4af09ed623747dfc31bf695b1a1481e4f896b8ea8779113ddeb9fa49b1409782 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

apppatch.zip

windows10-2004-x64

1

apppatch.zip

windows11-ltsc_2024-x64

1

apppatch/0...in.sdb

windows10-2004-x64

3

apppatch/0...in.sdb

windows11-ltsc_2024-x64

3

apppatch/0...in.sdb

windows10-2004-x64

3

apppatch/0...in.sdb

windows11-ltsc_2024-x64

3

apppatch/A...st.dll

windows10-2004-x64

1

apppatch/A...st.dll

windows11-ltsc_2024-x64

1

apppatch/A...t2.dll

windows10-2004-x64

1

apppatch/A...t2.dll

windows11-ltsc_2024-x64

1

apppatch/A...st.dll

windows10-2004-x64

3

apppatch/A...st.dll

windows11-ltsc_2024-x64

3

apppatch/A...t2.dll

windows10-2004-x64

3

apppatch/A...t2.dll

windows11-ltsc_2024-x64

3

apppatch/AcRes.dll

windows10-2004-x64

1

apppatch/C...1}.sdb

windows10-2004-x64

3

apppatch/C...1}.sdb

windows11-ltsc_2024-x64

3

apppatch/D...ps.sdb

windows10-2004-x64

3

apppatch/D...ps.sdb

windows11-ltsc_2024-x64

3

apppatch/D...OD.sdb

windows10-2004-x64

3

apppatch/D...OD.sdb

windows11-ltsc_2024-x64

3

apppatch/M...in.sdb

windows10-2004-x64

3

apppatch/M...in.sdb

windows11-ltsc_2024-x64

3

apppatch/M...in.sdb

windows10-2004-x64

3

apppatch/M...in.sdb

windows11-ltsc_2024-x64

3

apppatch/M...in.sdb

windows10-2004-x64

3

apppatch/M...in.sdb

windows11-ltsc_2024-x64

3

apppatch/M...in.sdb

windows10-2004-x64

3

apppatch/M...in.sdb

windows11-ltsc_2024-x64

3

apppatch/M...ge.sdb

windows10-2004-x64

3

apppatch/M...ge.sdb

windows11-ltsc_2024-x64

3

apppatch/M...ge.sdb

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
apppatch.zip
Size 5.3MB
Sample261026-sshngstw3q
SHA256 4af09ed623747dfc31bf695b1a1481e4f896b8ea8779113ddeb9fa49b1409782
MD5 255079e9e099decefce8d891e5fc3fcd
SHA1 489e36c488fee62f8aefb4722006b566951ee4fa
SHA512 6c455319d17ab5df3591fb7064fddafc1e3c3eed14f2e536d37a2f410aa259b5f16994ef78d0e9955cf36a3d422555d731ea3bc5d2d04ae8821343cb8a227c71
SSDEEP 98304:2IsGIpg7UV259KaFl+KfC/pHZKuZ3bmkDvsvrr/AowkXqxspnzFGCUxI9/:2IsGIuQV2J+KWZKuZLm8svX4owkXRpz/
TLSH
T1DE4633C9D885AAFDC35A56F6B03902E77BFE5D22EE495DD1AF6CE05098090317C840AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

apppatch.zip

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

apppatch.zip

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

apppatch/01DD4AD9E381DA46.sysmain.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

apppatch/01DD4AD9E381DA46.sysmain.sdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

apppatch/01DD4AD9E849C5E5.msimain.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

apppatch/01DD4AD9E849C5E5.msimain.sdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

apppatch/AcPluginDlls/Plugin/AcPlugin_Test.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

apppatch/AcPluginDlls/Plugin/AcPlugin_Test.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

apppatch/AcPluginDlls/Plugin/AcPlugin_Test2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

apppatch/AcPluginDlls/Plugin/AcPlugin_Test2.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

apppatch/AcPluginDlls/PluginWowX86/AcPlugin_Test.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

apppatch/AcPluginDlls/PluginWowX86/AcPlugin_Test.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

apppatch/AcPluginDlls/PluginWowX86/AcPlugin_Test2.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

apppatch/AcPluginDlls/PluginWowX86/AcPlugin_Test2.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

apppatch/AcRes.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

apppatch/CustomSDB/{22221111-1111-1111-1111-111111111111}.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

apppatch/CustomSDB/{22221111-1111-1111-1111-111111111111}.sdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

apppatch/DirectXApps.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

apppatch/DirectXApps.sdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral20

Sample

apppatch/DirectXApps_FOD.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral21

Sample

apppatch/DirectXApps_FOD.sdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral22

Sample

apppatch/MergeSdbFiles/01DA54B25CE0D000.msimain.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral23

Sample

apppatch/MergeSdbFiles/01DA54B25CE0D000.msimain.sdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral24

Sample

apppatch/MergeSdbFiles/01DA54B25CE0D000.sysmain.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

apppatch/MergeSdbFiles/01DA54B25CE0D000.sysmain.sdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

execution ransomware

Behavioral task

behavioral26

Sample

apppatch/MergeSdbFiles/01DA78C738588000.msimain.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

apppatch/MergeSdbFiles/01DA78C738588000.msimain.sdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

apppatch/MergeSdbFiles/01DA78C738588000.sysmain.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

apppatch/MergeSdbFiles/01DA78C738588000.sysmain.sdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

apppatch/MergeSdbFilesSource/msiMerge.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

apppatch/MergeSdbFilesSource/msiMerge.sdb

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

apppatch/MergeSdbFilesSource/sysMerge.sdb

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  apppatch.zip
- Size 5.3MB
- SHA256 4af09ed623747dfc31bf695b1a1481e4f896b8ea8779113ddeb9fa49b1409782
- MD5 255079e9e099decefce8d891e5fc3fcd
- SHA1 489e36c488fee62f8aefb4722006b566951ee4fa
- SHA512 6c455319d17ab5df3591fb7064fddafc1e3c3eed14f2e536d37a2f410aa259b5f16994ef78d0e9955cf36a3d422555d731ea3bc5d2d04ae8821343cb8a227c71
- SSDEEP 98304:2IsGIpg7UV259KaFl+KfC/pHZKuZ3bmkDvsvrr/AowkXqxspnzFGCUxI9/:2IsGIuQV2J+KWZKuZLm8svX4owkXRpz/
- TLSH
  T1DE4633C9D885AAFDC35A56F6B03902E77BFE5D22EE495DD1AF6CE05098090317C840AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  apppatch/01DD4AD9E381DA46.sysmain.sdb
- Size 4.0MB
- SHA256 3a215058927c32ba3d16703a9b435eb0ee137db337dff65bf43881a1c26f0dae
- MD5 f09e8657abddc067d77d54ccc6b753e5
- SHA1 bedfb3d5588724ce05cae8dcc0c74e9f492c173c
- SHA512 8a0f40398a2b1dd7e4ba29514a3268ec76e9a2779affaa18248e98693ba92963b04c3e3f951f84ca0c45dfbd0aae4ab5c74049b4df2ff0f74987ca73be33624a
- SSDEEP 24576:3EJWjkpS7wF68IwI8cE7Vq6FUpNVsYL06nxtxVyu3RC/WYERQwJq+Si9Hp08tYkq:3qWjkw7CjAEUZpNWJ6nUyRQd6AH
- TLSH
  T180163E375FF61302F6F696725BF583CC5E237A259922860CC5883A5E1821A30FE61F76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  apppatch/01DD4AD9E849C5E5.msimain.sdb
- Size 3.3MB
- SHA256 0873a95ae766a86af61a0facda4511638acede0bc1a91a70f0a5d9c9403fdd2b
- MD5 adc6d85f1f781ab90aa13af23f8dd60d
- SHA1 390a14d962de3086cab5a5c5db01a66d0663dce2
- SHA512 471b6c1ec8532b484f679cfef56041e6f6d6eafbf233d5b77fc7e9ccf7c8d947d965f564622e225577a631c44b17c225971f2fa6adc2c30e1ca7686b99b87e53
- SSDEEP 12288:NwVVyLnMEbLfVVgOmZE9F6b2rhDOptlJKN1vweCHwMeEsRO:/RBVRmMF6b2rhDOptlJK4euloO
- TLSH
  T19AF595337FF54511F0F6AAB0DFF182495A32FC91DD21960EA491B70E1A71A80ADA1F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  apppatch/AcPluginDlls/Plugin/AcPlugin_Test.dll
- Size 118KB
- SHA256 d891ecba5a22e89da9112084fc223e03a1afd30f7b3d27a6be27474c4ebc4f91
- MD5 50612c44ed978363773804e93b577efa
- SHA1 7207b4a913cf5a57ac1393c5364ae29e2a711f5a
- SHA512 d1beea9fb4a7dec37e3ee9654b9c265580a74df0faf96772ffac4ab76f4af240bf2a547b5838cf0daffa5deb5f7b0d30fdb46c5b1bc3a23a7b08e18313d5cda4
- SSDEEP 3072:wLR2am8Yuk4SuCqIwd2GgzsOpgyzfWHDrB7ijPGyuIWC+vmXO/2iePL3zfbHPyeO:ePZTXIw50eW0
- TLSH
  T1B8C35B57A3B500BBE5B78638C5A74A09EB76B8410762ABEF0394425A1F233D18D3DF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  apppatch/AcPluginDlls/Plugin/AcPlugin_Test2.dll
- Size 119KB
- SHA256 0f5b4758fd2b95515c5941f49e0cc6a68fa3d9eaeffe5f975528ed9a7395505d
- MD5 7a6260303312daa304d83bbf0a13063a
- SHA1 44aad65489f95d7ec88d6829daafec997426f9ff
- SHA512 3a846a7a4fbee18871be26f15b9cb6b7e40ed4720779159889538ed4844322a62053391725c31d741c97030f3bc2f6c204dd05d8e5285a39030a23e63c2f2a8b
- SSDEEP 3072:TPJQKcbFZLkW9QPEy+xF/GWmATMGJAST/2njLhbCDvmSOo2iePG3ufWCnSl24ISG:TPi51M8y+f2UU
- TLSH
  T1CFC36B57A3B500BBE1B7863888A78A05D772B95107719FEF07A0824A1F273D08D3EB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  apppatch/AcPluginDlls/PluginWowX86/AcPlugin_Test.dll
- Size 99KB
- SHA256 23631634bb912bcb6e3095e4f71603b84186c6b260e8b297ef05ba6fc522a97a
- MD5 2352b7a50d390452a732f16eeb4997e8
- SHA1 2f7532bccc585034b2b4230d27967b3261b3c0f4
- SHA512 454abbc47a4579d38112f513ac3cc29fff5baba6e071af9a80c7d26ff40ab93b4d68fe3d72b576dfcc10f0f28e0bb5f9ee85b832ec8ddb4f2fe412ec5e6a7c04
- SSDEEP 3072:5PreJKAjGtjU4DyqoL3kNLn747BJt5JIJrc:5PC7CBU2yFDL5JF
- TLSH
  T1EEA38D50B4D18035D8BE18341574DA726B7DBA60CFE19CEF276956AA4F313C0EF30A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  apppatch/AcPluginDlls/PluginWowX86/AcPlugin_Test2.dll
- Size 100KB
- SHA256 a293dbe73a80b8418e6410281caa155b6d615023f70d3734d0a13cbf71d544d3
- MD5 1aeb4480ca7b538ff6309b1301b4128a
- SHA1 651f62c328302b3141e142018e7142da9e14f4db
- SHA512 56fb7792cac2a1d69eac7eda3b18493cb52ac47783b8396dfb1752ef1c4905f2807deebd0a9f68f9305306c9f9eface016986a3442e85724d191e1fa9983623b
- SSDEEP 3072:Ttyg6197Kj/ucwiSWor3EVtZ4mgapD6+:TcpT+mcU5jch6
- TLSH
  T19BA37C50B5D18035D8BE18340868D9716B3D7A50DFF19DEF276A2A6E4F713C1EE30A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  apppatch/AcRes.dll
- Size 345KB
- SHA256 6045a103cce5c9f4d2fe5ae9cd9151abf46f1f5ddeed59c9da2759aafdd46650
- MD5 44e76207c3a33e16dd4189c07a6132f1
- SHA1 4cb8738f02c12cb3afc7a2b3248f08e7d6ec6e62
- SHA512 44e3eb92ad4dd7ba01dfcffef2636894453d38846adf8e33859d112157aec05c8e6760fb8b06a60ccc30706936412703b51014529c8d373bf1fe658e9e2b4730
- SSDEEP 3072:Byo/mBJrub7YxdJcMvZlW6SqGePnpTNyj9eM1dMxOPUiiyAWgw1:BkJk7EjrCAWP
- TLSH
  T16274684263FE9608F6F77F746EB822655E3ABCA6AD38D29C1201505D4972E50CDB0B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  apppatch/CustomSDB/{22221111-1111-1111-1111-111111111111}.sdb
- Size 3KB
- SHA256 5915aa16df0bfbaa4c1fc9100802ab7e7d66f68a3720ecec70b17953fd5710ec
- MD5 75873be7c3668939504a65a41cf8fff8
- SHA1 b478e6cc89fe77015ab950201ef85c16a8ea82e7
- SHA512 3b2645f6a3e3b44b61b62c1a0c364883d153fa95f8ffe2eb2a9ec420990bf931cd75e52a9c3d995963591cef99866c2d0e4d0cfbb03aeef89c0de828024ff374
- TLSH
  T13651AB26ABF90301E3F6DA7069BA03D89F3B78166C22D24D8444254E84A2F54FD26F73
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16 behavioral17
- Target
  apppatch/DirectXApps.sdb
- Size 1.5MB
- SHA256 a0c58d93ea88511cc24a473da3e2c54da910d4cefe903cd6505f4347486dc3e6
- MD5 1c03051f4a8408ec7eb90dbf11b592a1
- SHA1 dcb34233cf40c8293aa41c3fb891caadc2388972
- SHA512 c113eef968a90ead9cdd224bbaeb33c3d81d8aa3533dc1149940935529a346ddc54bd1a47a187657cd1f4e54f15ec29bd3a984395b55476495dce412161f2006
- SSDEEP 24576:MN3fstUF8dG4tfSn4xmycJqDWrUpfCTbc/Jj3CGC1UNHND9Xdbdl9WBc:C/7n4xm1rUpSA
- TLSH
  T1AF757B772FF68331E2F1C620D7B6438A6F717849E992468CC644BB0F4621594EF9CE26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral18 behavioral19
- Target
  apppatch/DirectXApps_FOD.sdb
- Size 1.5MB
- SHA256 e9f03570d66343e77dcea4535947a0f7f225cde697e48c4cb4927d646dfd9c6a
- MD5 fa3f1ede5dce58310dd54f821ea61c76
- SHA1 5c9c11548ead49e4db03143c4a13c4bc723aa20a
- SHA512 7b65fd1e29069d7414c91f914d2a3ab5af6892c00ec6e07fb9bb2446cdfbd6ed17186bb0975668d228a8f428f039880a8283bcae3b1bb90678237f75d2e9af51
- SSDEEP 24576:AuZu4UjGeS1T7UDLAOK8XREGUwuckncUqfxOqTs+XxIX1UNHND9XdbdXsEG9:Az5zDLBy2kj1
- TLSH
  T1837595371FF38621F1F2E620A6B35799AF707818E9A2431CC585BB0F8611558EF9CE25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral20 behavioral21
- Target
  apppatch/MergeSdbFiles/01DA54B25CE0D000.msimain.sdb
- Size 6KB
- SHA256 e522e3cac200bc726bf62c5d9105fcf61fd4d7ebbfddfce58335af5074d5ce0b
- MD5 291c0027ec7e215c3ae3ef0b31a57705
- SHA1 3190c3feefc85dc2276af2cf7104f1a48d3773d0
- SHA512 c1dcf7e032dad1e2653934a664e3febfdd27e6978a036d7a56203c7f7a8f17dcaca66867f22b586d02649199fa8292d916a71e8cc6a200f0a096948e205a211e
- SSDEEP 192:jDuwUw2uuTGwIXqSFq2vHGf+MrW8O/KY/gdMXhVxdx3VpKFC:GwUwVUiv/CihVxdx3VpKFC
- TLSH
  T16BD1AC7217B80303F0F4AAB27DA9428A5EB27D60CE62939CC419368D2574AD46CB1F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral22 behavioral23
- Target
  apppatch/MergeSdbFiles/01DA54B25CE0D000.sysmain.sdb
- Size 79KB
- SHA256 375b9daf8ec47c4e4dd1777841830e6e37a943da0fc5c38d2bc6ee812b1f7091
- MD5 a2767a8a7dbfc01d9bccec1b15c56036
- SHA1 329dfbe7b6f780016a99e0cb714806c2808d9726
- SHA512 a6640d8f3404dfda2981c0c6a4a2978cb02a75ba0b292fa93c9728da93ea63960f6d425fc1603c18cf366b33e285af6e7ba37e0db897dc810cfec6192865c4b9
- SSDEEP 1536:cIpGgp/KYC3lRhtOX4LrWiyqEgzs0KRK2bmVNSPdiXe:5pyVV/tzyNRK2bwNSPdiXe
- TLSH
  T1AB83FA675FF65314F5F69630ABF183C85F377866AA218A0CC2587E0E15219A0FE21F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral24 behavioral25
- Target
  apppatch/MergeSdbFiles/01DA78C738588000.msimain.sdb
- Size 1KB
- SHA256 f372ea707e8681990e11a3764915953be655875c003ba8cd44adb1011981bd61
- MD5 c3220b8f2aefc15ff294bf5c65b27db9
- SHA1 a2d88554c6941e9315177dba7bb0ed72272d0b98
- SHA512 9628b1107d79b5e2400be03270670c233aea6fdda49ee717640091023cb8096a2da5df963cd9c0ba1b520414674fb96607aedaeb9f6ab2477abdf3bdb91e3dc4
- TLSH
  T1D231D813BFEA1300F2FBAB622ABA12DC0F3B7E206D35C60A5104244D0563B56BC20F23
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26 behavioral27
- Target
  apppatch/MergeSdbFiles/01DA78C738588000.sysmain.sdb
- Size 2KB
- SHA256 c7d1fd3df2381dee8a294b8211fe763ef5350b3df3918dd78d7fd0715e348748
- MD5 de115a13a31a54dd5afbb194552c7d7f
- SHA1 e90e2402466498498c97f59969d30a6d52f1924a
- SHA512 9c3a36b76c31b26dd0a086c0a2215034b326c38131d10ed71107ed4e2900bdbb0d4e99de73a1c7597820d2985daed224db68738befe2726aec28effcd5492048
- TLSH
  T13341BA136BF61565F1FBEB310AB793988F3A79A06D30C05DD10864AC48A2354AE75F37
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28 behavioral29
- Target
  apppatch/MergeSdbFilesSource/msiMerge.sdb
- Size 6KB
- SHA256 e522e3cac200bc726bf62c5d9105fcf61fd4d7ebbfddfce58335af5074d5ce0b
- MD5 291c0027ec7e215c3ae3ef0b31a57705
- SHA1 3190c3feefc85dc2276af2cf7104f1a48d3773d0
- SHA512 c1dcf7e032dad1e2653934a664e3febfdd27e6978a036d7a56203c7f7a8f17dcaca66867f22b586d02649199fa8292d916a71e8cc6a200f0a096948e205a211e
- SSDEEP 192:jDuwUw2uuTGwIXqSFq2vHGf+MrW8O/KY/gdMXhVxdx3VpKFC:GwUwVUiv/CihVxdx3VpKFC
- TLSH
  T16BD1AC7217B80303F0F4AAB27DA9428A5EB27D60CE62939CC419368D2574AD46CB1F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30 behavioral31
- Target
  apppatch/MergeSdbFilesSource/sysMerge.sdb
- Size 79KB
- SHA256 375b9daf8ec47c4e4dd1777841830e6e37a943da0fc5c38d2bc6ee812b1f7091
- MD5 a2767a8a7dbfc01d9bccec1b15c56036
- SHA1 329dfbe7b6f780016a99e0cb714806c2808d9726
- SHA512 a6640d8f3404dfda2981c0c6a4a2978cb02a75ba0b292fa93c9728da93ea63960f6d425fc1603c18cf366b33e285af6e7ba37e0db897dc810cfec6192865c4b9
- SSDEEP 1536:cIpGgp/KYC3lRhtOX4LrWiyqEgzs0KRK2bmVNSPdiXe:5pyVV/tzyNRK2bwNSPdiXe
- TLSH
  T1AB83FA675FF65314F5F69630ABF183C85F377866AA218A0CC2587E0E15219A0FE21F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

executionransomware

behavioral20

executionransomware

behavioral21

executionransomware

behavioral22

executionransomware

behavioral23

executionransomware

behavioral24

behavioral25

executionransomware

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy