9ef0d2a74aea814e3dda8e2a047f8caa4504a19b719682ae3f6daf52787e613b | Triage™

Login
Reports

Overview

overview

7

Static

static

3

9ef0d2a74a...3b.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
9ef0d2a74aea814e3dda8e2a047f8caa4504a19b719682ae3f6daf52787e613b
Size 648KB
Sample260912-tfz8fazerc
SHA256 9ef0d2a74aea814e3dda8e2a047f8caa4504a19b719682ae3f6daf52787e613b
MD5 1a95e7134b59a33444c7dc75078dca5e
SHA1 de7dd797c8fdc59d8daf0d5baacb991e97810dba
SHA512 909e871f316e3d8eac13adb1713a435aeecf60c81247ba14a98cc201a1eb38130762ead49b26dc5d6fa6af76c0a3aca656dcba4d959b6262197e8ccb3c2e384b
SSDEEP 12288:ZNGG3U3ITEmUbqLELjJ/8UAZjQRqJnWlZ7IVhC77P1+oZunWO:JAIAmUbqoHF8UAZjkq0lZcVhUzqj
TLSH
T1D6E4D055FAB414F9E273817CCD734601EA727C9A07609BCF23A44A962F236D19E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

9ef0d2a74aea814e3dda8e2a047f8caa4504a19b719682ae3f6daf52787e613b.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

8 signatures

150 seconds

discovery execution persistence

Malware Config

Targets

- Target
  9ef0d2a74aea814e3dda8e2a047f8caa4504a19b719682ae3f6daf52787e613b
- Size 648KB
- SHA256 9ef0d2a74aea814e3dda8e2a047f8caa4504a19b719682ae3f6daf52787e613b
- MD5 1a95e7134b59a33444c7dc75078dca5e
- SHA1 de7dd797c8fdc59d8daf0d5baacb991e97810dba
- SHA512 909e871f316e3d8eac13adb1713a435aeecf60c81247ba14a98cc201a1eb38130762ead49b26dc5d6fa6af76c0a3aca656dcba4d959b6262197e8ccb3c2e384b
- SSDEEP 12288:ZNGG3U3ITEmUbqLELjJ/8UAZjQRqJnWlZ7IVhC77P1+oZunWO:JAIAmUbqoHF8UAZjkq0lZcVhUzqj
- TLSH
  T1D6E4D055FAB414F9E273817CCD734601EA727C9A07609BCF23A44A962F236D19E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence
- Executes dropped EXE
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistence

© 2018-2026

Terms | Privacy