f4e20829df063b3eb9a912a0b5eac163363e710118f1bd05350535ec3a4dc33b | Triage™

Login
Reports

Overview

overview

7

Static

static

3

f4e20829df...3b.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
f4e20829df063b3eb9a912a0b5eac163363e710118f1bd05350535ec3a4dc33b
Size 208KB
Sample260825-kw2xjayhrh
SHA256 f4e20829df063b3eb9a912a0b5eac163363e710118f1bd05350535ec3a4dc33b
MD5 91b3d5b17ca463bfdb7245626d3625f0
SHA1 20ba01415fbc3c3764aee447e3f334da043f3259
SHA512 88e77b3285e1b4fb003689fd48bac15301797b759572605bdcb768cd2a313b9697e2b34d478a1883bd2068698f5351efaacc0e306aea15f2fd6b1684b5e2bc9e
SSDEEP 3072:4fRZmn3gxlLdwOsoOrKW3D9l6K/3TUXtyKVoKCLFMT4NLthEjQT62:dwxl+OsoDAD9A9EKIFMTQEjE
TLSH
T1DB248E21B684DB36C1B72634B8E292B3293D3C819BEBB22FBD42335F3D352558954365
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f4e20829df063b3eb9a912a0b5eac163363e710118f1bd05350535ec3a4dc33b.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  f4e20829df063b3eb9a912a0b5eac163363e710118f1bd05350535ec3a4dc33b
- Size 208KB
- SHA256 f4e20829df063b3eb9a912a0b5eac163363e710118f1bd05350535ec3a4dc33b
- MD5 91b3d5b17ca463bfdb7245626d3625f0
- SHA1 20ba01415fbc3c3764aee447e3f334da043f3259
- SHA512 88e77b3285e1b4fb003689fd48bac15301797b759572605bdcb768cd2a313b9697e2b34d478a1883bd2068698f5351efaacc0e306aea15f2fd6b1684b5e2bc9e
- SSDEEP 3072:4fRZmn3gxlLdwOsoOrKW3D9l6K/3TUXtyKVoKCLFMT4NLthEjQT62:dwxl+OsoDAD9A9EKIFMTQEjE
- TLSH
  T1DB248E21B684DB36C1B72634B8E292B3293D3C819BEBB22FBD42335F3D352558954365
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy