34b9b34e4d8d08c584867fefc91b142f23a120a537c44065b377e848265fa571 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

WINK_Reset_PRO.exe

windows10-ltsc_2021-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
WINK_Reset_PRO.exe
Size 74.9MB
Sample260912-na4e1svenf
SHA256 34b9b34e4d8d08c584867fefc91b142f23a120a537c44065b377e848265fa571
MD5 7ec04e4f2d2690e3ec0a2a2dfb3d246a
SHA1 b088e085fbbdd20c99c53cd30f77f4a8043cd1f1
SHA512 0a5ff697df96fdc04a8a11dddf11a1608d2defaef3634145c2d56b6b83cb8b8da82c2ef85bec4871637b91b3f4ebe927f87f6e7888f6edb94df55f6566007b96
SSDEEP 1572864:cDIDXQDHPWr6NlfQHAj39UT5tcvEM8Tcl0vQrqxqZ/bC4JuzKY6ub:zcPWSKHw3y/DT60vQrgqZ/btJuzz6S
TLSH
T10F083380FEC781FADC8B1D75206E733FCB3654058528DA67FBE00D15A8B67214DAB25A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence privilege_escalation

Static task

static1

Behavioral task

behavioral1

Sample

WINK_Reset_PRO.exe

Resource

win10ltsc2021-20260911-en

windows10-ltsc_2021-x64

20 signatures

900 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Targets

- Target
  WINK_Reset_PRO.exe
- Size 74.9MB
- SHA256 34b9b34e4d8d08c584867fefc91b142f23a120a537c44065b377e848265fa571
- MD5 7ec04e4f2d2690e3ec0a2a2dfb3d246a
- SHA1 b088e085fbbdd20c99c53cd30f77f4a8043cd1f1
- SHA512 0a5ff697df96fdc04a8a11dddf11a1608d2defaef3634145c2d56b6b83cb8b8da82c2ef85bec4871637b91b3f4ebe927f87f6e7888f6edb94df55f6566007b96
- SSDEEP 1572864:cDIDXQDHPWr6NlfQHAj39UT5tcvEM8Tcl0vQrqxqZ/bC4JuzKY6ub:zcPWSKHw3y/DT60vQrgqZ/btJuzz6S
- TLSH
  T10F083380FEC781FADC8B1D75206E733FCB3654058528DA67FBE00D15A8B67214DAB25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy