4dff912ab7b173a2c50eef64ff06e3e6cb544e9b2d26b655abed119540814b6c | Triage™

Login
Reports

Overview

overview

7

Static

static

5

4dff912ab7...6c.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
4dff912ab7b173a2c50eef64ff06e3e6cb544e9b2d26b655abed119540814b6c
Size 132KB
Sample260906-xjp4es1ala
SHA256 4dff912ab7b173a2c50eef64ff06e3e6cb544e9b2d26b655abed119540814b6c
MD5 824165c058c68c509cc39d2c0c908d07
SHA1 c73bfb98ed8624eb4cf2caf12683fcdf3ae5f509
SHA512 34db89a36072870e4842adb64af1f0dccba622b56d886cc7841c233353edf2c917e41950e34f7756f93dafc8711618c9d40f3e91029c7f9287b07a71b8b299b6
SSDEEP 3072:IyrN/sVywaEj1UsPyrN/sVywaEj1UsEOBYJpiuAxt6b2Y:Nh9wv1U7h9wv1Ut3LKxtQ2Y
TLSH
T177D31273E8C045BBE213F57F688C752265B498B82EA28B6A747E33C5528D1F41CC7CA4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

4dff912ab7b173a2c50eef64ff06e3e6cb544e9b2d26b655abed119540814b6c.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery persistence upx

Malware Config

Targets

- Target
  4dff912ab7b173a2c50eef64ff06e3e6cb544e9b2d26b655abed119540814b6c
- Size 132KB
- SHA256 4dff912ab7b173a2c50eef64ff06e3e6cb544e9b2d26b655abed119540814b6c
- MD5 824165c058c68c509cc39d2c0c908d07
- SHA1 c73bfb98ed8624eb4cf2caf12683fcdf3ae5f509
- SHA512 34db89a36072870e4842adb64af1f0dccba622b56d886cc7841c233353edf2c917e41950e34f7756f93dafc8711618c9d40f3e91029c7f9287b07a71b8b299b6
- SSDEEP 3072:IyrN/sVywaEj1UsPyrN/sVywaEj1UsEOBYJpiuAxt6b2Y:Nh9wv1U7h9wv1Ut3LKxtQ2Y
- TLSH
  T177D31273E8C045BBE213F57F688C752265B498B82EA28B6A747E33C5528D1F41CC7CA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence upx
- Executes dropped EXE
- Modifies WinLogon
  persistence
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

© 2018-2026

Terms | Privacy