137a995505c72014d395769530c2060b5eaa7ca9345fedb2d03a86446905e84f | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Potassium.exe

windows10-2004-x64

7

Potassium.exe

windows11-ltsc_2024-x64

7

autoexec.lnk

windows10-2004-x64

3

autoexec.lnk

windows11-ltsc_2024-x64

3

msvcp140.dll

windows10-2004-x64

1

msvcp140.dll

windows11-ltsc_2024-x64

1

scripts.lnk

windows10-2004-x64

3

scripts.lnk

windows11-ltsc_2024-x64

3

vcruntime140.dll

windows10-2004-x64

1

vcruntime140.dll

windows11-ltsc_2024-x64

1

vcruntime140_1.dll

windows10-2004-x64

1

vcruntime140_1.dll

windows11-ltsc_2024-x64

1

workspace.lnk

windows10-2004-x64

3

workspace.lnk

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
OpXOyuApWKTlFzrV.zip
Size 11.5MB
Sample261017-vwt7ssw1ex
SHA256 137a995505c72014d395769530c2060b5eaa7ca9345fedb2d03a86446905e84f
MD5 8e8c7a3f3de17d070703212cfd75c1a4
SHA1 bf754a6ea8302d987014b067ef10a657071ff9d8
SHA512 b1b56b85f306fc13274e4f6f8186d4b4f88425ad0ac562e312cfbcb86eef6e66b3f46c09e6fae885b1cb76a02d9f9a7bfafd7b4964faabf3508a4aa71f7e297e
SSDEEP 196608:qGGbZ1k7x2ezvI/rV2f+ug0+raKW9uOe68Y/X/wIOtPtDdjj6D0FBQf6vO8YtcPD:qVjwE/rqGraKW9uOe684pOZtP26vdclE
TLSH
T1D8C633613BC5E85EFB0CDC652A663DA6E5C08D08CBE9F492987D0DD30B315B20B17BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Potassium.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

14 signatures

150 seconds

defense_evasion discovery execution trojan

Behavioral task

behavioral2

Sample

Potassium.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

defense_evasion discovery execution trojan

Behavioral task

behavioral3

Sample

autoexec.lnk

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

autoexec.lnk

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

msvcp140.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

msvcp140.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

scripts.lnk

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

scripts.lnk

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

vcruntime140.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

vcruntime140.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

vcruntime140_1.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

vcruntime140_1.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

workspace.lnk

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

workspace.lnk

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  Potassium.exe
- Size 25.4MB
- SHA256 e9cdc917d71daaf861ae462d85483d0f4cb55e1c9b4181ac4dd237e6a5f192f2
- MD5 dac208f02a69b032f7cb0512ff2a5e1d
- SHA1 99cc090bdcda9482f6882ae41bf4364335054496
- SHA512 78da85607e12e34d963611ab6024834838d42a7e12bc162fe458f4cec4a8ef4bb98792180847774b4bb26b83f39331fbf74db2e93afc0ed35701e815cff8f9e8
- SSDEEP 196608:JsqJtqlfcOnRXcd4pEBkvLSQxR5m0KJNTTH1/+30vVUksmLHjL5HD:OlfznSd4pESvLSI9KfTXfJLHjNj
- TLSH
  T19B473A257B5A996CD05BC474838B4A729A7130CB0B35B9FF449492782F7EAF42F38358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  autoexec.lnk
- Size 1KB
- SHA256 006d6168d27c62c347d1b5c3c493f9d9f47d4f24998cd1ed4e6af55386d2a745
- MD5 a2f6abf50bc9a739d90905aa42153343
- SHA1 4bb0b291fd763628bc10770ed2ca015bae3d2380
- SHA512 d898517c1e201b2b32c2765aa4486bea8190275f12cefa2a93eb44658d693507ecc81f7e27450507e3b392c2f9640d63d3d341d5b1b20677d62ff68d8b172a3e
- TLSH
  T17B311F1D5ED51720CBB988B617AF2306E76324527BAA4D2606448A4E1A22542BE58F1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  msvcp140.dll
- Size 544KB
- SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
- MD5 bc88b387cafa556068b5c5d6ff3ccc8f
- SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
- SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
- SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
- TLSH
  T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  scripts.lnk
- Size 1KB
- SHA256 00ee5ac203f530c285231a8d1055764ae6bc6056812b2ff6b2b400c13eedb4e1
- MD5 368718555cd69e85c33ab66442815cdb
- SHA1 8e2eda2fe3c0a6c853cd471e17a271883f87c42f
- SHA512 3e235efa55411fcb8aee573ea8a81298302ebb0003ba20a42e81cf2cb79d7969cd684e009ca2d4e03610225705c9f28e70933dc33c2be16a2683e2d92a536359
- TLSH
  T18131325D9DC80F31C5F58C7757AF2706DB6054627F9E9D260E94828D1E22A02EC54F1E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  vcruntime140.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH
  T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  vcruntime140_1.dll
- Size 48KB
- SHA256 1f2d41c4aa5db0bc33ebf7b66d72943a817d7ce6cbe880502a9403823633093f
- MD5 cd1b08f4930b276ad78853580b76b5c6
- SHA1 a0330279d3d0d47f19ed984726e25260b547a228
- SHA512 6bcdd6b16d815d72dc7efd6a2352319ece102f3b7d85c648286e4b3b594b7670d61b7e05c580fc416421e1a1622b38737b1e90080171384e7e2cd5e37ac71225
- SSDEEP 768:g3oZYctpzcx0pdESASv83Tw4DYEOMg9z7NONRds9zb:kc6wk3TgEqz7N6Rdkzb
- TLSH
  T140236BE4977C4082D8ABA870C1E6EE17BD38F7A61B10968B07A5D14C1E537D1AB3D31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  workspace.lnk
- Size 1KB
- SHA256 24ab09465ffc09f89917a776325062f23b679456a0d36799b4cab65242f7dbd4
- MD5 4cf25c84d3e866e83709df8a6601df61
- SHA1 89258dd5f24a2d681702e950f491f200fe4d0941
- SHA512 760096b6983d8b9276398e216211b858835e016e7e348838cc59af4f1d3927652cc61d2fa96ca3847dc00b820888516ea76d4dfa7612cc426e14ff26f1e1fc83
- TLSH
  T1C231351E59C95E35C6F6C83527DF370AE73450A5BF894D01419081491D329C2F854F1F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Process Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutiontrojan

behavioral2

defense_evasiondiscoveryexecutiontrojan

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

© 2018-2026

Terms | Privacy