d77b009fbea32aa41c165b4f354e818fbee4e9cc7d408f2716d86071df47decb | Triage™

Login
Reports

Overview

overview

7

Static

static

3

d77b009fbe...cb.exe

windows10-2004-x64

7

d77b009fbe...cb.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
d77b009fbea32aa41c165b4f354e818fbee4e9cc7d408f2716d86071df47decb
Size 438KB
Sample261017-evspksht5j
SHA256 d77b009fbea32aa41c165b4f354e818fbee4e9cc7d408f2716d86071df47decb
MD5 92b90098e9116ab02a2d1692316c9ce8
SHA1 16ffbb549e3fb98b3c8486f89e1ad6365e2a6ff2
SHA512 e9f6a428d274629f62a407f21e0bff9a12c76954059e20a2e05cc0306dcf86260c638df885cc54a0cb18d2b5c8d3dc19a9b6abcec9ebad162f77e8a2c210a0b1
SSDEEP 6144:dCv92/4uAx0N9DsseXzM8qGl+hxaxGVDLl/FRgTTDA5BCGqUucOBEzg:gV2/4x0NK6Sl+he8//gTT/dBEzg
TLSH
T1D5943948DA5390F2E9A384B03646FBBF1521FD308436CCA1F294EF95BA73DA69509317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d77b009fbea32aa41c165b4f354e818fbee4e9cc7d408f2716d86071df47decb.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

8 signatures

150 seconds

defense_evasion discovery persistence

Behavioral task

behavioral2

Sample

d77b009fbea32aa41c165b4f354e818fbee4e9cc7d408f2716d86071df47decb.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

8 signatures

150 seconds

defense_evasion discovery persistence

Malware Config

Targets

- Target
  d77b009fbea32aa41c165b4f354e818fbee4e9cc7d408f2716d86071df47decb
- Size 438KB
- SHA256 d77b009fbea32aa41c165b4f354e818fbee4e9cc7d408f2716d86071df47decb
- MD5 92b90098e9116ab02a2d1692316c9ce8
- SHA1 16ffbb549e3fb98b3c8486f89e1ad6365e2a6ff2
- SHA512 e9f6a428d274629f62a407f21e0bff9a12c76954059e20a2e05cc0306dcf86260c638df885cc54a0cb18d2b5c8d3dc19a9b6abcec9ebad162f77e8a2c210a0b1
- SSDEEP 6144:dCv92/4uAx0N9DsseXzM8qGl+hxaxGVDLl/FRgTTDA5BCGqUucOBEzg:gV2/4x0NK6Sl+he8//gTT/dBEzg
- TLSH
  T1D5943948DA5390F2E9A384B03646FBBF1521FD308436CCA1F294EF95BA73DA69509317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery persistence
- Deletes itself
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistence

behavioral2

defense_evasiondiscoverypersistence

© 2018-2026

Terms | Privacy