28498fb6db6d0d702ae5048d8f55b930ba935de7e52d45337c448206e8f76669 | Triage™

Login
Reports

Overview

overview

Static

static

3

28498fb6db...69.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
28498fb6db6d0d702ae5048d8f55b930ba935de7e52d45337c448206e8f76669
Size 615KB
Sample260827-twabysbl9z
SHA256 28498fb6db6d0d702ae5048d8f55b930ba935de7e52d45337c448206e8f76669
MD5 162d4ccb0bef1c2cb5fe05797ebfa926
SHA1 481810d66d18bf6917f5e1aa828b0c23497f904a
SHA512 506a28de7aa1d919db8afb76fe443ae971862c425fb47f059475ef127304168ca8a6e5f84590c9fea8185a67775d0165e793c41800af7732063717e2fb001cf6
SSDEEP 12288:H9WphJx7kDtCUOEg0iFgKxiZRzSPxRzSJd:H9WXJ9OOEBitx/POH
TLSH
T1EBD47C2573F84536F0F74B756CB581124AB7BE122E37DA8E6A89128D0976BD0CA31373
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

28498fb6db6d0d702ae5048d8f55b930ba935de7e52d45337c448206e8f76669.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

discovery execution persistence

Malware Config

Targets

- Target
  28498fb6db6d0d702ae5048d8f55b930ba935de7e52d45337c448206e8f76669
- Size 615KB
- SHA256 28498fb6db6d0d702ae5048d8f55b930ba935de7e52d45337c448206e8f76669
- MD5 162d4ccb0bef1c2cb5fe05797ebfa926
- SHA1 481810d66d18bf6917f5e1aa828b0c23497f904a
- SHA512 506a28de7aa1d919db8afb76fe443ae971862c425fb47f059475ef127304168ca8a6e5f84590c9fea8185a67775d0165e793c41800af7732063717e2fb001cf6
- SSDEEP 12288:H9WphJx7kDtCUOEg0iFgKxiZRzSPxRzSJd:H9WXJ9OOEBitx/POH
- TLSH
  T1EBD47C2573F84536F0F74B756CB581124AB7BE122E37DA8E6A89128D0976BD0CA31373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery execution persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistence

© 2018-2026

Terms | Privacy