4fcd98383603a1690574eaad4c2bcc51d5ac8008b0503ee82fe7d29e71b21c0a | Triage™

Login
Reports

Overview

overview

Static

static

3

tgcomarq.exe

windows10-ltsc_2021-x64

Sharing

Copy URL Twitter E-mail

General

Target
tgcomarq.exe
Size 4.5MB
Sample261114-sczxtsey3j
SHA256 4fcd98383603a1690574eaad4c2bcc51d5ac8008b0503ee82fe7d29e71b21c0a
MD5 4f6226a2cfcc83e1d43917add26fe2b1
SHA1 6579092fb8db5fbd341f9066b6ab516abb2c3ffc
SHA512 45b894a0dc7be825be4b44dc2dd3f7b75cfb5577aa3068a2b3890210578757791081584c49960ef913ccfe9b92911c5c8d767a6f08f6cb443ea3676c9ba75dcb
SSDEEP 98304:2gPa1UlV6MVeVNyNJr6X6eqFPP9o5O8k1bKTmXebN9qD2wmoad:Za1UlIMVkNyNJr6X6eqFPP9o5O5bjOpc
TLSH
T1C5266A526AD28255F1460F39DCE6A3E13F13FC83962C0BCB278DBE68B75A4708D86745
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery evasion execution exploit trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

tgcomarq.exe

Resource

win10ltsc2021-20260911-en

windows10-ltsc_2021-x64

13 signatures

150 seconds

defense_evasion discovery evasion execution exploit trojan

Malware Config

Targets

- Target
  tgcomarq.exe
- Size 4.5MB
- SHA256 4fcd98383603a1690574eaad4c2bcc51d5ac8008b0503ee82fe7d29e71b21c0a
- MD5 4f6226a2cfcc83e1d43917add26fe2b1
- SHA1 6579092fb8db5fbd341f9066b6ab516abb2c3ffc
- SHA512 45b894a0dc7be825be4b44dc2dd3f7b75cfb5577aa3068a2b3890210578757791081584c49960ef913ccfe9b92911c5c8d767a6f08f6cb443ea3676c9ba75dcb
- SSDEEP 98304:2gPa1UlV6MVeVNyNJr6X6eqFPP9o5O8k1bKTmXebN9qD2wmoad:Za1UlIMVkNyNJr6X6eqFPP9o5O5bjOpc
- TLSH
  T1C5266A526AD28255F1460F39DCE6A3E13F13FC83962C0BCB278DBE68B75A4708D86745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery evasion execution exploit trojan
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Possible privilege escalation attempt
  exploit
- Disables service(s)
  defense_evasion execution
- Modifies file permissions
  discovery
- Stops running service(s)
  defense_evasion execution
- Windows security modification
  defense_evasion trojan
- File and Directory Permissions Modification: Windows File and Directory Permissions Modification
  defense_evasion
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

File and Directory Permissions Modification

Windows File and Directory Permissions Modification

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionexecutionexploittrojan

© 2018-2026

Terms | Privacy