488e618834422321126faa25d201aa2cdfadfc898d77749f39500843b44a71e8 | Triage™

Login
Reports

Overview

overview

9

Static

static

3

lc.exe

windows10-2004-x64

9

lc.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
lc.exe
Size 6.6MB
Sample261024-ydpfdaby7t
SHA256 488e618834422321126faa25d201aa2cdfadfc898d77749f39500843b44a71e8
MD5 c665a9ee3cde6968b0ab8738bd858cc7
SHA1 8e770dba14090c1cde1b8735660b153c21f5fc6d
SHA512 42d4c65ee9375a7d9d56f2f39f2cbaf48643e2fcff4e22e05a94208b072a2aec3bd8afd72776bef2e9abbdc7c140d00da0ccc8ab24c85962ed09ce6d21e7f2f4
SSDEEP 196608:AJlPUTc/mfXbfshtsH/hyQGjo6vdzPBb:AJlarfjH/XGU6vp
TLSH
T1F3663352F3D3C106C41FAE354EB1D6E243B2F8156F62C71B2995BA9FAC37B908914683
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery evasion execution persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

lc.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

12 signatures

150 seconds

defense_evasion discovery evasion execution persistence ransomware

Behavioral task

behavioral2

Sample

lc.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

12 signatures

150 seconds

defense_evasion discovery evasion execution persistence ransomware

Malware Config

Targets

- Target
  lc.exe
- Size 6.6MB
- SHA256 488e618834422321126faa25d201aa2cdfadfc898d77749f39500843b44a71e8
- MD5 c665a9ee3cde6968b0ab8738bd858cc7
- SHA1 8e770dba14090c1cde1b8735660b153c21f5fc6d
- SHA512 42d4c65ee9375a7d9d56f2f39f2cbaf48643e2fcff4e22e05a94208b072a2aec3bd8afd72776bef2e9abbdc7c140d00da0ccc8ab24c85962ed09ce6d21e7f2f4
- SSDEEP 196608:AJlPUTc/mfXbfshtsH/hyQGjo6vdzPBb:AJlarfjH/XGU6vp
- TLSH
  T1F3663352F3D3C106C41FAE354EB1D6E243B2F8156F62C71B2995BA9FAC37B908914683
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

defense_evasion discovery evasion execution persistence ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Disables use of System Restore points
  defense_evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionexecutionpersistenceransomware

behavioral2

defense_evasiondiscoveryevasionexecutionpersistenceransomware

© 2018-2026

Terms | Privacy