44e2c693797a7316186d1e389c81278b3beb6e84c74ef8f9309f70bd906fd435 | Triage™

Login
Reports

Overview

overview

7

Static

static

5

Astroproxy-123.rar

windows10-2004-x64

7

Astroproxy-123.rar

windows11-ltsc_2024-x64

1

Astroproxy...xy.exe

windows10-2004-x64

7

Astroproxy...xy.exe

windows11-ltsc_2024-x64

7

Astroproxy...pl.dll

windows10-2004-x64

1

Astroproxy...pl.dll

windows11-ltsc_2024-x64

1

Astroproxy...s.json

windows10-2004-x64

3

Astroproxy...s.json

windows11-ltsc_2024-x64

3

Astroproxy/utils.dll

windows10-2004-x64

1

Astroproxy/utils.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
Astroproxy-123.rar
Size 4.2MB
Sample260831-rwlzmstenf
SHA256 44e2c693797a7316186d1e389c81278b3beb6e84c74ef8f9309f70bd906fd435
MD5 c144f7e81078d4a6efca293917532e0d
SHA1 95bb5e9a88a62330693ffeac1732155f50f1c87f
SHA512 732d5bd2b320efa96b8ed34f805db9760cd69c53ebcad3908ad7ec0d712fee529a847b46f0e218bbf97d54144da12c33d18b06263b1cb48621b2956f59131220
SSDEEP 98304:iwa3zbq8vLEQ817iB8IjwMLl1GL4CYWETh9hCR8A3Nxj5tc5:iwa3zWuEQ8QRLmLSh9hCC5
TLSH
T15426334FB289466C399059D84A2B343483EBD2D563D7FE14E131943AC672DD28EEB7C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution persistence ransomware upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Astroproxy-123.rar

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

persistence ransomware upx

Behavioral task

behavioral2

Sample

Astroproxy-123.rar

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Astroproxy/Astroproxy.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

persistence upx

Behavioral task

behavioral4

Sample

Astroproxy/Astroproxy.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

persistence upx

Behavioral task

behavioral5

Sample

Astroproxy/CleanControllerImpl.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Astroproxy/CleanControllerImpl.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Astroproxy/settings.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Astroproxy/settings.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Astroproxy/utils.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Astroproxy/utils.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  Astroproxy-123.rar
- Size 4.2MB
- SHA256 44e2c693797a7316186d1e389c81278b3beb6e84c74ef8f9309f70bd906fd435
- MD5 c144f7e81078d4a6efca293917532e0d
- SHA1 95bb5e9a88a62330693ffeac1732155f50f1c87f
- SHA512 732d5bd2b320efa96b8ed34f805db9760cd69c53ebcad3908ad7ec0d712fee529a847b46f0e218bbf97d54144da12c33d18b06263b1cb48621b2956f59131220
- SSDEEP 98304:iwa3zbq8vLEQ817iB8IjwMLl1GL4CYWETh9hCR8A3Nxj5tc5:iwa3zWuEQ8QRLmLSh9hCC5
- TLSH
  T15426334FB289466C399059D84A2B343483EBD2D563D7FE14E131943AC672DD28EEB7C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence ransomware upx
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  Astroproxy/Astroproxy.exe
- Size 700.0MB
- SHA256 4ca03bb7a95f6a6a2a531094277c440a5dfe167e55b5de3e365e2b72ca5b2962
- MD5 ccd16a74a874e38e16ce6430c307c293
- SHA1 22df5ccca0e24a7143c623a869c7acb5b80f7fa2
- SHA512 3e2d34de096b0c399005617b72eea1f7c0f0b755fc010992a6cf87864842c4092381f79380d961d7b01dcb7e3d923482b419ed7929274b624a02a193a2460e81
- SSDEEP 1536:glsedG5OyNzbtweGBfTH2pMVH3L9ikKGRp0cgotE7RbCxuf+Uf1lPLB926eD12C:giFOyFbtkVP5Lk6p0cfARLfnjeJJff8
- TLSH
  T178790247AE63E2FECA313A321C4FD49016EDE83B41B8976B4370F5BD5D64A946A00398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

persistence upx
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  Astroproxy/CleanControllerImpl.dll
- Size 8.7MB
- SHA256 868b9ae320893804b68bfebe75800f4f589c7836f2120885c8b741fe1fced220
- MD5 c595fbeae263dd38cd95966bf85aab55
- SHA1 9cad83fa15d36f9becb83434f28f6c294a30090e
- SHA512 160001e14cd2d31eb90b8322e91237821e6b0495304350b92882fb5f650e6999cfaeb8ac667c876c3ab7c5d4b33064251b813b1a0f7a45126280a281480204b3
- SSDEEP 98304:twqljKdBFXiDq7BIRIEdoPJGmoiAU/tGizZUaBoV:dFKdBFQq7BHcoPJGmo3U/tfeB
- TLSH
  T15D968E1676E400E8E4F6C278CE678503EBB2B8550731D7DF0690966A1F73BE19A3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Astroproxy/settings.json
- Size 161KB
- SHA256 8521700f4958f0b919fb6770584a0bc25b64fda4e347e95d156e9da2a1ee3eb6
- MD5 72bdb4cee75cf77ef4ff35a7fe81fe7f
- SHA1 25ecca37d7ec3aba23da4aadfce98010b7d02c6d
- SHA512 8f4579edbde1944248fa2de49541092c153c5f5ec2f7ea5f6274b39d0d25e456c3c9ebf4a4a6b46efeb34ee8c8772e90d146d088cd14b5fa0999a4bc57392891
- SSDEEP 3072:ZAYOgjz4Y17/y/4D15f4Otk8KSQG3a58AZQDq/Yb31BHPHsOZlmuMt9LR:ZHGYdS8v3JAVYb3rHPHFUuW/
- TLSH
  T152F313F105795BBF164289C47090252CB41A8659D872F94C08D71A93DCDAE33BEFF6B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Astroproxy/utils.dll
- Size 1.2MB
- SHA256 153db5b04b487099fe45f0a96faa077d2230f0c132ddbedb5334f9bdcb779093
- MD5 4784c4f0d07907861701e3941835ae8d
- SHA1 6c6f23d1537ea5cb37c3a56a2e34f0ca75e88fa5
- SHA512 20c9c22801d242c71317bc7d0d2453c42dba93ee6a780dd412b6ddac81585e0f8663fa7db234cd20ebdb2d2e4c7742f7daa73f4d146dabc4a10921a92d244bc2
- SSDEEP 24576:h0hlSv7cEYMQkrSsQkHTpOokYc+YSP2IzHR57jcU21jqJjepi2xKxi:h0jYcerSMTeYcoXcD+JCpzxKxi
- TLSH
  T1F44533467DDB077546690A45148B6CD06003BF58E6B4C0F2CBE97F7FE90A344166A4EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistenceransomwareupx

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

© 2018-2026

Terms | Privacy