General
- Target tri.exe
- Size 184KB
- Sample261024-2299jaew9m
- SHA256 b3928d8949ed3677fbf41176dbb64da3d640da7fc6b4fb70d693efc2f066d9ea
- MD5 07f5683bc77bb5aa29678871cc49916c
- SHA1 e9cb0638434013fef06e8f14d0e8a904e0e1c4bf
- SHA512 ded4dfb96640775dfd650aaf0d89f695d03eec10872dd2d11fb34275539964a14f90e8102cdfac6eef6d5b29db8e2811c2f1b410da8dc7c3522ad837f1d289ef
- SSDEEP 3072:w+oWkYaa/oj1dmIKWxGY6b6pnLhApaMDDDD0LLLLLLLLLLLLLLLLLLLLLLLLLLL/:DTtgj1dPGGaRSFWyRrHOpPFRkPx
- TLSH T10B044B17D16398FCC82BD17492AAA6B3A631B4551230BAFF2BD4CB301F02F51B719E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tri.exe
Resource
win10v2004-20260911-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
tri.exe
Resource
win11ltsc2024-20260911-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target tri.exe
- Size 184KB
- SHA256 b3928d8949ed3677fbf41176dbb64da3d640da7fc6b4fb70d693efc2f066d9ea
- MD5 07f5683bc77bb5aa29678871cc49916c
- SHA1 e9cb0638434013fef06e8f14d0e8a904e0e1c4bf
- SHA512 ded4dfb96640775dfd650aaf0d89f695d03eec10872dd2d11fb34275539964a14f90e8102cdfac6eef6d5b29db8e2811c2f1b410da8dc7c3522ad837f1d289ef
- SSDEEP 3072:w+oWkYaa/oj1dmIKWxGY6b6pnLhApaMDDDD0LLLLLLLLLLLLLLLLLLLLLLLLLLL/:DTtgj1dPGGaRSFWyRrHOpPFRkPx
- TLSH T10B044B17D16398FCC82BD17492AAA6B3A631B4551230BAFF2BD4CB301F02F51B719E59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1