6c9e916da8b8ca665ed31ce32918d5db07defc1c41734804cb21236b7e8f3396 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

6c9e916da8...96.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
6c9e916da8b8ca665ed31ce32918d5db07defc1c41734804cb21236b7e8f3396
Size 564KB
Sample260826-vmarssgn9y
SHA256 6c9e916da8b8ca665ed31ce32918d5db07defc1c41734804cb21236b7e8f3396
MD5 755ff8987586f4d147d744696d206676
SHA1 cde773ae3d9a6168c9db28ca10c2918293f7b7f5
SHA512 130c2bceb6b6e76c36c32171b626eab7f68aa7304618970bc520e0b0eab3bc6d4aeb7876353331b9838a82113871fe68de55337b8a71a58342782e41d1eb9047
SSDEEP 12288:rYIW0p98Oh8P7h8xXtk2Iht0bca6TkJRAoK/9xZt:LW298E8uHb2tQca6TkJRAh/9ft
TLSH
T1B3C4E1527284C130D5E30233176DCE92693EBC315B6A6ADB77CC2A1E9AF1AC1D731B52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

6c9e916da8b8ca665ed31ce32918d5db07defc1c41734804cb21236b7e8f3396.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

discovery persistence ransomware

Malware Config

Targets

- Target
  6c9e916da8b8ca665ed31ce32918d5db07defc1c41734804cb21236b7e8f3396
- Size 564KB
- SHA256 6c9e916da8b8ca665ed31ce32918d5db07defc1c41734804cb21236b7e8f3396
- MD5 755ff8987586f4d147d744696d206676
- SHA1 cde773ae3d9a6168c9db28ca10c2918293f7b7f5
- SHA512 130c2bceb6b6e76c36c32171b626eab7f68aa7304618970bc520e0b0eab3bc6d4aeb7876353331b9838a82113871fe68de55337b8a71a58342782e41d1eb9047
- SSDEEP 12288:rYIW0p98Oh8P7h8xXtk2Iht0bca6TkJRAoK/9xZt:LW298E8uHb2tQca6TkJRAh/9ft
- TLSH
  T1B3C4E1527284C130D5E30233176DCE92693EBC315B6A6ADB77CC2A1E9AF1AC1D731B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceransomware

© 2018-2026

Terms | Privacy