ff98d31c527219c88dd4b7c55f4c5cb1672d070d5895665dc44f9e8f79bd99bd | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Cirava.exe

windows10-2004-x64

7

Cirava.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
Cirava.exe
Size 21.8MB
Sample261107-2thjjsfz3z
SHA256 ff98d31c527219c88dd4b7c55f4c5cb1672d070d5895665dc44f9e8f79bd99bd
MD5 1c298173e7969fe98136bba3dd79d3ef
SHA1 768fc95330861207eda5c87559f7c3d55339db52
SHA512 bd3142535b47539ad458e8ef8f4f0877d5fdbfaca3b6ca590d8b86dba869e9bfecc4b6505e267f7f8625e54b870cc68ee0ef596781fa53767ad86d95b80360d8
SSDEEP 393216:peLmV6gNTv4fShaIVt+wTkYuCMhHTodRGkX57Yx4rrSaxISqA7Cd4AwdDB:AC660oOCu0LhX5m4iaxlz7j
TLSH
T13C37336EE2C48AE8F9976B381A53132467B778500771D5EF02F883A43D671B41E35BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery pyinstaller trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Cirava.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

defense_evasion discovery trojan

Behavioral task

behavioral2

Sample

Cirava.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  Cirava.exe
- Size 21.8MB
- SHA256 ff98d31c527219c88dd4b7c55f4c5cb1672d070d5895665dc44f9e8f79bd99bd
- MD5 1c298173e7969fe98136bba3dd79d3ef
- SHA1 768fc95330861207eda5c87559f7c3d55339db52
- SHA512 bd3142535b47539ad458e8ef8f4f0877d5fdbfaca3b6ca590d8b86dba869e9bfecc4b6505e267f7f8625e54b870cc68ee0ef596781fa53767ad86d95b80360d8
- SSDEEP 393216:peLmV6gNTv4fShaIVt+wTkYuCMhHTodRGkX57Yx4rrSaxISqA7Cd4AwdDB:AC660oOCu0LhX5m4iaxlz7j
- TLSH
  T13C37336EE2C48AE8F9976B381A53132467B778500771D5EF02F883A43D671B41E35BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverytrojan

behavioral2

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy