56d59d8860947a8c793e8c933d70e4bb082d87cbd9917abf108c7827daabc854 | Triage™

Login
Reports

Overview

overview

7

Static

static

5

56d59d8860...54.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
56d59d8860947a8c793e8c933d70e4bb082d87cbd9917abf108c7827daabc854
Size 214KB
Sample260907-j6bmnafg35
SHA256 56d59d8860947a8c793e8c933d70e4bb082d87cbd9917abf108c7827daabc854
MD5 42bec20a050da95c053a5169e2d0bbd0
SHA1 7fe9c5dc92c3ae2342e7091869d77100ba85421a
SHA512 aec59ec8d99c78ed0236bfb386f7339be0693e3aa985b2cdbe89e0f428ba0a54cd4436febf6cdcb0c91fcb470c7953187d21f9e4cd140502aaa6113e661a5dc5
SSDEEP 3072:IyrN/sVywaEj1Us10nfbyrN/sVywaEj1UsOQ/8JhjohTe/zqa95co5L1yPl:Nh9wv1Uveh9wv1UJQEJAy+45DL1ol
TLSH
T147241266F89580BAF653D3BF712AB9116651BC3856814D2734FB32C3878E6B105A3E70
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

56d59d8860947a8c793e8c933d70e4bb082d87cbd9917abf108c7827daabc854.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery persistence upx

Malware Config

Targets

- Target
  56d59d8860947a8c793e8c933d70e4bb082d87cbd9917abf108c7827daabc854
- Size 214KB
- SHA256 56d59d8860947a8c793e8c933d70e4bb082d87cbd9917abf108c7827daabc854
- MD5 42bec20a050da95c053a5169e2d0bbd0
- SHA1 7fe9c5dc92c3ae2342e7091869d77100ba85421a
- SHA512 aec59ec8d99c78ed0236bfb386f7339be0693e3aa985b2cdbe89e0f428ba0a54cd4436febf6cdcb0c91fcb470c7953187d21f9e4cd140502aaa6113e661a5dc5
- SSDEEP 3072:IyrN/sVywaEj1Us10nfbyrN/sVywaEj1UsOQ/8JhjohTe/zqa95co5L1yPl:Nh9wv1Uveh9wv1UJQEJAy+45DL1ol
- TLSH
  T147241266F89580BAF653D3BF712AB9116651BC3856814D2734FB32C3878E6B105A3E70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence upx
- Executes dropped EXE
- Modifies WinLogon
  persistence
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

© 2018-2026

Terms | Privacy