSH
  T128959E1AA2A900FCD4BB9078C6576E17E7B2381503A096DF13E016A56F677E10FBF721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Kestrel.exe
- Size 760KB
- SHA256 dc5f9ffb84fb945b5a7fada71f3bcff307edf3a7ab213931b0484254420c99b7
- MD5 48a4010e0e8fa0c95ec23a0b1e62c052
- SHA1 f0c3b0b137dbb5759bbcc5ef5858c436d7262a03
- SHA512 119cc048eca932e4da10f72e0a258eacccc0821e00415d77fc887afa20251248c43b76a65c1290003b9b830ffb9a818e2477f415493f72f19f9b307cd1fd6bbd
- SSDEEP 12288:sHuhQCc6JxpD2/lbrLkZxw4tETcvrymRo3zuYtsbT0j2IxBmzZbIblt/ZUsZRT8C:sYQd6zpDalbrLI7ETcv83zuYtsbT0j2i
- TLSH
  T1B6F48D26BAA001BCE077D17A8A575A06F776B40703A18ADF379C45B10F976E48E7F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan persistence ransomware
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Network Share Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

defense_evasiondiscoverytrojan

behavioral4

defense_evasiondiscoverypersistenceransomwaretrojan

© 2018-2026

Terms | Privacy