3aafe117e5d910475e89ccc76894ffe7c7a34cc9dab0a485edd1930125f9032b | Triage™

Login
Reports

Overview

overview

7

Static

static

3

3aafe117e5...2b.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
3aafe117e5d910475e89ccc76894ffe7c7a34cc9dab0a485edd1930125f9032b
Size 793KB
Sample260910-q99gesdj2z
SHA256 3aafe117e5d910475e89ccc76894ffe7c7a34cc9dab0a485edd1930125f9032b
MD5 61a8df92cad724f8827c1550d61c32c4
SHA1 8f5afc4c22cccd3a8c9337dc9e6e05926b4fa669
SHA512 e15924eaf01da381ca002ec9f690fb8bf078093a8c806fefcbc858e0ac37ea8f88aa7d20313566dfee22bd0eeeb46bbf5f83b3ec4bc154038eebf6b527299f7e
SSDEEP 24576:6SLsBK0dhrjx3MbwJsuO2KFnCR0CXvhCS:jLoKcrwwJsN2KFCRBX5r
TLSH
T19E05BE1673F81A29F8F39E305C359F29DA3BBC30AE35E72D1694215E1D35A129920B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

3aafe117e5d910475e89ccc76894ffe7c7a34cc9dab0a485edd1930125f9032b.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  3aafe117e5d910475e89ccc76894ffe7c7a34cc9dab0a485edd1930125f9032b
- Size 793KB
- SHA256 3aafe117e5d910475e89ccc76894ffe7c7a34cc9dab0a485edd1930125f9032b
- MD5 61a8df92cad724f8827c1550d61c32c4
- SHA1 8f5afc4c22cccd3a8c9337dc9e6e05926b4fa669
- SHA512 e15924eaf01da381ca002ec9f690fb8bf078093a8c806fefcbc858e0ac37ea8f88aa7d20313566dfee22bd0eeeb46bbf5f83b3ec4bc154038eebf6b527299f7e
- SSDEEP 24576:6SLsBK0dhrjx3MbwJsuO2KFnCR0CXvhCS:jLoKcrwwJsN2KFCRBX5r
- TLSH
  T19E05BE1673F81A29F8F39E305C359F29DA3BBC30AE35E72D1694215E1D35A129920B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy