243ed9ed2951c26d27801afbb4cc5fa92ed6395f8f388c6d432b62012c9f3684 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

gvim_9.2.0000_x64.exe

windows10-2004-x64

7

gvim_9.2.0000_x64.exe

windows11-ltsc_2024-x64

7

$0/$0/libiconv-2.dll

windows10-2004-x64

1

$0/$0/libiconv-2.dll

windows11-ltsc_2024-x64

1

$0/$0/libintl-8.dll

windows10-2004-x64

1

$0/$0/libintl-8.dll

windows11-ltsc_2024-x64

1

$0/GvimExt...-2.dll

windows10-2004-x64

3

$0/GvimExt...-2.dll

windows11-ltsc_2024-x64

3

$0/GvimExt...-8.dll

windows10-2004-x64

3

$0/GvimExt...-8.dll

windows11-ltsc_2024-x64

3

$0/GvimExt32/$R0.dll

windows10-2004-x64

3

$0/GvimExt32/$R0.dll

windows11-ltsc_2024-x64

3

$0/GvimExt...-2.dll

windows10-2004-x64

1

$0/GvimExt...-2.dll

windows11-ltsc_2024-x64

1

$0/GvimExt...-8.dll

windows10-2004-x64

1

$0/GvimExt...-8.dll

windows11-ltsc_2024-x64

1

$0/GvimExt64/$R0.dll

windows10-2004-x64

1

$0/GvimExt64/$R0.dll

windows11-ltsc_2024-x64

1

$0/autoloa...old.js

windows10-2004-x64

3

$0/autoloa...old.js

windows11-ltsc_2024-x64

3

$0/autoload/ada.js

windows10-2004-x64

3

$0/autoload/ada.js

windows11-ltsc_2024-x64

3

$0/autoloa...ake.js

windows10-2004-x64

3

$0/autoloa...ake.js

windows11-ltsc_2024-x64

3

$0/autoload/cargo.js

windows10-2004-x64

3

$0/autoload/cargo.js

windows11-ltsc_2024-x64

3

$0/autoloa...ext.js

windows10-2004-x64

3

$0/autoloa...ext.js

windows11-ltsc_2024-x64

3

$0/autoloa...ete.js

windows10-2004-x64

3

$0/autoloa...ete.js

windows11-ltsc_2024-x64

3

$0/autoload/decada.js

windows10-2004-x64

3

$0/autoload/decada.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
gvim_9.2.0000_x64.exe
Size 11.1MB
Sample260908-ppaxpazshw
SHA256 243ed9ed2951c26d27801afbb4cc5fa92ed6395f8f388c6d432b62012c9f3684
MD5 bd6c1bd25e17c4ab71dd9881ccb08d8c
SHA1 b2d49708e4454c7504a70be903bc84c46febd165
SHA512 34933ee044cf21d867ab48c47ef54c9b30062cac2241bf92e061b7286778e74fca90740ca4f1e4050ac2ffaf537099ec992e69a6e2fa7eed7cd07488855f4b69
SSDEEP 196608:zvzLcN2wvjpLJK1spJ8AKM+k3BukeCTq+lNgFi0gah5jn2N0v:zvz47PKepJvMQdqMii0gk5jn22
TLSH
T101C63355BC96401BCFAEC737FFBEDCA6862352B45C977C036A2D0B4F9CA42241746622
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

gvim_9.2.0000_x64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

gvim_9.2.0000_x64.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

$0/$0/libiconv-2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

$0/$0/libiconv-2.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

$0/$0/libintl-8.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

$0/$0/libintl-8.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

$0/GvimExt32/$0/GvimExt32/libiconv-2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$0/GvimExt32/$0/GvimExt32/libiconv-2.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$0/GvimExt32/$0/GvimExt32/libintl-8.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$0/GvimExt32/$0/GvimExt32/libintl-8.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

$0/GvimExt32/$R0.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

$0/GvimExt32/$R0.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

$0/GvimExt64/$0/GvimExt64/libiconv-2.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

$0/GvimExt64/$0/GvimExt64/libiconv-2.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

$0/GvimExt64/$0/GvimExt64/libintl-8.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

$0/GvimExt64/$0/GvimExt64/libintl-8.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

$0/GvimExt64/$R0.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

$0/GvimExt64/$R0.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

$0/autoload/RstFold.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

$0/autoload/RstFold.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

$0/autoload/ada.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

$0/autoload/ada.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

$0/autoload/bitbake.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

$0/autoload/bitbake.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

$0/autoload/cargo.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

$0/autoload/cargo.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

$0/autoload/context.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

$0/autoload/context.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

$0/autoload/csscomplete.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

$0/autoload/csscomplete.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

$0/autoload/decada.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

$0/autoload/decada.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  gvim_9.2.0000_x64.exe
- Size 11.1MB
- SHA256 243ed9ed2951c26d27801afbb4cc5fa92ed6395f8f388c6d432b62012c9f3684
- MD5 bd6c1bd25e17c4ab71dd9881ccb08d8c
- SHA1 b2d49708e4454c7504a70be903bc84c46febd165
- SHA512 34933ee044cf21d867ab48c47ef54c9b30062cac2241bf92e061b7286778e74fca90740ca4f1e4050ac2ffaf537099ec992e69a6e2fa7eed7cd07488855f4b69
- SSDEEP 196608:zvzLcN2wvjpLJK1spJ8AKM+k3BukeCTq+lNgFi0gah5jn2N0v:zvz47PKepJvMQdqMii0gk5jn22
- TLSH
  T101C63355BC96401BCFAEC737FFBEDCA6862352B45C977C036A2D0B4F9CA42241746622
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $0/$0/libiconv-2.dll
- Size 1.3MB
- SHA256 5a082e1994eb3fa60b034619044646485317d24ffd250531355b9fc5a0573a0c
- MD5 4f213acd28f6e2c5cdf1af00f8035be6
- SHA1 3c5a7f1ef95d30776c8388dc60b1f9d0e4621ae0
- SHA512 e1a52a2e1c47b7b921a22ffa426ccf1851955514438b18b04e03534d7c214976d5d003ff30b82d289bfd4798cdfbc1b5b38afe2598d88247df99b8e79b2d0fd6
- SSDEEP 24576:f3XQQBAUZLY3wPKo6VbbTiZGavkg3NyeuQ6l9fH+fI0UNFn:fhBAUZLYgio6EZGaXBuQQ9emNFn
- TLSH
  T16055BE95F7C2CF2BEA178674C8AE5726B636EC112B1387333A6473781D337E05A84616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  $0/$0/libintl-8.dll
- Size 470KB
- SHA256 b30024ba72490933958690a3a50fd42d2bfec5d968a05f0b9ce9ea0cf879112c
- MD5 27f48bd56e7ef709d3b729d00a762dcc
- SHA1 7944230b13b71f9df6831d766f4a382f3ed3b203
- SHA512 cb3b1ae258f7b2273f28cbedd6a9ec33551930dc22e4e2c638708e152d67c8d92759a15ed91c40af73f81a0cf17e0241cabc138cdccd34facd9c7c60aa33e214
- SSDEEP 12288:ATgJL4MR6NLBHIsF2L4vp7WliSKeTRHFQK:xJL4MR6NLBHXF2L4YYSKeTRHFz
- TLSH
  T15CA48DCAEAC59CA7DA16443595DF83723331B69217E79B371924A3382F07ED0BE85207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  $0/GvimExt32/$0/GvimExt32/libiconv-2.dll
- Size 1.3MB
- SHA256 28c6833d93d3f78b6031a99485c7ab793aa8d1109f193860bf6fa8c1542e80f2
- MD5 9ed6b20762c06aeca388104b06c43f88
- SHA1 2a8eea10b1a3f86ac95dbccad4c4cf22c2b82a8c
- SHA512 5dd1cdd47064216cc80df1beb068fe47d995883356a887649ea54ac8b54c8cfc7cdbc13a0f0a2da7f803c9e29aea035b7f3bde2748dc434a711b0c19ab7e2efa
- SSDEEP 24576:xLije6F/imvBAUZLYnwPKo6lbbTCpGavkg3NyeuQ6l9fHOf2sLnliLT:xLije6ZZvBAUZLYwio6UpGaXBuQQ9u2d
- TLSH
  T14B55DF95F3C2CF23F92786B59DAF5B679126EE525B138333BA2433986D333E0558011A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $0/GvimExt32/$0/GvimExt32/libintl-8.dll
- Size 444KB
- SHA256 75ee4b31efb99ab0b5bc373c8dc0ca8a49ff3543ce7b8ed9589bb894e55b707f
- MD5 b45b50af7b1c59dddde060e61357a413
- SHA1 15d4f2cda35e3213474c0bd0722c40dd95b2e126
- SHA512 d014f3e2e28e6266e4fd41e4030c37d9867b34b9f8820425ce016c3c9cff26a08dfc7a201f7d1272487a29ebdd73a351e54d119f719744810789686fd8d88180
- SSDEEP 6144:kThnffpNASKif0Wr6r9rNY6F8cHDdGLLtNeg8I1c90n8MLZI:kNHAO16hh5TMLZNj8EznPLi
- TLSH
  T141A48EC2EB8E9CF2D91205358DDF43AB2334F3715A828B27DA3C6D715A136D26945E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $0/GvimExt32/$R0
- Size 129KB
- SHA256 0c2b3e575ac52562f9ac8b1f569ef2941cc0843cfdca1bfcdde46b11b947bf4e
- MD5 ca9748112cfeb98fc1156e7276a2b7c1
- SHA1 acb58d05cfe436d5045437f990f4283a46861d3b
- SHA512 f0a2b92c7404a1acf2b6c33ea2385172ece7f4521755b9b32ad2e683a5fb999a23e4313424ad47fc8b9acac35d99d04fbae9eec6fbb0c8d5034d57979b7ca711
- SSDEEP 3072:I2sX0RZ1gcH4b7AxxFMQ7OQ6nM95JNH34Sh0R5vM4acPFVLV5:I2XrA7KxFMQ736nM95rX3m+cPD55
- TLSH
  T16CD38D81B2D1C071D8B60E7449719B6D9B3EB8701F60BEEB138419BE5E705C09FF4A6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $0/GvimExt64/$0/GvimExt64/libiconv-2.dll
- Size 1.3MB
- SHA256 5a082e1994eb3fa60b034619044646485317d24ffd250531355b9fc5a0573a0c
- MD5 4f213acd28f6e2c5cdf1af00f8035be6
- SHA1 3c5a7f1ef95d30776c8388dc60b1f9d0e4621ae0
- SHA512 e1a52a2e1c47b7b921a22ffa426ccf1851955514438b18b04e03534d7c214976d5d003ff30b82d289bfd4798cdfbc1b5b38afe2598d88247df99b8e79b2d0fd6
- SSDEEP 24576:f3XQQBAUZLY3wPKo6VbbTiZGavkg3NyeuQ6l9fH+fI0UNFn:fhBAUZLYgio6EZGaXBuQQ9emNFn
- TLSH
  T16055BE95F7C2CF2BEA178674C8AE5726B636EC112B1387333A6473781D337E05A84616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  $0/GvimExt64/$0/GvimExt64/libintl-8.dll
- Size 470KB
- SHA256 b30024ba72490933958690a3a50fd42d2bfec5d968a05f0b9ce9ea0cf879112c
- MD5 27f48bd56e7ef709d3b729d00a762dcc
- SHA1 7944230b13b71f9df6831d766f4a382f3ed3b203
- SHA512 cb3b1ae258f7b2273f28cbedd6a9ec33551930dc22e4e2c638708e152d67c8d92759a15ed91c40af73f81a0cf17e0241cabc138cdccd34facd9c7c60aa33e214
- SSDEEP 12288:ATgJL4MR6NLBHIsF2L4vp7WliSKeTRHFQK:xJL4MR6NLBHXF2L4YYSKeTRHFz
- TLSH
  T15CA48DCAEAC59CA7DA16443595DF83723331B69217E79B371924A3382F07ED0BE85207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  $0/GvimExt64/$R0
- Size 150KB
- SHA256 9dc872774115ae3930b9eabcb1584b1321925ee8cb2595d1785dc05727d0b2d4
- MD5 ea0cbd789e92ca81113f749491cfbf92
- SHA1 e0ec7a9e83f38ddca9a6cc6033b4bca3ad079cc3
- SHA512 6e8bc25f6066b21464756d8fb37fc36de910b6623bcc10bbf21ccc66b4affee818f47ada80f783ae07e9762c11c4570d3e7c99870434dfacd759f09392ec09f2
- SSDEEP 3072:CYqXcxGgm1s6rGLUNuAwRgrJJr/KNNbGD2LFGl:+SLVoDwmrJ5/Iym
- TLSH
  T1CCE33B17B3A500A9E0B792398963564EF772B8114720BBEF436042752F236D39DFEB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  $0/autoload/RstFold.vim
- Size 1KB
- SHA256 4094381de7517b81b25e6210a1a47da1400c03bbc8d74b75c4cc266016578a63
- MD5 bba04b62206caf76d489838bae2b3747
- SHA1 ebe7a34c477037a826c8898874f88a1f141d207a
- SHA512 8f849040e5e8b85db8adce70304c86efb6201e3b5f8e7b0b81ce0ba9bd3aebcaadb1837dd9471ebaccaa9e9dae44a5af700a49ab53b187c04ae4613ccaf1af11
- TLSH
  T1584140B765217A912AF38A35E01A950E13556B230288D0B8F47A60F43FB316956F3FD4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  $0/autoload/ada.vim
- Size 22KB
- SHA256 e255b88f78d2572ad30cbd8e75bf06c27f5673f30f80a5d0b51339d366e214ff
- MD5 4cfd215b4febd65a5ccbb674204803e3
- SHA1 59c8bbf7836a6ed509bb346b970546e6a7f9f7a7
- SHA512 28803c83354977912c70dbd3bade6661298c59ef014e39f605ba131e9bcd71e60c76294d038dd9e93bdfece31a1266b75da75fe29a8535cc3cdb054d2b65cb9a
- SSDEEP 384:1rctjQfjYJgSvivJVu0BajrdVNBDiitAsLtDTnVqV1:1e8QgFmwaFAWDVqV1
- TLSH
  T145A2C9F26F8C16619242E526A24EC806D3799277F912585DB41DC0CC6F4E268C2FE7FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  $0/autoload/bitbake.vim
- Size 3KB
- SHA256 4714df0bcef91f62fb75922f7333b18f06ead901df33d79e2408566ceb0107bb
- MD5 1804e141019ddb87f40c08e7b5d93e0b
- SHA1 46cef365218e98f6798dd82a84eff3fd3dd1838e
- SHA512 04b50f39ed20148376a3c247bb7d5fbd6b19c3851ee84a18a0e465f43864f606305032f9238cd6c9ae053f3cc31104db81a20b4a0257befdc755831699392715
- TLSH
  T136515222EC952AF023A3C10E76C5B1AEF3A99A3B575C8150B01C02BC3F6252893FD7C5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  $0/autoload/cargo.vim
- Size 3KB
- SHA256 b2e6790a96f953feb6807fbb1de0c3194a3e2dac5f652bdd9d543760e10fe6a2
- MD5 b228b2c832c4d26200abf3b53755bd36
- SHA1 fd64b91a05ced8ad06ee2d86c91a5d88cdb19520
- SHA512 20ee4bb219b93a0baa53ae88f57ff9b22395dc51f6ee2d8848f85319e033f23fbee7c9e65b5536930003c852bbe143665a7a9e6b6d96f749afdc7fe7b27a2515
- TLSH
  T157818A7C232435E417079A7D191FAF2D516206F7329681D878DEE6E01FA249D02E2BDF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  $0/autoload/context.vim
- Size 2KB
- SHA256 8a851c97ea83aba10f984f5a5bbb8dea8cc408ee807d801aa42f51d453e50961
- MD5 51e1942cf27cf11b748cb0045b07f9a7
- SHA1 dcc2a1c16a5f519322f743dd3f598259d265eaf3
- SHA512 c8a140664b76db0a7f6f2c46eaf2348d308e3ec699f658a67695e18737b60040091468dbede3656e686e8b147c1ae737b19504063706e14c8c71ed23079d4c16
- TLSH
  T1AD5134B19A8E72946FB6C00ACB85A407069CE8274B15C9BCF9CCC97067CE418D5FB7E4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  $0/autoload/csscomplete.vim
- Size 42KB
- SHA256 c1df69b3109930d2f8babc266b0f8324ff8cb03b03938e40c58e498496ba08ac
- MD5 97ca062165a94a49419837f2b3c77669
- SHA1 bf26584f13ffd1e5744af1430be7f0acf3a62b6f
- SHA512 763eee870916013029b24dd5d333eb341dd671092b25182d3b671dcc33241d114cd8c478ce31076cb5eafd32f5c83f9511187641a0aa25e2dbed43075d6b5800
- SSDEEP 768:u7YM1Tx5SvgmP4QJuQ6pg58v9SBojgb2Dblt6UVUIobDVjfIMEaW5l9JtqpzUrnf:u7HTx5SvI4iD4l7l391qIHK64nbL
- TLSH
  T1EB13FC32F912252348A6C52D778C96495169482BF20528EE748CC4A9BFCED7C1AF1FFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  $0/autoload/decada.vim
- Size 2KB
- SHA256 4266c82309bc7fef1e18308bfe6de4d27c115202863f83bccf8c08c0edd5a772
- MD5 60105676bd7ceff9a3008ecb3713b6e1
- SHA1 94bec8216f5a488b5e76075070f6230c370a79a2
- SHA512 50dbcdbf9aa2856788fc61498fe004d6e0223124bca5ab16c04840cbfa46147b18d3d655158a4e0b1e11eabd2bd7a849d670a9578384455814416d6a0fd94762
- TLSH
  T15D51649C2E820C727703D4A6451AC42CFA7457B7359A281CBD6CD1C87FA283A03EE5AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy