4795bdfa402a33523453e863dbf696ecfe616ce41ef89eb5de8340c3aff8f2a2 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

4795bdfa40...a2.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
4795bdfa402a33523453e863dbf696ecfe616ce41ef89eb5de8340c3aff8f2a2
Size 654KB
Sample260831-vmka8shf55
SHA256 4795bdfa402a33523453e863dbf696ecfe616ce41ef89eb5de8340c3aff8f2a2
MD5 000e902ba3b251da5e9b112232000d85
SHA1 40f6e01c1a350bee65872816c0316757064c7795
SHA512 e8f11aab0ecf429f26e710146720d2abe1f0273a7e467848e4291fa3207993be17573eba74aee8d9a816f22df86ed428022eb767485273aeb9c8fb5775e850d8
SSDEEP 12288:oYIW0p98Oh8P7h8cxtxxAb37d0WeFc32TPu7he9gyCWTHb:EW298E8uUtLAiFc32TPu7he9gyCWTHb
TLSH
T119E4E11672448331D2E20273275DCAC37A3EBC345B6AA6D366DC551D6BB1EC0E336B92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4795bdfa402a33523453e863dbf696ecfe616ce41ef89eb5de8340c3aff8f2a2.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

15 signatures

150 seconds

discovery persistence ransomware

Malware Config

Targets

- Target
  4795bdfa402a33523453e863dbf696ecfe616ce41ef89eb5de8340c3aff8f2a2
- Size 654KB
- SHA256 4795bdfa402a33523453e863dbf696ecfe616ce41ef89eb5de8340c3aff8f2a2
- MD5 000e902ba3b251da5e9b112232000d85
- SHA1 40f6e01c1a350bee65872816c0316757064c7795
- SHA512 e8f11aab0ecf429f26e710146720d2abe1f0273a7e467848e4291fa3207993be17573eba74aee8d9a816f22df86ed428022eb767485273aeb9c8fb5775e850d8
- SSDEEP 12288:oYIW0p98Oh8P7h8cxtxxAb37d0WeFc32TPu7he9gyCWTHb:EW298E8uUtLAiFc32TPu7he9gyCWTHb
- TLSH
  T119E4E11672448331D2E20273275DCAC37A3EBC345B6AA6D366DC551D6BB1EC0E336B92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence ransomware
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceransomware

© 2018-2026

Terms | Privacy