9b084a8cb3e53ec1a673894d0b66e22b16c9fd8785636b020b2d422f3f2a820e | Triage™

Login
Reports

Overview

overview

7

Static

static

3

[Guru3D]-R...14.zip

windows10-2004-x64

1

[Guru3D]-R...14.zip

windows11-ltsc_2024-x64

1

RTSSSetup737.exe

windows10-2004-x64

7

RTSSSetup737.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...st.dll

windows10-2004-x64

3

$PLUGINSDI...st.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

1

$PLUGINSDI...64.dll

windows11-ltsc_2024-x64

1

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows11-ltsc_2024-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$R0.dll

windows10-2004-x64

3

$R0.dll

windows11-ltsc_2024-x64

3

Codec/rtvcvfw32.dll

windows10-2004-x64

3

Codec/rtvcvfw32.dll

windows11-ltsc_2024-x64

3

DesktopOve...st.exe

windows10-2004-x64

3

DesktopOve...st.exe

windows11-ltsc_2024-x64

3

DesktopOve...64.exe

windows10-2004-x64

1

DesktopOve...64.exe

windows11-ltsc_2024-x64

1

DesktopOve...er.exe

windows10-2004-x64

7

DesktopOve...er.exe

windows11-ltsc_2024-x64

3

EncoderServer.cfg

windows10-2004-x64

3

EncoderServer.cfg

windows11-ltsc_2024-x64

3

EncoderServer.exe

windows10-2004-x64

3

EncoderServer.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
[Guru3D]-RTSSSetup737Build28314.zip
Size 17.2MB
Sample260925-3vbcasssb1
SHA256 9b084a8cb3e53ec1a673894d0b66e22b16c9fd8785636b020b2d422f3f2a820e
MD5 9f667a94fb12fbd1134e5cb685597ae5
SHA1 f25d8df6d3b99207ac798a77482c5ec8b06702fa
SHA512 089384270d92abcd1861e32541d209005479d5fa7da0629e0c95d07f27cd6c3b2bec5cb2eaa56fdd6d42fb299e31f89c052214fbf46994be75ce73bde5dc6cc2
SSDEEP 393216:uWuY9/YEY6fK0l1x9wP5YFZOwrROE6oWRtWl4uT2P6:T9AEY6f1l79whYFUmROjoWzWlW6
TLSH
T1AC07331C4105B7E63E9DD64F24D1ABC07816EABA7193BC3824373729C957570A83AFA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

[Guru3D]-RTSSSetup737Build28314.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

[Guru3D]-RTSSSetup737Build28314.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

RTSSSetup737.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

RTSSSetup737.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/LockedList.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/LockedList.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/LockedList64.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/LockedList64.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

$R0.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

$R0.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

Codec/rtvcvfw32.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

Codec/rtvcvfw32.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

DesktopOverlayHost.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

DesktopOverlayHost.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

DesktopOverlayHost64.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

DesktopOverlayHost64.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

DesktopOverlayHostLoader.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral28

Sample

DesktopOverlayHostLoader.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Behavioral task

behavioral29

Sample

EncoderServer.cfg

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

EncoderServer.cfg

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

EncoderServer.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

EncoderServer.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  [Guru3D]-RTSSSetup737Build28314.zip
- Size 17.2MB
- SHA256 9b084a8cb3e53ec1a673894d0b66e22b16c9fd8785636b020b2d422f3f2a820e
- MD5 9f667a94fb12fbd1134e5cb685597ae5
- SHA1 f25d8df6d3b99207ac798a77482c5ec8b06702fa
- SHA512 089384270d92abcd1861e32541d209005479d5fa7da0629e0c95d07f27cd6c3b2bec5cb2eaa56fdd6d42fb299e31f89c052214fbf46994be75ce73bde5dc6cc2
- SSDEEP 393216:uWuY9/YEY6fK0l1x9wP5YFZOwrROE6oWRtWl4uT2P6:T9AEY6f1l79whYFUmROjoWzWlW6
- TLSH
  T1AC07331C4105B7E63E9DD64F24D1ABC07816EABA7193BC3824373729C957570A83AFA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  RTSSSetup737.exe
- Size 17.2MB
- SHA256 04f4704ced86a68b650bf87156c02e69160e6c049b576661250250beeabaa5ef
- MD5 457478f7c16e3dd8b25c829dd249af9c
- SHA1 66ac07d816b08bd36f992624ab7ba91adb93cfe4
- SHA512 227fbdd7fb5a7c3a4c33892319479c7450f652739e4339de6ec3bc85ad2cd7520a15a8804a22e993573721a6f7021e2bebae33a334f4a9c9d230db608874f587
- SSDEEP 393216:DVuK2BtyEcwROqvt3RQVIkjHuoI6B9h0+v3QP28i2A:DiBUEcwRdv9RQakjOqG+PQPRA
- TLSH
  T14307331F43BC9363ED19D93F14979AF5AC85CF766092E828117A322DBD366202835BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral3 behavioral4
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 4883cd4231744be2dca4433ef62824b7957a3c16be54f8526270402d9413ebe6
- MD5 08de81a4584f5201086f57a7a93ed83b
- SHA1 266a6ecc8fb7dca115e6915cd75e2595816841a8
- SHA512 b72e7cea5ce1f4dc64e65a1f683a3ef9e3fa2dc45cf421f569eb461f1fdcc0caf4ff62a872e62b400579f567c6ff9fc3c2e6e020cdca89d96015502c803a09b9
- SSDEEP 48:S46+/1TKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mLofjLl:zHuPbOBtWZBV8jAWiAJCdv2CmeL
- TLSH
  T12BC1A570B3C248B9C491863378E773D36612EE746784500F9B6311AA38209E7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/LockedList.dll
- Size 28KB
- SHA256 cf1b3d307918e11f4c90888ef65f9cad0302eabf7235187eaad5764646874340
- MD5 84c93011c323095555fcfcbebab4df83
- SHA1 69d6b67f1d73b9cda8397f8e0748b45c91987bd5
- SHA512 c95008dce262608bee2bd2081d456a98e4a9d2814c0bfdd77c9a74394dd3aca373d57975d2c30be5f9af013772abed0a9b924a4e24e266110821147afa5e50e8
- SSDEEP 768:on7n6hKdgWn9Cb22ryBD3fvMkGksfLqo7B:onWhKdne22ryBDvvMPne+
- TLSH
  T148D2090557B444E3F3BE1670386A3B160ABEF92988BAD56B8F3715CA1D75112FA39303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/LockedList64.dll
- Size 9KB
- SHA256 fbe4c84d389b32d3646991f0f59c987d5052ecc0ecbaa4da2bbebd922fd3762c
- MD5 f982f688c44a109382504be756e54a28
- SHA1 0050bf1d09975c9faa34ddf0cc579f3f611b71c0
- SHA512 fa0f10819b6a8d6a298a6274073b466ef5756f00e8dc7fdc786e5e0a8fd0dbb2777eb608d213874a92bd0481a363464f2a615bcde9ed3ed13db12ab338a91ae9
- SSDEEP 192:oDe6qk8regn9R+MO2Sz4p/sAMMmsGA/i9MWDqX:oDe6grPEMO2Sz4CAysN/i9Msq
- TLSH
  T11D12E80177F8168CE4F742749A750A1BBBF5B44A0932971F0570C24E6F1B752BD3ABA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 72fa1a91185fda8b68a49b9ebb8d5ddf00f899f590d1e657a58c229f9bd0a700
- MD5 6581c243481c0ba91ec1bd9fd93f1c30
- SHA1 b00b7fe38b0dbf5576239a8f62f01df7fb993e5d
- SHA512 c882c15e1222929369753addb023fe028dd95345c0b29a5a8c0ba00cbdee45f3a7aacafd9d4cdc5fe86e3676ba958abf841801d73361c4630e7f48ab63725055
- SSDEEP 96:g8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/c3lkCTcaqHCI:tZIKXgk+cx6QYFkAElncviI
- TLSH
  T153F1C776F3D10673F9AB427438232F221B2AF521576581A7450316CE7661CE3FD34B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 acf90ab6f4edc687e94aaf604d05e16e6cfb5e35873783b50c66f307a35c6506
- MD5 6e55a6e7c3fdbd244042eb15cb1ec739
- SHA1 070ea80e2192abc42f358d47b276990b5fa285a9
- SHA512 2d504b74da38edc967e3859733a2a9cacd885db82f0ca69bfb66872e882707314c54238344d45945dc98bae85772aceef71a741787922d640627d3c8ae8f1c35
- SSDEEP 192:MenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBaIwL:M8+Qlt70Fj/lQRY/9VjjgL
- TLSH
  T1BE428D1193B089F2F590593805A67F2A6FBEAC5C27E44A63CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH
  T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 c719697d5ced17d97bbc48662327339ccec7e03f6552aa1d5c248f6fa5f16324
- MD5 ca5bb0ee2b698869c41c087c9854487c
- SHA1 4a8abbb2544f1a9555e57a142a147dfeb40c4ca4
- SHA512 363a80843d7601ba119bc981c4346188f490b388e3ed390a0667aaf5138b885eec6c69d4e7f60f93b069d6550277f4c926bd0f37bc893928111dc62494124770
- SSDEEP 96:ojsvUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3Y/NqkzfS:ojsvWyNO81b8pCHFcM0PuAgkOyhIFc
- TLSH
  T1FE12F892E5A450B3C5D6533A35AA2F2DCBBD5329B0926C00C7738E4D39395BA6E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $R0
- Size 871KB
- SHA256 7865c3e4003778ced6aa3ebcb7fad83421a45a13eb43ea2a5ba303d8e479a4b7
- MD5 0a91221306a3298fba8fd1e0d4be269a
- SHA1 2ecc9696f03fa694aa0ff01e3658bb24e632ed91
- SHA512 01885ebb32e0b4ed703341bc083f721393ab2ac1663ac3aaefcdd31990bca4a103e88afb631041bf1a565cb328fefbe8d60e1463f19f9d33f0b0b1affda64045
- SSDEEP 24576:huBpXNDkxDRsX1sUsJ7mq/ZBx69v9IbzehK9Ko:hqBNgJ7D29Ibzec
- TLSH
  T1AC157C42B5928C63CBD52471CD6AE2791B2D7D2C4BF785F7B290BA3ABD306C1753420A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  Codec/rtvcvfw32.dll
- Size 871KB
- SHA256 7865c3e4003778ced6aa3ebcb7fad83421a45a13eb43ea2a5ba303d8e479a4b7
- MD5 0a91221306a3298fba8fd1e0d4be269a
- SHA1 2ecc9696f03fa694aa0ff01e3658bb24e632ed91
- SHA512 01885ebb32e0b4ed703341bc083f721393ab2ac1663ac3aaefcdd31990bca4a103e88afb631041bf1a565cb328fefbe8d60e1463f19f9d33f0b0b1affda64045
- SSDEEP 24576:huBpXNDkxDRsX1sUsJ7mq/ZBx69v9IbzehK9Ko:hqBNgJ7D29Ibzec
- TLSH
  T1AC157C42B5928C63CBD52471CD6AE2791B2D7D2C4BF785F7B290BA3ABD306C1753420A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  DesktopOverlayHost.exe
- Size 95KB
- SHA256 3d1ea89eafee8b7c4ff7d3e81328a44bd855a99dd6f112dfbcc86342698c2a02
- MD5 7cefd33227619ebb11601f0bf95286b0
- SHA1 6030ad91b46558f27d35a59bfab327229b4022d9
- SHA512 2464d6d2b059c83a8acc01e1d6fda9757b5c4d49af5e42eaa518f1cbd8ec9563c9f4ccd6d8ae7135125e1a005f4a1fedd6d1045de5ddafad05e26e38e9acb1f4
- SSDEEP 1536:Hc26aZKWdI0AEQhoCfdrud8UTzicJqeTnV9twFU9qkxFOM/elqLIB0Titw:Hc26ashoCNuzJqeJ9V9qkxF5/IaIuTiu
- TLSH
  T1F593280376B08072D952C1706865EBAA9EAEEC311B55D5C3BB423B1E3D342D25E74BCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  DesktopOverlayHost64.exe
- Size 107KB
- SHA256 0ba9dc1c4a71e9f779060aeb5e27b2d6ebd19cfb6a8978ca807094be9661d5e3
- MD5 a05408dc7d8efbc00213601bed435be1
- SHA1 8547507719e2648fee7474e28e78e1ad83334dcb
- SHA512 2b7b5e072a78b1cb0a7e5117bb932d735a89488bf40424e255e5a3a8cdab65b63135291cc00f6a5a50e46bdf20a61e118f5b06eed2cdb58c0636968710546da7
- SSDEEP 1536:ujoIw00HLxPCxVOSS+bLELqqq4w3xftxaAXfw7xWOtcIylWTitIG:eW00ZKW24w3pvw7xWkcfWTiqG
- TLSH
  T133B3F30B327500E5D06AC4B9888A9F16EFB1FC961715C7CF1370662E3F722E46EB8295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  DesktopOverlayHostLoader.exe
- Size 25KB
- SHA256 3ce6389323c4bc68f143e159454379cba838aff9f20a6cb74efb0709c87b9983
- MD5 48e36d05beab50980b3ee18fb3d50248
- SHA1 20d7df40996235ed6c707136a763cff95423eceb
- SHA512 04ae315cff4cc260b129faf20e392d945e149a27bf3cd3ed1b0989bf0217c659dd5d8240f290ac2981a7cc064e6b4edb4cc76a05f546392cdc8097c8332fbbca
- SSDEEP 384:pD7BJrXjaFaOTM2N1VGFfC/uVGBkuAo9jb6W6ki2ApxiRggivp0B:pD7BtWFaO42zV4DWkuAsi2ApZL8
- TLSH
  T127C26B47AA394503DB44CEF851E2C4569CB99F838DDED083A7377A243D38382BA594DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral27 behavioral28
- Target
  EncoderServer.cfg
- Size 89B
- SHA256 d505f1850d38d5d6b5d4924cca0f7ed679bbae6ae1ecd8e5c24257fce01f602e
- MD5 d81d3a63c3597a1ac1f61e7862e174f1
- SHA1 416c43386386a8916ae80482aacd5a998e9d4e83
- SHA512 72188bb3629c4938a5b1c93e5be7b8fd87ed3ca946feccf36de4b3acb999585b3edde4bd517a173c32774ce46492bf94819e5a49350135ebb370648478685f14
- TLSH
  T1F3B0122D361E03122C205121FD51018411708413204827218100001E01BF3A1305E213
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  EncoderServer.exe
- Size 72KB
- SHA256 98e57521e497495c5eddf0c70a32210229e3b9aa6279e5f3e1e4a35b7b7178d2
- MD5 5c0a3d836500c2ce34ebcc12bfced34b
- SHA1 f00f9e91c74601cb58f3bf849f01c407c6ab2dc6
- SHA512 b18bd7a3409bf1cdb8ea867e1e29f89391a4351cd9798d3c2661d7e1b99b340318ed573d19efc1d41efeed94b9c7943e291c53439a8d0a95675f44218be26eaa
- SSDEEP 768:Sz9iRKUJZzEFkSskElHwpoT6lHNxgt0HoSViHfdO/AlgWkuAsi2ApZLN8h:Sz9SCFkpHwppHNxxBVes/eTitmh
- TLSH
  T1B77338437A358462D642C5789822D5FA9EBBAD710F99C0C7E2907E2E3C307E06E341DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy