b219c38686df5a482a14ff714f97ebd451f4abecf8dfbe6edd7c7e01b2e07047 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

b219c38686...47.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
b219c38686df5a482a14ff714f97ebd451f4abecf8dfbe6edd7c7e01b2e07047
Size 6.8MB
Sample260831-snwpjsck2t
SHA256 b219c38686df5a482a14ff714f97ebd451f4abecf8dfbe6edd7c7e01b2e07047
MD5 4e9e9cd94f32035719a7ddf144ac10b1
SHA1 73eb868eeb40ebecba2d98c2767e704653a528ba
SHA512 dcdec79ef4db140d2c0fbdc2e668b26cf86fd3eedf74886596b0217087c7a7122d7f0c630cff83264723e408fccd5aa1cd618aa57495c857746b58e896c5149b
SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTPezSC6v2XMHG/h1+0:JSWyZ/K0ttYVAATUL/h1+0
TLSH
T173667D13F1E841A5E0B6D174CAA69731EB327C464BB195DF2240B7D82E37AD0BB39721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

b219c38686df5a482a14ff714f97ebd451f4abecf8dfbe6edd7c7e01b2e07047.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion discovery persistence ransomware

Malware Config

Targets

- Target
  b219c38686df5a482a14ff714f97ebd451f4abecf8dfbe6edd7c7e01b2e07047
- Size 6.8MB
- SHA256 b219c38686df5a482a14ff714f97ebd451f4abecf8dfbe6edd7c7e01b2e07047
- MD5 4e9e9cd94f32035719a7ddf144ac10b1
- SHA1 73eb868eeb40ebecba2d98c2767e704653a528ba
- SHA512 dcdec79ef4db140d2c0fbdc2e668b26cf86fd3eedf74886596b0217087c7a7122d7f0c630cff83264723e408fccd5aa1cd618aa57495c857746b58e896c5149b
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTPezSC6v2XMHG/h1+0:JSWyZ/K0ttYVAATUL/h1+0
- TLSH
  T173667D13F1E841A5E0B6D174CAA69731EB327C464BB195DF2240B7D82E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence ransomware
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Sets desktop wallpaper using registry
  ransomware
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceransomware

© 2018-2026

Terms | Privacy