5b0a948e001b9578721e1750b85a1ad72b01e262cf24f6fee578a57dcb684547 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

5b0a948e00...47.exe

windows10-2004-x64

8

Resubmissions

11/09/2026, 06:02

260911-grysjafh3510

10/09/2026, 11:22

260910-nglhsabm9w8

10/09/2023, 09:07

230910-k3pwjsfh8t10

Sharing

Copy URL Twitter E-mail

General

Target
5b0a948e001b9578721e1750b85a1ad72b01e262cf24f6fee578a57dcb684547
Size 242KB
Sample260910-nglhsabm9w
SHA256 5b0a948e001b9578721e1750b85a1ad72b01e262cf24f6fee578a57dcb684547
MD5 cc86b034549ae055fc8d778fe39c1549
SHA1 7ad52cf3eb54a907c906e5cb428b2b79ca85f9c0
SHA512 6210ab8b55876413f04cfd70a13ee9c9a3543e4b49de1edc554503b012ce0f81dc57fe9491f723852b18a02622555c99f34c04370f51755e8735deedfbc8b058
SSDEEP 3072:VjGDNkILk8KjYWVOYO/U0+OTCog9A6J8BE6Gy7BK2He3ypiwVJ6lbwVHZ53G+h:xGDNJL+Y/vjnHbGuFayp9lzG
TLSH
T1D8348C1365E0BC72D66707344F2EAAEC3B6EB8515E204757365C3E6E1B302B1C62B326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware discovery persistence spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5b0a948e001b9578721e1750b85a1ad72b01e262cf24f6fee578a57dcb684547.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

adware discovery persistence spyware

Malware Config

Targets

- Target
  5b0a948e001b9578721e1750b85a1ad72b01e262cf24f6fee578a57dcb684547
- Size 242KB
- SHA256 5b0a948e001b9578721e1750b85a1ad72b01e262cf24f6fee578a57dcb684547
- MD5 cc86b034549ae055fc8d778fe39c1549
- SHA1 7ad52cf3eb54a907c906e5cb428b2b79ca85f9c0
- SHA512 6210ab8b55876413f04cfd70a13ee9c9a3543e4b49de1edc554503b012ce0f81dc57fe9491f723852b18a02622555c99f34c04370f51755e8735deedfbc8b058
- SSDEEP 3072:VjGDNkILk8KjYWVOYO/U0+OTCog9A6J8BE6Gy7BK2He3ypiwVJ6lbwVHZ53G+h:xGDNJL+Y/vjnHbGuFayp9lzG
- TLSH
  T1D8348C1365E0BC72D66707344F2EAAEC3B6EB8515E204757365C3E6E1B302B1C62B326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware discovery persistence spyware
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Power Settings
  powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
  persistence
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Image File Execution Options Injection

Power Settings

Privilege Escalation

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencespyware

© 2018-2026

Terms | Privacy