01e203fa2b53218a506745d732841cd2430e3fb8b4adf6138f894f5ea4c30eb5 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

01e203fa2b...b5.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
01e203fa2b53218a506745d732841cd2430e3fb8b4adf6138f894f5ea4c30eb5
Size 6.9MB
Sample260906-ym8wdada64
SHA256 01e203fa2b53218a506745d732841cd2430e3fb8b4adf6138f894f5ea4c30eb5
MD5 ff54e2c4b1a278a7f017fcffdad670c1
SHA1 42fa42b5cb8b6c7c729d8ee8ffb6d0bc8e1d5687
SHA512 0f83001c7eda97fccdb063e422273f8be44ca803560ef2d0530ae0c2924190ad9f23b23db507d9960aa703c95d391e140a36aff4c3d713dbbe87c35c5752fbb2
SSDEEP 196608:4NHFTr/Gogf8T4J+0tZwO7vSwdDpvYCbM:4V1rmUcJ+oZkV7
TLSH
T1DB76121BE6A384ECC51FC174C7539AB29E30FC29053479BE19A4D7312F22D909B6EB64
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

01e203fa2b53218a506745d732841cd2430e3fb8b4adf6138f894f5ea4c30eb5.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion

Malware Config

Targets

- Target
  01e203fa2b53218a506745d732841cd2430e3fb8b4adf6138f894f5ea4c30eb5
- Size 6.9MB
- SHA256 01e203fa2b53218a506745d732841cd2430e3fb8b4adf6138f894f5ea4c30eb5
- MD5 ff54e2c4b1a278a7f017fcffdad670c1
- SHA1 42fa42b5cb8b6c7c729d8ee8ffb6d0bc8e1d5687
- SHA512 0f83001c7eda97fccdb063e422273f8be44ca803560ef2d0530ae0c2924190ad9f23b23db507d9960aa703c95d391e140a36aff4c3d713dbbe87c35c5752fbb2
- SSDEEP 196608:4NHFTr/Gogf8T4J+0tZwO7vSwdDpvYCbM:4V1rmUcJ+oZkV7
- TLSH
  T1DB76121BE6A384ECC51FC174C7539AB29E30FC29053479BE19A4D7312F22D909B6EB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasion

© 2018-2026

Terms | Privacy