2f7dc666811d355375844cfdcb30cefe0d28971e6fc1503a6694d0cf190c9a5d | Triage™

Login
Reports

Overview

overview

9

Static

static

3

2026-09-01...pt.exe

windows10-2004-x64

9

2026-09-01...pt.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-01_6e195852bca0c57e6c3063a88b023d65_amadey_elex_hellokitty_manuscrypt
Size 1.3MB
Sample260903-l8a51svarb
SHA256 2f7dc666811d355375844cfdcb30cefe0d28971e6fc1503a6694d0cf190c9a5d
MD5 6e195852bca0c57e6c3063a88b023d65
SHA1 48eb944b6739dc9c8af0dfa2fdf5ed0e5838ac0f
SHA512 92f4e0a458d6a0ec332519a6692bc5ada857c7faaa157474af9d7113f6e7643e7fff9c51bfd726b5359a986b4f7a77bf19766aa7bed1dab8741cb915d1d3741d
SSDEEP 12288:ME7er3lwwOY0p2ANUu4BrCib/wkbM9gsf6MPLW:0B0h2rXwkbIgs
TLSH
T15C55121471C580B2E46359344974B6B2DA7EFF740F2069FB33A4527A4F348D19A2BCBA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery evasion execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-09-01_6e195852bca0c57e6c3063a88b023d65_amadey_elex_hellokitty_manuscrypt.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

discovery evasion execution ransomware

Behavioral task

behavioral2

Sample

2026-09-01_6e195852bca0c57e6c3063a88b023d65_amadey_elex_hellokitty_manuscrypt.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

discovery evasion execution ransomware

Malware Config

Targets

- Target
  2026-09-01_6e195852bca0c57e6c3063a88b023d65_amadey_elex_hellokitty_manuscrypt
- Size 1.3MB
- SHA256 2f7dc666811d355375844cfdcb30cefe0d28971e6fc1503a6694d0cf190c9a5d
- MD5 6e195852bca0c57e6c3063a88b023d65
- SHA1 48eb944b6739dc9c8af0dfa2fdf5ed0e5838ac0f
- SHA512 92f4e0a458d6a0ec332519a6692bc5ada857c7faaa157474af9d7113f6e7643e7fff9c51bfd726b5359a986b4f7a77bf19766aa7bed1dab8741cb915d1d3741d
- SSDEEP 12288:ME7er3lwwOY0p2ANUu4BrCib/wkbM9gsf6MPLW:0B0h2rXwkbIgs
- TLSH
  T15C55121471C580B2E46359344974B6B2DA7EFF740F2069FB33A4527A4F348D19A2BCBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

discovery evasion execution ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

discoveryevasionexecutionransomware

behavioral2

discoveryevasionexecutionransomware

© 2018-2026

Terms | Privacy