04a61f01f7e2d2107816d985cb4117802b3cc6b4839b8b5606c68437f140c189 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

04a61f01f7...89.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
04a61f01f7e2d2107816d985cb4117802b3cc6b4839b8b5606c68437f140c189
Size 9.2MB
Sample260908-ray23sfh97
SHA256 04a61f01f7e2d2107816d985cb4117802b3cc6b4839b8b5606c68437f140c189
MD5 77bd8b92903adff41d6c8f8e9f12fa6a
SHA1 1dce5d1f1ce04c1497818c449fdf5c377cb7d23f
SHA512 598e62949f45ab8fc698eb93f2e12c1e0c9332b316f979f2977f6e1b9eb4453bf41c24e1be04d0617d96abcc2334476ac2f60df8e4e6104fbe482e4542cf025d
SSDEEP 98304:c0DNZmAfFrt01I1p67YLGA3nPVgUP5AFm+se4XmLh0NnSMyn0WOqKbFWfONVeAmw:RFEIpLJqUmJsbK0NXWDKKee/sHikIySM
TLSH
T174A6131BE6A384ECC52FC17487679672AA30FC29063479BF1A94D7312F21D909B3E764
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

04a61f01f7e2d2107816d985cb4117802b3cc6b4839b8b5606c68437f140c189.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion

Malware Config

Targets

- Target
  04a61f01f7e2d2107816d985cb4117802b3cc6b4839b8b5606c68437f140c189
- Size 9.2MB
- SHA256 04a61f01f7e2d2107816d985cb4117802b3cc6b4839b8b5606c68437f140c189
- MD5 77bd8b92903adff41d6c8f8e9f12fa6a
- SHA1 1dce5d1f1ce04c1497818c449fdf5c377cb7d23f
- SHA512 598e62949f45ab8fc698eb93f2e12c1e0c9332b316f979f2977f6e1b9eb4453bf41c24e1be04d0617d96abcc2334476ac2f60df8e4e6104fbe482e4542cf025d
- SSDEEP 98304:c0DNZmAfFrt01I1p67YLGA3nPVgUP5AFm+se4XmLh0NnSMyn0WOqKbFWfONVeAmw:RFEIpLJqUmJsbK0NXWDKKee/sHikIySM
- TLSH
  T174A6131BE6A384ECC52FC17487679672AA30FC29063479BF1A94D7312F21D909B3E764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion
- Enumerates VirtualBox registry keys
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Looks for VMWare services registry key.
  defense_evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasion

© 2018-2026

Terms | Privacy