57b635da9c7933c7f943ffd7a47fa8eccf672377158581ebbbead3cf468a18ba | Triage™

Login
Reports

Overview

overview

7

Static

static

5

57b635da9c...ba.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
57b635da9c7933c7f943ffd7a47fa8eccf672377158581ebbbead3cf468a18ba
Size 2.6MB
Sample260827-vx68rayfjd
SHA256 57b635da9c7933c7f943ffd7a47fa8eccf672377158581ebbbead3cf468a18ba
MD5 403bd664c2172610c519b0929e33866a
SHA1 71e0bfeac6bffe9300f4feb2ce59b74667881c83
SHA512 2af3949bd33a5fd2bcab1994559eaa84c9a41bc3d732f52d1cabffd5105ec107f988cc412f2da9ef5e2293ad04ac94263d964bb40ce081fe2252e97cef344061
SSDEEP 49152:KFoHgEIXrjXfE44zAKveF+7YdOcYTBZEjUqxZgJGLfgqjJUDYWbXy:pHgNDfXQ1veFPk5FaoCRrgGUDxy
TLSH
T1B6C5333393D0D436F4D12BB89AFD237B12767C95A635A33BD2888085586D3D8BA7431B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

57b635da9c7933c7f943ffd7a47fa8eccf672377158581ebbbead3cf468a18ba.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

16 signatures

150 seconds

discovery persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  57b635da9c7933c7f943ffd7a47fa8eccf672377158581ebbbead3cf468a18ba
- Size 2.6MB
- SHA256 57b635da9c7933c7f943ffd7a47fa8eccf672377158581ebbbead3cf468a18ba
- MD5 403bd664c2172610c519b0929e33866a
- SHA1 71e0bfeac6bffe9300f4feb2ce59b74667881c83
- SHA512 2af3949bd33a5fd2bcab1994559eaa84c9a41bc3d732f52d1cabffd5105ec107f988cc412f2da9ef5e2293ad04ac94263d964bb40ce081fe2252e97cef344061
- SSDEEP 49152:KFoHgEIXrjXfE44zAKveF+7YdOcYTBZEjUqxZgJGLfgqjJUDYWbXy:pHgNDfXQ1veFPk5FaoCRrgGUDxy
- TLSH
  T1B6C5333393D0D436F4D12BB89AFD237B12767C95A635A33BD2888085586D3D8BA7431B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Installer Packages

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Event Triggered Execution

Installer Packages

Defense Evasion

Modify Registry

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy