bfdb4e964a9bd972f3946b43c5962e35a3859c8bc3cc639c6ab1277373d9f065 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

memz_payload.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
memz_payload.exe
Size 1.5MB
Sample260930-tff5kayhpc
SHA256 bfdb4e964a9bd972f3946b43c5962e35a3859c8bc3cc639c6ab1277373d9f065
MD5 2a81a07e2aec3a507aebccfcf82a8ddc
SHA1 00078a9a4a214716555461d8db363dbf71675e59
SHA512 ca009db83e23aa83a39facca47cc18e49e82021471e7ea0ab8b52ea49dbd27ec4053cb55701432403ab0824dd333e558402e303a7745ee5fa337a0afe7bff17d
SSDEEP 24576:T90RLgMROWi1cDG/Wx1QWhnMXRpvlGB7n6sBtXR7hfw:TOZg+OWV1h6UnV7T
TLSH
T1DE754B03A7E6CDEAC896B73591CB2719B634FC5017A3ABCB531052216E537D99E3EB00
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery evasion execution impact ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

memz_payload.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

9 signatures

150 seconds

defense_evasion discovery evasion execution impact ransomware

Malware Config

Targets

- Target
  memz_payload.exe
- Size 1.5MB
- SHA256 bfdb4e964a9bd972f3946b43c5962e35a3859c8bc3cc639c6ab1277373d9f065
- MD5 2a81a07e2aec3a507aebccfcf82a8ddc
- SHA1 00078a9a4a214716555461d8db363dbf71675e59
- SHA512 ca009db83e23aa83a39facca47cc18e49e82021471e7ea0ab8b52ea49dbd27ec4053cb55701432403ab0824dd333e558402e303a7745ee5fa337a0afe7bff17d
- SSDEEP 24576:T90RLgMROWi1cDG/Wx1QWhnMXRpvlGB7n6sBtXR7hfw:TOZg+OWV1h6UnV7T
- TLSH
  T1DE754B03A7E6CDEAC896B73591CB2719B634FC5017A3ABCB531052216E537D99E3EB00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery evasion execution impact ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Modifies boot configuration data using bcdedit
  ransomware evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Windows Management Instrumentation

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Indicator Removal

File Deletion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionexecutionimpactransomware

© 2018-2026

Terms | Privacy