df05c23d2e5f3a92315d1c654f43a1ab52bf1a21f27b3965272345a4caf5d51e | Triage™

Login
Reports

Overview

overview

7

Static

static

3

生产加�...��.exe

windows10-2004-x64

7

生产加�...��.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
df05c23d2e5f3a92315d1c654f43a1ab52bf1a21f27b3965272345a4caf5d51e
Size 10.3MB
Sample260925-v7a83asdrf
SHA256 df05c23d2e5f3a92315d1c654f43a1ab52bf1a21f27b3965272345a4caf5d51e
MD5 a18148759844bc143c0d64062512363e
SHA1 d09e9216985831397c553726236d25208f714b0d
SHA512 d1eb8746ab6abedc469a0471b33a8cc7cff4504534e9a8829934670b830dd1a51b44b8c4a530955a2e0ba8e05f86c4a059f04ef4b8281d4aceae3536438f2b25
SSDEEP 196608:aQxuKKU8KpqmTLhh3LGM+OpmEcfYOpp5V8sC1Xqr3WHV1HryH9MyLp6FI2KgLXW:Du8vpBfhxLGMm4CXCY36rK9Mo6FI2KCm
TLSH
T15EB633426D970BD5C4D9DC2F298167AC8FAA6521888EA71BC873F7C51FC13F6D7028A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution pyinstaller trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

生产加工erp防误报版.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

defense_evasion discovery execution trojan

Behavioral task

behavioral2

Sample

生产加工erp防误报版.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

defense_evasion discovery execution trojan

Malware Config

Targets

- Target
  生产加工erp防误报版.exe
- Size 10.5MB
- SHA256 ae9e4dc543ff886d792ed3ba7dd82bce2e56e0570e8e879489a7ff9057b7b6d5
- MD5 9ed96f65d0f22e3b16b2dccb174a6dbd
- SHA1 05545137e8203fdbb8f4ba2b0a03299a79a88255
- SHA512 f4081929813fc90bf2cecb3738a9ebf1eb8a9139068f542fbb8946bfb93771462bb2a1b02a6ee7d4e1251c31fe1d65144c0302cdb6c748845004ecfdba9e2234
- SSDEEP 196608:pNwZXL2Vmd6+D/Wc/f/+SWuPDnYxTRw/r4Ee8OjAHIn7I7tORGncgZ3:pNuL2Vmd6mOc/eG7Yx4rc8vq72ORGncW
- TLSH
  T155B63341BBA406D6E4EB9539C8A2C139DF7778200BA5D7CF86B4D3552FA33E15A32360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutiontrojan

behavioral2

defense_evasiondiscoveryexecutiontrojan

© 2018-2026

Terms | Privacy