38af609ca6d6e40e2feb589d48f99b8b2a28f77d3f4f66ef7b431655ef584223 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Kleinstadt...14.exe

windows10-2004-x64

7

Kleinstadt...14.exe

windows11-ltsc_2024-x64

7

Microsoft....ck.dll

windows10-2004-x64

3

Microsoft....ck.dll

windows11-ltsc_2024-x64

3

Microsoft....nd.dll

windows10-2004-x64

3

Microsoft....nd.dll

windows11-ltsc_2024-x64

3

Microsoft.DirectX.dll

windows10-2004-x64

3

Microsoft.DirectX.dll

windows11-ltsc_2024-x64

3

NAudio.dll

windows10-2004-x64

3

NAudio.dll

windows11-ltsc_2024-x64

3

Signalling.dll

windows10-2004-x64

3

Signalling.dll

windows11-ltsc_2024-x64

3

Update.exe

windows10-2004-x64

3

Update.exe

windows11-ltsc_2024-x64

3

de/Common....es.dll

windows10-2004-x64

3

de/Common....es.dll

windows11-ltsc_2024-x64

3

de/Kleinst...es.dll

windows10-2004-x64

3

de/Kleinst...es.dll

windows11-ltsc_2024-x64

3

de/Kleinst...E].pdf

windows10-2004-x64

3

de/Kleinst...E].pdf

windows11-ltsc_2024-x64

3

de/Kleinst...E].pdf

windows10-2004-x64

3

de/Kleinst...E].pdf

windows11-ltsc_2024-x64

3

de/Signall...es.dll

windows10-2004-x64

3

de/Signall...es.dll

windows11-ltsc_2024-x64

3

de/index.html

windows10-2004-x64

3

de/index.html

windows11-ltsc_2024-x64

3

en/Kleinst...es.dll

windows10-2004-x64

3

en/Kleinst...es.dll

windows11-ltsc_2024-x64

3

en/Kleinst...me.pdf

windows10-2004-x64

3

en/Kleinst...me.pdf

windows11-ltsc_2024-x64

3

en/Kleinst...er.pdf

windows10-2004-x64

3

en/Kleinst...er.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Kleinstadt_3.5.0.14.exe
Size 12.1MB
Sample260930-p5mlesff89
SHA256 38af609ca6d6e40e2feb589d48f99b8b2a28f77d3f4f66ef7b431655ef584223
MD5 3af45639e527bc6fce278170c47d7cf8
SHA1 23f297708fa5f3a8db71a58e1a704d401bd651ea
SHA512 b313966d49a11cf8ba04963f6aa7788a88d0cf08b4d760c55d1534eae1467645d6d960c8d9628e2eac8078e769cd843049e60b804dead149a9999a9472ba7391
SSDEEP 393216:GuBSqU7FgccrInaodbstBO4ia0gxJ9QdF:xMhBgccrMivFialQdF
TLSH
T157D63317A8F42AC6E2579733A9502665AFF265374DCF4E1351079C2E23370BAEF680B4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery installer spyware

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Kleinstadt_3.5.0.14.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

Kleinstadt_3.5.0.14.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral3

Sample

Microsoft.DirectX.AudioVideoPlayback.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

Microsoft.DirectX.AudioVideoPlayback.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

Microsoft.DirectX.DirectSound.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

Microsoft.DirectX.DirectSound.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

Microsoft.DirectX.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

Microsoft.DirectX.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

NAudio.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

NAudio.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

Signalling.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

Signalling.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

Update.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Update.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

de/Common.resources.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral16

Sample

de/Common.resources.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral17

Sample

de/Kleinstadt.resources.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

de/Kleinstadt.resources.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

de/Kleinstadt_Timetable_SortedByTime_[DE].pdf

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral20

Sample

de/Kleinstadt_Timetable_SortedByTime_[DE].pdf

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

de/Kleinstadt_Timetable_SortedByTrainNumber_[DE].pdf

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral22

Sample

de/Kleinstadt_Timetable_SortedByTrainNumber_[DE].pdf

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral23

Sample

de/Signalling.resources.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

de/Signalling.resources.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

de/index.html

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral26

Sample

de/index.html

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

Behavioral task

behavioral27

Sample

en/Kleinstadt.resources.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

en/Kleinstadt.resources.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

en/Kleinstadt_Timetable_SortedByTime.pdf

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral30

Sample

en/Kleinstadt_Timetable_SortedByTime.pdf

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral31

Sample

en/Kleinstadt_Timetable_SortedByTrainNumber.pdf

Resource

win10v2004-20260911-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral32

Sample

en/Kleinstadt_Timetable_SortedByTrainNumber.pdf

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Malware Config

Targets

- Target
  Kleinstadt_3.5.0.14.exe
- Size 12.1MB
- SHA256 38af609ca6d6e40e2feb589d48f99b8b2a28f77d3f4f66ef7b431655ef584223
- MD5 3af45639e527bc6fce278170c47d7cf8
- SHA1 23f297708fa5f3a8db71a58e1a704d401bd651ea
- SHA512 b313966d49a11cf8ba04963f6aa7788a88d0cf08b4d760c55d1534eae1467645d6d960c8d9628e2eac8078e769cd843049e60b804dead149a9999a9472ba7391
- SSDEEP 393216:GuBSqU7FgccrInaodbstBO4ia0gxJ9QdF:xMhBgccrMivFialQdF
- TLSH
  T157D63317A8F42AC6E2579733A9502665AFF265374DCF4E1351079C2E23370BAEF680B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops desktop.ini file(s)
behavioral1 behavioral2
- Target
  Microsoft.DirectX.AudioVideoPlayback.dll
- Size 52KB
- SHA256 406f473429573e9f0084aae125ef8f19f59291aa4c33cf7d40e7d996995a3238
- MD5 75933586afd94ea24c5acd3dbc89a272
- SHA1 970fd4b49d1368330c10279798991b901a233c2a
- SHA512 c096f0f11fb306c6a84886826306fe9c2862c3c79b14a8991a174224b41c2a68b76e5be506494d23d354384c715c5d82a1cacffff9644de9d6b93e9478087a1d
- SSDEEP 768:/BJPuUm+QFYqG9se2k5R7vtv8+80t2TxJNdfr83A/E9t3DAsm:7u8qYqK6k5R7O+80tKxJN983aErm
- TLSH
  T1DB33B8054784C167D36E07B6907A13718739A1B187A6F7C3141A42E22D7B3EDEB782EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Microsoft.DirectX.DirectSound.dll
- Size 174KB
- SHA256 2e28c8fb8b87b5ffd1e0ea27710a2e785ef4741a89e4b3c3af726ec63d15a1fa
- MD5 d035348ec8968861af585b7132fe4c7b
- SHA1 877ffdf77b9cdc1be14135cff0b756a231401617
- SHA512 94358b581510c68049ac92990674a6cb495cb8ff005f7fc03696c57ba8b4cb384c5035d9332d0ea39093ba5fa5c8082143896cd2fc7ac24a192520789c707458
- SSDEEP 1536:QP0W6HY2WLuj4eWGolnfI8srFxq1tu5uxMc7q2eFrIuQD+hDLb:2p6HTLEeWvS8Q5uxMc7qdFrIuQD0
- TLSH
  T12E04740D5340D63FD61E57B059C20B666639408A5322B6EF0189967578FE3CAC83AAFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Microsoft.DirectX.dll
- Size 218KB
- SHA256 942e98f142373547493f13b14e1603b2420851aff013d3085bada7b6b2214d9c
- MD5 0c453970e89db1c1eb9de087e6eab5ba
- SHA1 c4c7e034773a240909332814f499730575a1cd71
- SHA512 ef3b2cc2598b4ea58f00f93155319674450c8c35b706108ce3bbb5c2502efa179046d9d50e12725e6dc7a555f4880404ed03de15a0753606f20a1654799886fb
- SSDEEP 6144:o/JepwLNyV1VYTduT/iQanWWdQeeaQee0QeesQee4SQeehQeeZ+M:CjLYV1yTALKl
- TLSH
  T1DD24290173FC652BF1877AB54FCE92A9F12FD6C5434262CB109407AB6E94AC697322F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  NAudio.dll
- Size 320KB
- SHA256 d2f61b2f636782f3db9cdf42b8849a94acee0edab11766b157cb5650cd4bf253
- MD5 f84c1ecba4701533a66279cb72d097b2
- SHA1 03685a1df652108a140e29b4b6ac1f5e4fefdd43
- SHA512 a400e8cdcba1b7eb8005b7460cb5fb45ea81204540b50df494ecf3911411a476c5b47b9930b0a344885e95c40cab3b0126051ff79815f9d1e66856dd7caf9b97
- SSDEEP 6144:208gRgP13SmAmiQ3UIlZB7YZuYu0qM92pYrGJoOYO4QOBEWM:a2gPNB7WxmG3c
- TLSH
  T105647B541BF45666D47F23B8E0E215068BB0F1527827E70E4BE415BE3CB37A1CA817AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Signalling.dll
- Size 5.8MB
- SHA256 18dea720949c18ebe923fa06b978c51ac5086514dd0b4797f15b07e800d8e2ca
- MD5 d8be3cf946bb0f513619deff4d3c8eac
- SHA1 b7db85e0ed75ce46cec539ca99b62a7a49b354a3
- SHA512 86f2a633db210c8560401dd7e71b3389c30cf0c68bacf7fbb6da9686c2c369c1113612458612dde43666efbb4e73d420f5ef2d242ba835895daa405d235ed256
- SSDEEP 98304:MQL0JxUGD+TUwkDo97OFVSSkceK+lBGumfQaGA49R:MQIxUGD+TYs9qT5JEGumYaGV9R
- TLSH
  T1B556CF10B3F4AD1ED87E87B5403141250BF2FE8A77A2F75DAE05A1AD2DA27015F427A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Update.exe
- Size 907KB
- SHA256 6afc7e3aef6f2a3921fb58733dbd3a69799c8710a7462a8cee16a6f52c58782f
- MD5 b8c0619ad438fec6508fa02eff6fb430
- SHA1 86d5143ad21a008dc50fdfd475e8c9d4d390c988
- SHA512 06d07cb3c4f7619daffbe6c70e2d9bd19f6a40ad0e06ba16474fac935c8c88554a32ab9bee30348b287f5de975cfe3d9f5113e19d840daaae46c358e72654b55
- SSDEEP 6144:L01N3Zt755ic1N3Zt755iSN1N3Zt755i:YH5sUH5sYH5s
- TLSH
  T1AA15FF643F10C627F7A6277578B1AB348B614DF1E068C31B4AB263B4147B55AFB360CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  de/Common.resources.dll
- Size 24KB
- SHA256 e68796303c94892f78e12f199c04b207b023f27572412a62005583dd0cbf0e85
- MD5 a5e380a46af68d0f6b1148774f96bd16
- SHA1 9c679a5e24dc63632715104091e43c76387290e1
- SHA512 c0d89a2eebfd550c0dac5e850032e6751384d113c881044df5e5d95923679d0edefd33d6b181de6d463618c66123e1fbb37f3c33069058fc349dfa589e5b530f
- SSDEEP 384:DXRa09+cn9RXb399t9r97949L9qXK9S9D9/oXRau9Ncx9BXwu9o91K9GvZXd9BoK:N3heQE
- TLSH
  T1AEB2CE3237965028C9B55B331834F2C1637BBA59BF68CB2D559A231C5FB22139B12F62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  de/Kleinstadt.resources.dll
- Size 3.0MB
- SHA256 80f2f258712dfba259382c3f26f7d98b8323bc492080be7484a7a966cf426d69
- MD5 aefcfbbdd0cac70b0e78e8f09f3b6977
- SHA1 8b9febd2936c4b27de3c0f27f966e3ac567147fe
- SHA512 f9286505385616574a94db2bd8d163b96e67083ef83b9c8b1c44f746220d34bd27f4df10c1a720b8092ec261df7481c674373e0a91da5da4bbb78128cdaf94bf
- SSDEEP 24576:Jxeg3rW+I6+YDwU+I6+YDwj+I6+YDwVTbmURxiVrn:JxC+I6+YDf+I6+YDK+I6+YD
- TLSH
  T1EEE5E9D5D701C82AC2344AF19C215CA0911FFA6CA6768C345C5FFABFF4F2521BA9264B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  de/Kleinstadt_Timetable_SortedByTime_[DE].pdf
- Size 100KB
- SHA256 3398ff3770fce0103e6827df83dfc7e4c3539a279df5a2f9034d55103b7208e3
- MD5 221e376e2ff51c436cd1b1de63424ec2
- SHA1 35352966cc8922aa75f73f9ac66038103788dfc8
- SHA512 e88189634fac3cdd11b1c0857a0dc5ea2ea8c765ddeccbd1a4a9b376c45e16405aae5e3960046199a816165b221e4a36feaf9edee922c319fdefaa9a0c0a4006
- SSDEEP 1536:K4gouwuEsoMpJUXgOBm0LZE7m/G+IShQNPcuUgJsBlw7zziLwh:qoFYJWE75zS6PcuUgsBlwvuu
- TLSH
  T190A3E036C9D62CEEF891CA42A1B5B52D497C364BC5CC74C6273D4B896340C89E267EE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  de/Kleinstadt_Timetable_SortedByTrainNumber_[DE].pdf
- Size 92KB
- SHA256 eb6db09e8184ae6687eb525f5e4b51fc284b2a2414099282479021e1a3dc9b58
- MD5 967c4d5ede1947528c9b1f16f94d1441
- SHA1 517e8d09f759ac2b8d9e28f0a2047494e0ca6a7f
- SHA512 c454c4003b4022972b00b810c37303e83910b957baeac6f99de4b1497f1b6ed891a11f9896409b735fa28df2b5183368818c6f0621c1a043280b6490e2e4f46a
- SSDEEP 1536:I0Fwq1jg6KkRK9u8N19oc4bFnjCBbmry+Mo98dgscuUgssBlw7zzik0:gq1jXX+79oHnA4UdvcuUbsBlwvuF
- TLSH
  T17593E001D5967CEDF881C6459172783E423FB217C6CC34D626AE0F8AA350CADD967AE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  de/Signalling.resources.dll
- Size 64KB
- SHA256 33c0f389f2a0bd4fdff5c589a982dff202a66425b4d1677e49f75e12473c173a
- MD5 2a5b88d5f57b127481d88251a8599970
- SHA1 e4a5bbbe3b100c715bc9c23f99e5a5fb2b11ca5e
- SHA512 9fea6ae16f05503d09edc4db363874d856dc265af657d5d5e4c8a88305fc2f01fb86f61ca86f263e1bbd3132d1b6b763d925b44c6cb8ca6401b06594ce661b65
- SSDEEP 384:oXY9S9F9u94XRa9D9p9r9mcz9X9qn95cx9JP9gXJ9c9LXG9iXD9S9z9U9m9I9N9f:pakt3ZknCKiL
- TLSH
  T10D537D303BE75158CAA867311C34E6C1227BBB5ABF28CB2D655E130C9E726139B11F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  de/index.html
- Size 2KB
- SHA256 59ad0b206034047633d7343292097815cdf5acc8f3b0c38d150da0f653e6e5d4
- MD5 dad5950f1d033dd1594b375cbd6c20f6
- SHA1 e933e375980837328627b0a0fc0e5fabe3f160ad
- SHA512 08d00dcdd5c077031d4b207d49868fce6f454b41fe3a3a2b9b12713172915fd425e52a95ad99aec07450295338914e808bce6d48f4e2e145131a6be7e289ed11
- TLSH
  T1F441651A344CFB24838B47DB90762B29B567D682E3736408FCF782B3DBC9045946B59B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  en/Kleinstadt.resources.dll
- Size 5KB
- SHA256 7973430c3391e1d48c55dcd1f17227fb9898054ddfe20e8ccecddf39da582588
- MD5 d03d34c5309736ae3ca917ee130ddcb3
- SHA1 83e67016caa163ead9bfef79f915f514741cf48a
- SHA512 3f5f4ac45bb78e4b4ad6c09502490965af928dd489351adafe8000f31c23839edd930f2671906db6d3f39ad8dfd160b6240b5ec2a1002f6745718f44a28ed5f2
- SSDEEP 96:4oXRaswjTLHF9f9N9b9+ca9tlXkVv8sW4z:4oXRa/9f9N9b9+ca9ttEEsWS
- TLSH
  T1CCB1102177A2211DD9710B72287693C16376BE14BF65CB2D168A531CAE33263EF21F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  en/Kleinstadt_Timetable_SortedByTime.pdf
- Size 95KB
- SHA256 d5b5913cc43404cca854c42d761f8b192b1e49fb8c383da484013040a899741b
- MD5 dbd2b21370207435f10d04e67eec6b6a
- SHA1 f23bded4621410ad1f8f16b86dae04530470d710
- SHA512 45464e344f0c449dc240631ec81017c44ecf675ea9ceafeb8b536e4a3b13757f3cfa7899024ed82ce7adb653434147110e11e6e47906cbeb8825d786414f38b4
- SSDEEP 1536:sQb6HkBYzRQPgQpLv/GWY2WL6cvAz3LcuUgW7O/Oa9IFu:j6RRQPgQXGWpCvAz3LcuUl7O/7
- TLSH
  T115A3E116C8A75C6CF852EF05D039386D04BC725686D8BCD62AAF4F84E340C99AB57DE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  en/Kleinstadt_Timetable_SortedByTrainNumber.pdf
- Size 87KB
- SHA256 a117e9ed0dbb39954f58efd81a243784b6741c34da300488f1278508b577552a
- MD5 0860d47d5d5f599409f947149dc22dc3
- SHA1 15b5798a899c82e374a375f5cd05f3dc308d26ff
- SHA512 c8b2aaba9f65532b77517c0059d7ff3e79f857b5df4e46cd98015eab1d410af1b727206c46dd67184daa192dc4555609875008694af5ec091b066aae9ebd822a
- SSDEEP 1536:0mIr4NRqwuTgulU3ZbEzgt4VJvs+cixxYOGf8Kfw9n/93Lw48ngEcuUg27O/Oa9s:0EqwuzO39E0CSZZ0K49nBKZcuUH7O/u
- TLSH
  T17393D060DAEABCADFC82C64A8578347D4ABD710AC0C8B4C2349F4F42B704C955B37AD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

adwarediscoveryspyware

behavioral20

adwarediscoveryspyware

behavioral21

adwarediscoveryspyware

behavioral22

adwarediscoveryspyware

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

adwarediscoveryspyware

behavioral30

adwarediscoveryspyware

behavioral31

adwarediscoveryspyware

behavioral32

adwarediscoveryspyware

© 2018-2026

Terms | Privacy