b869a697ea1a996505f628520a8a1fbabf200483928a806d5022dbbd89bc2121 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

spek-0.8.5-beta.msi

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
spek-0.8.5-beta.msi
Size 19.4MB
Sample260910-1b4hmaeg65
SHA256 b869a697ea1a996505f628520a8a1fbabf200483928a806d5022dbbd89bc2121
MD5 38c680da35198a26f9d869a46fe4532d
SHA1 b14ad08d2cf0f01238c2b81c3df6becc2a0730dd
SHA512 32564b65e4ae6d6c50913c19962c50a3024994ce3d62deb86b1afc7045047ce3b39cd476bc591d09ba166162a4a05954f965804c6da5832b0834cf08f297ee42
SSDEEP 393216:ZqarwCaTKMx8RJ05RZqdCxHuRQsKcuAb8A781TsPaS9llf5g+l8:/rRaTKdJoQguRfd8A7aw9lxA
TLSH
T13127337338AE92DEC0352073EA47DEB84A065C319712E44673E67E1B3B76570ADCA472
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence privilege_escalation ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

spek-0.8.5-beta.msi

Resource

win11-20260513-en

windows11-21h2-x64

18 signatures

900 seconds

discovery persistence privilege_escalation ransomware

Malware Config

Targets

- Target
  spek-0.8.5-beta.msi
- Size 19.4MB
- SHA256 b869a697ea1a996505f628520a8a1fbabf200483928a806d5022dbbd89bc2121
- MD5 38c680da35198a26f9d869a46fe4532d
- SHA1 b14ad08d2cf0f01238c2b81c3df6becc2a0730dd
- SHA512 32564b65e4ae6d6c50913c19962c50a3024994ce3d62deb86b1afc7045047ce3b39cd476bc591d09ba166162a4a05954f965804c6da5832b0834cf08f297ee42
- SSDEEP 393216:ZqarwCaTKMx8RJ05RZqdCxHuRQsKcuAb8A781TsPaS9llf5g+l8:/rRaTKdJoQguRfd8A7aw9lxA
- TLSH
  T13127337338AE92DEC0352073EA47DEB84A065C319712E44673E67E1B3B76570ADCA472
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation ransomware
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Installer Packages

Privilege Escalation

Event Triggered Execution

Installer Packages

Defense Evasion

System Binary Proxy Execution

Msiexec

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalationransomware

© 2018-2026

Terms | Privacy