972d5f43063c6d3656346e8cac0a6bccc464b4ef7ae65e281d256778382ffa12 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

setup.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 3.8MB
Sample261011-qyb2saae76
SHA256 972d5f43063c6d3656346e8cac0a6bccc464b4ef7ae65e281d256778382ffa12
MD5 c94b1e98d828f24ce14ceadd507e1bf9
SHA1 523c71c3115aebe335a78057cf2d37f99643391c
SHA512 05523098cfdfa75fa6664aeb8e169d5c281b0c2645a3d59573272ffa8071b9cdb6c0efbf6fb3b9fb3106b2db331692969b0047a64cfcb7d6346fcd01dbfc9ed4
SSDEEP 98304:+EqdV6JWGMSUEI4izSUfqs6SbimhteW5TNnSwpjBl/FbJ3f:+b6JWvEViz1qsZbii5BXpjBh1Jv
TLSH
T10C062330BDB1C031D37376704D79F26624EE69302E355A9F63D81ABE1FB44926B04A6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

setup.exe

Resource

win11-20260911-en

windows11-21h2-x64

6 signatures

150 seconds

defense_evasion discovery execution persistence privilege_escalation

Malware Config

Targets

- Target
  setup.exe
- Size 3.8MB
- SHA256 972d5f43063c6d3656346e8cac0a6bccc464b4ef7ae65e281d256778382ffa12
- MD5 c94b1e98d828f24ce14ceadd507e1bf9
- SHA1 523c71c3115aebe335a78057cf2d37f99643391c
- SHA512 05523098cfdfa75fa6664aeb8e169d5c281b0c2645a3d59573272ffa8071b9cdb6c0efbf6fb3b9fb3106b2db331692969b0047a64cfcb7d6346fcd01dbfc9ed4
- SSDEEP 98304:+EqdV6JWGMSUEI4izSUfqs6SbimhteW5TNnSwpjBl/FbJ3f:+b6JWvEViz1qsZbii5BXpjBh1Jv
- TLSH
  T10C062330BDB1C031D37376704D79F26624EE69302E355A9F63D81ABE1FB44926B04A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution persistence privilege_escalation
- Modifies Windows Firewall
  defense_evasion
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy