aaf3e00c615bc29434cd8d272d9bf2bd2e1810661b55ba42ef4a0cc6ba0b8cb9 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

f270075488...c5.exe

windows10-2004-x64

7

f270075488...c5.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
f27007548888a06ee02d5731dc1f18c5.exe
Size 2.9MB
Sample261102-qf5ldaas61
SHA256 aaf3e00c615bc29434cd8d272d9bf2bd2e1810661b55ba42ef4a0cc6ba0b8cb9
MD5 f27007548888a06ee02d5731dc1f18c5
SHA1 2e8c3c4606e2c89029dfb32d9112c03a694dc279
SHA512 8b27127005a4303400e9f1d00b094b862bbb00a8c70fe22dd9e3bfe9ebb46373cb0c0a44ceb934f8fdf34a8598a0843aa9b64a16e00b9f979950bd91ecda1dc0
SSDEEP 49152:hxgv8/6aEtRDgTucT1vLHZ1SrgmpR6/uyHHQoCLne+QXrI7H+q4yQj:h68etRDwz511DJkePQHIyQj
TLSH
T165D52399FEF61971E472CBA6CA83602DB13D37494AB08D9236CD6B404D139A83D3937D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f27007548888a06ee02d5731dc1f18c5.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

9 signatures

150 seconds

defense_evasion discovery execution persistence

Behavioral task

behavioral2

Sample

f27007548888a06ee02d5731dc1f18c5.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

defense_evasion discovery execution persistence

Malware Config

Targets

- Target
  f27007548888a06ee02d5731dc1f18c5.exe
- Size 2.9MB
- SHA256 aaf3e00c615bc29434cd8d272d9bf2bd2e1810661b55ba42ef4a0cc6ba0b8cb9
- MD5 f27007548888a06ee02d5731dc1f18c5
- SHA1 2e8c3c4606e2c89029dfb32d9112c03a694dc279
- SHA512 8b27127005a4303400e9f1d00b094b862bbb00a8c70fe22dd9e3bfe9ebb46373cb0c0a44ceb934f8fdf34a8598a0843aa9b64a16e00b9f979950bd91ecda1dc0
- SSDEEP 49152:hxgv8/6aEtRDgTucT1vLHZ1SrgmpR6/uyHHQoCLne+QXrI7H+q4yQj:h68etRDwz511DJkePQHIyQj
- TLSH
  T165D52399FEF61971E472CBA6CA83602DB13D37494AB08D9236CD6B404D139A83D3937D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution persistence
- Deletes itself
  defense_evasion
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionpersistence

behavioral2

defense_evasiondiscoveryexecutionpersistence

© 2018-2026

Terms | Privacy