6e33653352f7764213e8b385d8ecefefa042ed1751e87641cad991807e3a5be2 | Triage™

Login
Reports

Overview

overview

8

Static

static

1

retrac-f11...xe.url

windows10-ltsc_2021-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
retrac-f11cb3cbda56f58c.exe.url
Size 225B
Sample261027-xdk8aawtht
SHA256 6e33653352f7764213e8b385d8ecefefa042ed1751e87641cad991807e3a5be2
MD5 c3f405833b9f22ca5f6024c17fc5fb74
SHA1 b150b91bb75fe4404b8510b38691cf722167df2e
SHA512 cf4261c0c67f9c078f5de77a54a2555854bb0f25a271e0e37383c965d73d862ebe9016cb5ba5c9c46138398f74606512f65d03e20e162646bbc10574649653ce
TLSH
T147D0233CB4C780C8D3031C0C970480A3810B2E2ABCF3E8C06200CFA82885370A1CCC69
MD5 SHA1 SHA512 TLSH

Score

8^/10

discovery execution persistence ransomware

Static task

static1

Behavioral task

behavioral1

Sample

retrac-f11cb3cbda56f58c.exe.url

Resource

win10ltsc2021-20260911-en

windows10-ltsc_2021-x64

18 signatures

150 seconds

discovery execution persistence ransomware

Malware Config

Targets

- Target
  retrac-f11cb3cbda56f58c.exe.url
- Size 225B
- SHA256 6e33653352f7764213e8b385d8ecefefa042ed1751e87641cad991807e3a5be2
- MD5 c3f405833b9f22ca5f6024c17fc5fb74
- SHA1 b150b91bb75fe4404b8510b38691cf722167df2e
- SHA512 cf4261c0c67f9c078f5de77a54a2555854bb0f25a271e0e37383c965d73d862ebe9016cb5ba5c9c46138398f74606512f65d03e20e162646bbc10574649653ce
- TLSH
  T147D0233CB4C780C8D3031C0C970480A3810B2E2ABCF3E8C06200CFA82885370A1CCC69
- MD5 SHA1 SHA512 TLSH
Score

8^/10

discovery execution persistence ransomware
- Downloads MZ/PE file
- Executes dropped EXE
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistenceransomware

© 2018-2026

Terms | Privacy