19f5e20eb2532d6455b1685eece088edff04c63cb718ff630f3075218a53f9f3 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

19f5e20eb2...f3.exe

windows10-2004-x64

7

19f5e20eb2...f3.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
19f5e20eb2532d6455b1685eece088edff04c63cb718ff630f3075218a53f9f3.bin
Size 15.9MB
Sample261003-pfppgsztcs
SHA256 19f5e20eb2532d6455b1685eece088edff04c63cb718ff630f3075218a53f9f3
MD5 785e01f6ccc7bbbd6b34508b6132f6d6
SHA1 cf301b408a5213b749d89b545aabf3e2f4ca8399
SHA512 7e602877880b20a8c5b03875f28233cf1a7c7153073adfcd4010d9cfd82e21257930abd3da625b362eb6b8685aacc3c7adf0a15372678e93ea71f097834d08b5
SSDEEP 49152:DOqznUBKpJEIWOk+NMEwiT2r1EyAb8KqY6dlPHdwEf4xUPGWYp0MgaVdxi/q1OK4:CBuWI9wr/mo
TLSH
T17FF69003364811ADD867EBB080722A162AF47C9D8939BF4ECDE46D650F163857FEEB41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

19f5e20eb2532d6455b1685eece088edff04c63cb718ff630f3075218a53f9f3.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery spyware stealer

Behavioral task

behavioral2

Sample

19f5e20eb2532d6455b1685eece088edff04c63cb718ff630f3075218a53f9f3.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery spyware stealer

Malware Config

Targets

- Target
  19f5e20eb2532d6455b1685eece088edff04c63cb718ff630f3075218a53f9f3.bin
- Size 15.9MB
- SHA256 19f5e20eb2532d6455b1685eece088edff04c63cb718ff630f3075218a53f9f3
- MD5 785e01f6ccc7bbbd6b34508b6132f6d6
- SHA1 cf301b408a5213b749d89b545aabf3e2f4ca8399
- SHA512 7e602877880b20a8c5b03875f28233cf1a7c7153073adfcd4010d9cfd82e21257930abd3da625b362eb6b8685aacc3c7adf0a15372678e93ea71f097834d08b5
- SSDEEP 49152:DOqznUBKpJEIWOk+NMEwiT2r1EyAb8KqY6dlPHdwEf4xUPGWYp0MgaVdxi/q1OK4:CBuWI9wr/mo
- TLSH
  T17FF69003364811ADD867EBB080722A162AF47C9D8939BF4ECDE46D650F163857FEEB41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery spyware stealer
- Reads WinSCP keys stored on the system
  Tries to access WinSCP stored sessions.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of NtSetInformationThreadHideFromDebugger
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Credentials in Registry

Discovery

Browser Information Discovery

Debugger Evasion

Query Registry

System Information Discovery

System Network Configuration Discovery

System Time Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryspywarestealer

behavioral2

defense_evasiondiscoveryspywarestealer

© 2018-2026

Terms | Privacy