b15261829981d69e83a94e41b4640d724678fb01c5a18fe49a8e538f58f8bfb9

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/10/2026, 18:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fi.exe
Size 10.6MB
Sample261012-xmef4aws5q
SHA256 b15261829981d69e83a94e41b4640d724678fb01c5a18fe49a8e538f58f8bfb9
MD5 ada3ac2831911f370d6bb9cbad9ffeb0
SHA1 cf90d6b88823264ea8043378ac0b210ba4acdf03
SHA512 d499ebc0d9eceeee62814c95c08949495d0b5d29bc7e68e560cf7d2443ac97dfda4f40ca51374e0199a65dd411d0350659eb27a330c649f46b236e86d974778b
SSDEEP 196608:Ns5nAuowgMoPrv4QEhs2SV5lien8aLMAo7h5kSZvxiRDRIn:NQLgNTv4fShB8CMbCU5sK
TLSH
T146B6331DA26218A6D8565E3B8891D3FAD5233D2B0770C6CF11E47E633E272E31DF5292
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution

Malware Config

Signatures

Loads dropped DLL 12 IoCs

pid	Process
252	fi.exe
252	fi.exe
252	fi.exe
252	fi.exe
252	fi.exe
252	fi.exe
252	fi.exe
252	fi.exe
252	fi.exe
252	fi.exe
252	fi.exe
252	fi.exe

Executes a command shell one-liner 1 TTPs 3 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2768	cmd.exe
5828	cmd.exe
5448	cmd.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 1 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	fi.exe

Delays execution with timeout.exe 12 IoCs

defense_evasion

pid	Process
2864	timeout.exe
6060	timeout.exe
5820	timeout.exe
1400	timeout.exe
4108	timeout.exe
4716	timeout.exe
4844	timeout.exe
4168	timeout.exe
5664	timeout.exe
1920	timeout.exe
1268	timeout.exe
6020	timeout.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 1612 wrote to memory of 252	1612	fi.exe	90
PID 252 wrote to memory of 2768	252	fi.exe	91
PID 2768 wrote to memory of 5828	2768	cmd.exe	93
PID 252 wrote to memory of 5448	252	fi.exe	95
PID 5828 wrote to memory of 2864	5828	cmd.exe	96
PID 5828 wrote to memory of 6060	5828	cmd.exe	97
PID 5828 wrote to memory of 5664	5828	cmd.exe	99
PID 5828 wrote to memory of 5820	5828	cmd.exe	100
PID 5828 wrote to memory of 1400	5828	cmd.exe	101
PID 5828 wrote to memory of 4108	5828	cmd.exe	102
PID 5828 wrote to memory of 4716	5828	cmd.exe	103
PID 5828 wrote to memory of 1920	5828	cmd.exe	104
PID 5828 wrote to memory of 1268	5828	cmd.exe	105
PID 5828 wrote to memory of 4844	5828	cmd.exe	106
PID 5828 wrote to memory of 4168	5828	cmd.exe	107
PID 5828 wrote to memory of 6020	5828	cmd.exe	108

C:\Users\Admin\AppData\Local\Temp\fi.exe
"C:\Users\Admin\AppData\Local\Temp\fi.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1612
- C:\Users\Admin\AppData\Local\Temp\fi.exe
  "C:\Users\Admin\AppData\Local\Temp\fi.exe"
  2⤵
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious use of WriteProcessMemory
  PID:252
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "start "hydra" cmd /c "for /L %i in (5,-1,0) do (echo %i & timeout /t 1 /nobreak >nul) & echo hello & timeout /t 2 /nobreak >nul""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:2768
  - - C:\Windows\system32\cmd.exe
      cmd /c "for /L %i in (5,-1,0) do (echo %i & timeout /t 1 /nobreak >nul) & echo hello & timeout /t 2 /nobreak >nul"
      4⤵
      Executes a command shell one-liner
      Suspicious use of WriteProcessMemory
      PID:5828
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 1 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:2864
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 2 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:6060
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 1 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:5664
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 2 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:5820
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 1 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:1400
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 2 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:4108
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 1 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:4716
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 2 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:1920
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 1 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:1268
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 2 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:4844
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 1 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:4168
    - - C:\Windows\system32\timeout.exe
        
        timeout /t 2 /nobreak
        5⤵
        Delays execution with timeout.exe
        
        PID:6020
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "ver"
    3⤵
    - Executes a command shell one-liner
    PID:5448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\VCRUNTIME140.dll
Size 121KB
SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
TLSH
T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\_bz2.pyd
Size 71KB
SHA256 c46b2979e25b66827d0361a559e12879b8a250cf5c8771a54db94e4808e00685
MD5 8d28cd65e4ce6ca79c326f9daf2e0a67
SHA1 286b4fab4996a2d90e85664bd4dca3230dfd3ea6
SHA512 8f5cd8c289be8ef87a94ed8314796f4e2be9d3f08c89dbca81452784723a4912142a58bb4d7565744c1a5691403b9d1084050f58bafe48b8ea3f902b800d3fd2
SSDEEP 1536:AENENz793YK4ZnPnomCNsD+Zr/E/8dDCIaR0IKIECV:NENzxoKiomjKpEkdWIa2fIECV
TLSH
T11D634B56B7B666F4F46F90BD8A410323E330BA55036063AFF148829A3F13BD1AD78356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_cffi_backend.cp311-win_amd64.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\_cffi_backend.cp311-win_amd64.pyd
Size 175KB
SHA256 0b5c05bf3e9da14c33566d2c546fb7618ac7fc2b89365a66cfb1082ffe3d898d
MD5 87c57ea3f34d4226c596eb64f72763e7
SHA1 4226786006bc8c924790bd770d07ab3634a6452d
SHA512 2058e5c248cc7deca4d0cbab8ad3ae22ee7baaa2ebdf8289dd03ca7c1c888c8a1580b86cf3b1c017c46c660e0c2cddd4c4b40786bb176d0e043245751ec5f2d1
SSDEEP 3072:kWkpON4k4KPLiOVX+ARhbUvyT2z243Zy5FthZQ2P7RFSTL7Ko3i3gA2Q:krKPLTVRhbUvyCz24sDFFSTLO8Sg
TLSH
T187046C5A328C11B2D6A6513886579B53F3B3B460174197CF01A0C7B52F1BBEA7A7FB80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_decimal.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\_decimal.pyd
Size 237KB
SHA256 5566518542e3ee6dd8cbecbae76e40a30015e82cc04ee4ea768a3cc9fb53f4ce
MD5 a80ed1383173049f9b26ea01b27fa058
SHA1 0e0c9361f18c4df41a8d13cea3c34c66367989ad
SHA512 a8f60aff4123565e5aa2a4977e71e6de386deddf267f9cc3d1d8caa170d66fdf8b5518f54a1c9aee18fe8108cd99bb687ace83c524e05738c31a6621f4dc5856
SSDEEP 6144:HXOksyljLGY7iCIH1VA2Bk9qWM53pLW1At/Idtz:HeTEjiY4H1VA6ln/IHz
TLSH
T1E6345B5AA2490DA4EE778074D8579F47E7B278940360C3CF43A48AA73F576A323BE744
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_hashlib.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\_hashlib.pyd
Size 52KB
SHA256 5f17438d0e3091e6006048c873ce43e7e33d842a2a736500815a56aa8be4bf01
MD5 1a99593df5483910489b9c16cce25b18
SHA1 ef4f8488301577e7a53c2ae354acef37f24ea649
SHA512 3033b22ff61ce6d7ebcaee1ebebd68811e07c5ad5c25a9def226e6982b04fa5ddfce55e6213a2db5c5e1f8a271aca26797c4fcf8b1a8d20fe7b560512bf566e5
SSDEEP 768:lKyUPw0PnfpXx+TSRN24ENp+nfEZWKM0IyIEOIv:lKTY0Pnfph+2YzNafEZtM0IyIEOI
TLSH
T19F33490AF29100E8D56781B9C9A31E87E6F2F15417107BDF4368C28D2F237E396B6B52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\_lzma.pyd
Size 149KB
SHA256 0369454200d4b8deb3959415aae9bb9926e681b14bcb4427e432381fe57ecb27
MD5 38315a763b4266ad431762f51960bfc4
SHA1 f0770073b92879bbd3dd4bcfc254cb233e30ec79
SHA512 bfc3d1144078925d2a5f37c555d6deec3a85ce150e6a357cd2c146e19360f630b08bb504e1b77a30b6fa035c6e157fcb904be021e771ae813e3172e545ba3187
SSDEEP 3072:ohyN1RbBHQrnoe6r5NJuAJKlo/CznfD9mNoKFz2QhskfIEZ1:eQvbBwcVN0FR7YOKFlsk
TLSH
T10FE31891B254F4D6F2228C34C9274F27E7F978495310A29E01DC837D6B2FBB56A6A313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\_socket.pyd
Size 66KB
SHA256 9bc8b64506c21e94457da274573e85777a06b67d4d6b98dddeab4b97172fcef1
MD5 3a13308b8f79efd613fd25f8a092e84f
SHA1 a8a09c96de0e37c117b7ace8adc3150cef1b4e23
SHA512 5c300391a5155a50ca1f81cb1667072cd139f4a4a0ad926446040fbb20603151ece5c7bee3f5d49afdc231fa744742180937cb9d6a4c0fee9d669d963202141f
SSDEEP 1536:3/mbt022h0Y9/s+S+pzMEnrIDOMQLF/0I+IELw:PytbxY9/sT+pzMEEDOtLqrIELw
TLSH
T150633A10A3A051B9D2B3D17AC6335F62F774F4811399A38F4564CA6E5F23782DE3AB81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\base_library.zip
Size 1.4MB
SHA256 6af974e12de7b11a4ae9621f0bd2e244b15fcba4f82731d3d3b12f6111184351
MD5 576a4b58ec43fca1a804e485aca91887
SHA1 4864a50be9734166855df2ee37f919923fddd544
SHA512 43c777a65e26222527541ead4004fc3e805bb5358d606ea4c99b76909733ebcab687809e154cf03dc5fb89eba068df7f7eab7b9ee62417849ab9b95dc4ab5ece
SSDEEP 24576:2fRVda5PydmzgTViQR5pz3cnz/bucEvUFiL3LHH2QjwhH:2fRriQR5pP7W
TLSH
T1806509817982B5F7F804F3BB4026090DB328C5B4BB44C75739ABC1A69F9E6A47E518DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_rust.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\cryptography\hazmat\bindings\_rust.pyd
Size 9.5MB
SHA256 6a42262974f0e086c1f2defaff4ccd9fb25046cf193422135e2dda5b4b29b2a2
MD5 8b80c64e2853a8b5516531148dfeb4bc
SHA1 069ed7c2b7e5852798c36c11bfd23ceb07672684
SHA512 4eac69e27cc0efe93e25f1f07d639dfa3ce64f3b28503c8bf8f90b306c5f540066fea64bf7da8ff5a748d394312f9b77c42a4387945a83ef2f8e9123f719db07
SSDEEP 98304:TAjr9vPjhGgKqrMlBXaP3TTo8Ur2O4Y5P1d4W/DhkmgFTkjZhQHgD+zopeV:C2td4W/qmgFT67QHqo
TLSH
T122A67C25B6A950A8D86AC4B8C34756339B7174DA1B347AFF49D486B92F36BF01B3D300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3-x64.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\libcrypto-3-x64.dll
Size 7.6MB
SHA256 4ef4f59ddc79f232a76e7eee7a7fd91792974ba885011b00acada8debfc14173
MD5 ea124141d5b123353e0141568c373c18
SHA1 db302d86966ca87a30859654a86801cd12ca3519
SHA512 b1befe38003b82c35da945f68f116af9a1f9be447618db88b36b89e2e87a70b8706bfce143fbd6f7c7e9efdf840f65ef0cab1062a727cfa22b8f7b62ad7fa5e4
SSDEEP 98304:I1fp/3ffd/Mjy36hTn4pE7Qvy+b1CPwDvt3uF90CZW:SfpuHEaC1CPwDvt3uF90C
TLSH
T182862857F6BA10D5D8FAC1398293323BB970B86543B457D3A60095AA0F33BF8A93D744
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\python3.dll
Size 54KB
SHA256 8fda4948f6fc2bed1c7d1ece9596a3450c772775e48046c0bf701517d78ae9e3
MD5 026590b165fd202775cb0927a3c958e7
SHA1 2dd40f29c54113c9380e37d28d4dfa8cf828b187
SHA512 36e5c98cfd93c9721b7f8f2ff483b59cf9d375feb73b75f8ba9f155a487ed9b96326dd2d25b9518c331545f718bb52223eb741b5d48646b3874d4f91dbbcc77a
SSDEEP 768:Iw/EsYpkVgBaz57kcDA7QKFmpz7cnzH/ks/KF61xubwmB1Cf//yhC74JFmpktJSh:v/5k8cnzeJe0I+IEL0
TLSH
T1B6431B52AB58F8A6D6F625FC38D29DCD143B12CC83ED88DCA57993D30E5A320A52734D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python311.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\python311.dll
Size 5.6MB
SHA256 06cb189016f6d5a593aba0e4c53ae972f2b7a257373c502e7da80f35f37dc1c0
MD5 0101e392844bad69ff3d24fecd3df2b9
SHA1 1094e6a4a91bbce91d29a0e00fe1ada22fa43be2
SHA512 a27d35bae06d16e35b8e92812ef731274ded6c464634d91382b916a8ef774b4ace936ce3e0294f891db5f67a1375aa24b97b404d796e980eb3617fd1023937e5
SSDEEP 98304:M1T5+PMGxsz72Jbor8fhZUFHnMPHVjrK:M1T0xxS2JbowZPZ
TLSH
T17E466C21B26489A4C8BB8536EE6B435AC7717C106B11DB4B5164B3EE2F337530AEF349
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\select.pyd
Size 18KB
SHA256 ab91970ff8458849e59711e323dc49f09bafe7a650ddcf797fd7242343ebc49d
MD5 c381e282961528e818c15688ee643dea
SHA1 46e782d807af3b725c96be2acf51c09c2e929e6b
SHA512 eded4e4554d9e29f49e0d94b2a6f88240f9ac0bb98520ad4f0e9adadf1adb24846d20641dce78477b720f58adba5018610ed0bc362f9116eee5742a5d11ba00b
SSDEEP 384:Uar1fP1/pqOLlxHqP0smv7AzN57Elna0sj+IEQG:vh1Y4xHqiWOla0I+IEQG
TLSH
T107824C46BBB090E9E1A2C1B3C9770F11D936B631472543CF23A4866D2F27BC2A736B51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unicodedata.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI0000064c2\unicodedata.pyd
Size 1.1MB
SHA256 aa489115a8139de6aa0db51e2c8771c78df430fd7c3c65b714f385833ccc91fe
MD5 6b6a5ea52f84c51f18279d668e620ee4
SHA1 0d474d67a95fa0aef37671a8bc8d96c19b820c36
SHA512 a1e2de1dc529b5b36ee69eef29c3378dfccc396cff53ae8933a1460ffb05414c31a83796fb55fb564cd07b146862bb86352dcf0fbc67b3872715405d2c52adb5
SSDEEP 12288:VdlYbfjwR6nbeonRiPDjRrO5184EPYPx++ZiLKGZ5KXyVH4eDH3:1YbMT0IDJcjEwPgPOG6Xyd46H3
TLSH
T1DA354AC9BB828D66D87B317944D2212F1361C272476B233BB65513285C8B3B74EE6DEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertSubmit.doc.locked

Path C:\Users\Admin\Downloads\ConvertSubmit.doc.locked
Size 378KB
SHA256 48084d0718d78a2a366d9d2f5d1ffc2fc9465140a5a0189e4bbb8bdb3e669432
MD5 86b2aed75f203fff81d11659908173d8
SHA1 b7cd2e36b5dad61c314ca7ac7f9c3399174ca12f
SHA512 e067c62f257e8b70b4fa44358f6fd2ce5086d959f91bbedffefb3cbe5616a3f7b2b2def4834bc4c6f6223ffac5520b1bf6fcb553c2093ec444de588e1efa9929
SSDEEP 6144:vxAf3d/mJ9di2cybqDiglkGV1NNETdEGimNs9onYecsFUBud7BSG1r89PlLRV5F7:vxA0ri5NMeGicsNqUBubS0ri7VX7
TLSH
T1C084235A8B3C38027155CA2479D487D920CC5DCE1B63CB50B6EAF97C72631F28BB6389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableUnregister.xlsx.locked

Path C:\Users\Admin\Downloads\EnableUnregister.xlsx.locked
Size 945KB
SHA256 bf641082c2d3cf5f91c5d4cdc4a1f60087117e0b6c0f6646275160e3fb82fb2d
MD5 d422f5577a431acfc7aa26a13f053dc3
SHA1 b38dfcaf4b05599ebfc11eb308387e42f75903f0
SHA512 0351de4be6c6bdf09a1f912245b94087747cc956ca61193639fa1b7585aedd28ff20947c5a2ae6b81e980c9c14c2ab92fc37cd79bde0663d60b0f8dbb5ea0cda
SSDEEP 12288:fpRXXio1BDcYMgBsjGCi6Opqv5EutHWeW5RTnkQ7FJ8k/y3OVqfc5J6hQV54y5/4:fpRXXZkgejGWJHWH5kQQc8M54y5xqdQG
TLSH
T151253302F52614872AB8B59386BF482B36F2F1E16F91D1F448FEA15F2518C5B7EDC580
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini.locked

Path C:\Users\Admin\Downloads\desktop.ini.locked
Size 574B
SHA256 aab3ae27b719dcc0d13bb9a873a828b2fef0ab4fc3ccc93e4baeb461dfb924ba
MD5 b24c50e3d77e085245e831c37333f760
SHA1 978cdbc993f4ecd75d703166509aa02b15c537fb
SHA512 6536e1d53d88340d5d413b862cfb3015bfe2b68d7a5ce40156a7fd55eac37f7294f4253298ae5b68147b881f098336518e71136698966ea631853543e1554d29
TLSH
T109F02628A835541001C4AD712FCBFAD25A363DB6BF7EF6D3685C1E8C865CDB0D465606
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads