2e898bbd1d639f5066416961a2a458dba7c3455c0e8f49c7f130e9281d700377 | Triage™

Login
Reports

Overview

overview

7

Static

static

1

AmneziaVPN...1).exe

windows10-2004-x64

7

AmneziaVPN...1).exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
AmneziaVPN_5.0.1.5_windows_x64 (1).exe
Size 87.7MB
Sample260910-wnfvwatcre
SHA256 2e898bbd1d639f5066416961a2a458dba7c3455c0e8f49c7f130e9281d700377
MD5 1bdb93acca6265b97d03ee15c88a0480
SHA1 e39311fc63c9b141f513cc1be6053aeb7c89a3d4
SHA512 f91713d1f954da27020c3481c45f359c0a9ae510acda33a84a5e4ec81510562fba03fb1b3737ce15fc5319c9f9f24f3a3ad28d71f5441262135c984b361d292f
SSDEEP 1572864:sVhoMT6c/qjYv4FkgY0ZhQcy9Wk/w3AuQazM5WvqKBqKhVBIn1vSRxV:Epmi0pZygkIPxM52XA1vS5
TLSH
T1D318F157B2E510D4E4BAC0398B179513FBB1B81A1330ABEB12A0A6562F77EF05D7E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence

Static task

static1

Behavioral task

behavioral1

Sample

AmneziaVPN_5.0.1.5_windows_x64 (1).exe

Resource

win10v2004-20260513-en

windows10-2004-x64

21 signatures

150 seconds

defense_evasion discovery execution persistence

Behavioral task

behavioral2

Sample

AmneziaVPN_5.0.1.5_windows_x64 (1).exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

19 signatures

150 seconds

defense_evasion discovery execution persistence

Malware Config

Targets

- Target
  AmneziaVPN_5.0.1.5_windows_x64 (1).exe
- Size 87.7MB
- SHA256 2e898bbd1d639f5066416961a2a458dba7c3455c0e8f49c7f130e9281d700377
- MD5 1bdb93acca6265b97d03ee15c88a0480
- SHA1 e39311fc63c9b141f513cc1be6053aeb7c89a3d4
- SHA512 f91713d1f954da27020c3481c45f359c0a9ae510acda33a84a5e4ec81510562fba03fb1b3737ce15fc5319c9f9f24f3a3ad28d71f5441262135c984b361d292f
- SSDEEP 1572864:sVhoMT6c/qjYv4FkgY0ZhQcy9Wk/w3AuQazM5WvqKBqKhVBIn1vSRxV:Epmi0pZygkIPxM52XA1vS5
- TLSH
  T1D318F157B2E510D4E4BAC0398B179513FBB1B81A1330ABEB12A0A6562F77EF05D7E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence
- Creates new service(s)
  persistence execution
- Stops running service(s)
  defense_evasion execution
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistence

behavioral2

defense_evasiondiscoveryexecutionpersistence

© 2018-2026

Terms | Privacy