0df41d28e1d5d68a3e0c21cfaa6834d1059c574deb95c9cdd887403332f5f966 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

0df41d28e1...66.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
0df41d28e1d5d68a3e0c21cfaa6834d1059c574deb95c9cdd887403332f5f966
Size 208KB
Sample260831-thk7asvhke
SHA256 0df41d28e1d5d68a3e0c21cfaa6834d1059c574deb95c9cdd887403332f5f966
MD5 734d74b56d039b68888b29726be2d720
SHA1 0ed161146b5f955859220317d0c5992e3edd1b4a
SHA512 53287b44a9c587336f971f13cdccc61e89cafff423cf3f8e17a74a59e03352e3472d3c57a2725501ed9ec04836befe84c2b3af277124e9e072df311d58c0133f
SSDEEP 3072:VQL1M98XRmUK35LnedxztKdW9gRp9HX5e/Ilya4NLthEjQT6j:2L1MER9K35DeXz4dW9kp5ppl5QEj1
TLSH
T104248D4A7B998442E0C31E39A4E1D5544AA6FD11DF71F10B2A8D33DFAEB17D00C1AB7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0df41d28e1d5d68a3e0c21cfaa6834d1059c574deb95c9cdd887403332f5f966.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  0df41d28e1d5d68a3e0c21cfaa6834d1059c574deb95c9cdd887403332f5f966
- Size 208KB
- SHA256 0df41d28e1d5d68a3e0c21cfaa6834d1059c574deb95c9cdd887403332f5f966
- MD5 734d74b56d039b68888b29726be2d720
- SHA1 0ed161146b5f955859220317d0c5992e3edd1b4a
- SHA512 53287b44a9c587336f971f13cdccc61e89cafff423cf3f8e17a74a59e03352e3472d3c57a2725501ed9ec04836befe84c2b3af277124e9e072df311d58c0133f
- SSDEEP 3072:VQL1M98XRmUK35LnedxztKdW9gRp9HX5e/Ilya4NLthEjQT6j:2L1MER9K35DeXz4dW9kp5ppl5QEj1
- TLSH
  T104248D4A7B998442E0C31E39A4E1D5544AA6FD11DF71F10B2A8D33DFAEB17D00C1AB7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy