b2e33fb1ea8ae59d68a146e1f29710a3625576b5478d6c7599216711ad231cef | Triage™

Login
Reports

Overview

overview

9

Static

static

3

4e95aba17c...8d.sys

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
4e95aba17c1a423cda5cc9f9f04f7cf8db17e294eb31ed1aa85063601b82fe8dMalwareBaazar.zip
Size 84KB
Sample261029-1n4ddsgv4l
SHA256 b2e33fb1ea8ae59d68a146e1f29710a3625576b5478d6c7599216711ad231cef
MD5 19f25f400efc8099d3eff52523f3f5c7
SHA1 c37639296e6a670dc3059914c3ee64e4b4612dd6
SHA512 1303c268b081e06f99f3d1bc60e8ab46514ab7e453a725a479ccbd6e8a551bfcc1af34e7011202fd89fedc49936a9208ff391c80550fb3cd3195d8b3dbede470
SSDEEP 1536:52mmNrz4R6wVBDPiGYhanFGv6AdlM+xFxAFb8DIdybk2vAOw2GWoS7jKJ8TUF:kHZ4ZnDPi58cvPxxDPDIdyg2oOEHsAF
TLSH
T17B83021379216D619C4AB6D6EE48EDB2320FD5615A0CC91E0816723C9F72293C96FBB2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery evasion execution persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4e95aba17c1a423cda5cc9f9f04f7cf8db17e294eb31ed1aa85063601b82fe8d.sys

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

16 signatures

600 seconds

discovery evasion execution persistence ransomware

Malware Config

Targets

- Target
  4e95aba17c1a423cda5cc9f9f04f7cf8db17e294eb31ed1aa85063601b82fe8d.exe
- Size 163KB
- SHA256 4e95aba17c1a423cda5cc9f9f04f7cf8db17e294eb31ed1aa85063601b82fe8d
- MD5 b5f122f3f07f618c0a7678fa40801faa
- SHA1 7440358c5041eba34e8673100989df756a6426da
- SHA512 5a17d3cc3a45e2a71de2916bf68d071e0bb572e3b981843fac3c7e9301ee9ce4363c0543236a846d6af44fafd045c334db4d48b5903b778e5305afa6d4c195fb
- SSDEEP 3072:ez/App7eWoqDigbz8LFbt3qmIONEffrCGtVrYZcrCGgTgdGxOKd0Nz0dChQVNY:ez/83o/hbt3qmIZfMgQV6
- TLSH
  T1CEF37B22A29421E8E56BD5BCC1429727FAF3F4811720C6CF47A089A92F637F1F579391
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

9^/10

discovery evasion execution persistence ransomware
- Modifies boot configuration data using bcdedit
  ransomware evasion
- Creates new service(s)
  persistence execution
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

discoveryevasionexecutionpersistenceransomware

© 2018-2026

Terms | Privacy