dcb35eaf6fa332b6f2422f3e6111066aa4dad3ccb0656d57cc8d37aa3acee632 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

dcb35eaf6f...32.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
dcb35eaf6fa332b6f2422f3e6111066aa4dad3ccb0656d57cc8d37aa3acee632
Size 208KB
Sample260827-saqalswgpc
SHA256 dcb35eaf6fa332b6f2422f3e6111066aa4dad3ccb0656d57cc8d37aa3acee632
MD5 1b40ab0e4fd3e8c9a208e665806b4088
SHA1 feda133be84c747e5a616c392f567886c04c374f
SHA512 fb75da64d58eeb262197a9562ee7710caab9968601091c4e88477424cae001948414170d144db7a135635755d51a4ec0c3dc4594d634d2fe9ee4d7634301d938
SSDEEP 3072:Y7dybiYr2xeMugq5CEFz2chouBnwF6s9hJBLeYYdi7A//AG24NLthEjQT6E:Y7giYr2xeh0EFrhnBy6s9pWgAghQEj6
TLSH
T17C248E4E76848A4BE8BB4E758CE37524257BFCAC8B7A45177644731F0E3CAA84935F20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

dcb35eaf6fa332b6f2422f3e6111066aa4dad3ccb0656d57cc8d37aa3acee632.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  dcb35eaf6fa332b6f2422f3e6111066aa4dad3ccb0656d57cc8d37aa3acee632
- Size 208KB
- SHA256 dcb35eaf6fa332b6f2422f3e6111066aa4dad3ccb0656d57cc8d37aa3acee632
- MD5 1b40ab0e4fd3e8c9a208e665806b4088
- SHA1 feda133be84c747e5a616c392f567886c04c374f
- SHA512 fb75da64d58eeb262197a9562ee7710caab9968601091c4e88477424cae001948414170d144db7a135635755d51a4ec0c3dc4594d634d2fe9ee4d7634301d938
- SSDEEP 3072:Y7dybiYr2xeMugq5CEFz2chouBnwF6s9hJBLeYYdi7A//AG24NLthEjQT6E:Y7giYr2xeh0EFrhnBy6s9pWgAghQEj6
- TLSH
  T17C248E4E76848A4BE8BB4E758CE37524257BFCAC8B7A45177644731F0E3CAA84935F20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy