6532fdb800b36a6d582089a91a03e2cb37931e295eb590cf6d4dcc08e2f9e2a5 | Triage™

Login
Reports

Overview

overview

7

Static

static

5

6532fdb800...a5.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
6532fdb800b36a6d582089a91a03e2cb37931e295eb590cf6d4dcc08e2f9e2a5
Size 216KB
Sample260908-jdxdnatwaz
SHA256 6532fdb800b36a6d582089a91a03e2cb37931e295eb590cf6d4dcc08e2f9e2a5
MD5 c90aa39c3ab4087bee7b1e7a725869e1
SHA1 981df2f440350c22c4923335a36b5590ddede903
SHA512 f8f65e97d14c4ba84bbee0baad811eef2b7c48cefe39b232b0317aa7c75f593a1a4b2d5bb29b7c7cff8c3d116ead303ab60a5325035f864eb1d695babb188c11
SSDEEP 6144:Nh9wv1Uveh9wv1UsrL36DQ97IiCKJVvlodKA8EgC5:Nh9wt4eh9wt76DcCKJVvlodKAbL5
TLSH
T1C92412B3E4C59934F353CBBB749D6090175659242A538B2B14FB37C2C68E4B81EF79A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6532fdb800b36a6d582089a91a03e2cb37931e295eb590cf6d4dcc08e2f9e2a5.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery persistence upx

Malware Config

Targets

- Target
  6532fdb800b36a6d582089a91a03e2cb37931e295eb590cf6d4dcc08e2f9e2a5
- Size 216KB
- SHA256 6532fdb800b36a6d582089a91a03e2cb37931e295eb590cf6d4dcc08e2f9e2a5
- MD5 c90aa39c3ab4087bee7b1e7a725869e1
- SHA1 981df2f440350c22c4923335a36b5590ddede903
- SHA512 f8f65e97d14c4ba84bbee0baad811eef2b7c48cefe39b232b0317aa7c75f593a1a4b2d5bb29b7c7cff8c3d116ead303ab60a5325035f864eb1d695babb188c11
- SSDEEP 6144:Nh9wv1Uveh9wv1UsrL36DQ97IiCKJVvlodKA8EgC5:Nh9wt4eh9wt76DcCKJVvlodKAbL5
- TLSH
  T1C92412B3E4C59934F353CBBB749D6090175659242A538B2B14FB37C2C68E4B81EF79A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence upx
- Executes dropped EXE
- Modifies WinLogon
  persistence
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

© 2018-2026

Terms | Privacy