4ab1ff238abe7260a8fd39293e8f0a67a3c4c0fa516dcf60949b9991312e1d5c | Triage™

Login
Reports

Overview

overview

8

Static

static

3

4ab1ff238a...5c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
4ab1ff238abe7260a8fd39293e8f0a67a3c4c0fa516dcf60949b9991312e1d5c
Size 1.2MB
Sample260827-hd63esyvbt
SHA256 4ab1ff238abe7260a8fd39293e8f0a67a3c4c0fa516dcf60949b9991312e1d5c
MD5 2803e5428a23316c59e58913075e1366
SHA1 9f0f9966a22663fb51d088d8e7d7c4fd6c944e16
SHA512 fb648b0b10e8d917e3d563aaceafdc1e897747eceb3b8eb9ffd85e84a0d50202cda07d811a7945b1f87d788869305bee793b345293d56f6d606436c895099690
SSDEEP 12288:qCXoZNGk3lHGMpRTl/q62klTf4quXJlG3+gAvDh5EUeDSR4/RYW:vrk3JRRTlCqlTyBDh5EU8Sa
TLSH
T16945B175ABAC77B5E0E28534892DB160EDBEBC521923CE0B11504E1E3F379D18D2972E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4ab1ff238abe7260a8fd39293e8f0a67a3c4c0fa516dcf60949b9991312e1d5c.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

discovery execution persistence

Malware Config

Targets

- Target
  4ab1ff238abe7260a8fd39293e8f0a67a3c4c0fa516dcf60949b9991312e1d5c
- Size 1.2MB
- SHA256 4ab1ff238abe7260a8fd39293e8f0a67a3c4c0fa516dcf60949b9991312e1d5c
- MD5 2803e5428a23316c59e58913075e1366
- SHA1 9f0f9966a22663fb51d088d8e7d7c4fd6c944e16
- SHA512 fb648b0b10e8d917e3d563aaceafdc1e897747eceb3b8eb9ffd85e84a0d50202cda07d811a7945b1f87d788869305bee793b345293d56f6d606436c895099690
- SSDEEP 12288:qCXoZNGk3lHGMpRTl/q62klTf4quXJlG3+gAvDh5EUeDSR4/RYW:vrk3JRRTlCqlTyBDh5EU8Sa
- TLSH
  T16945B175ABAC77B5E0E28534892DB160EDBEBC521923CE0B11504E1E3F379D18D2972E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery execution persistence
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistence

© 2018-2026

Terms | Privacy