013ba3480891d45f48bbca4b5e1b121d7768bb5fbe01acce53fb2a899861b1b9 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

013ba34808...b9.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
013ba3480891d45f48bbca4b5e1b121d7768bb5fbe01acce53fb2a899861b1b9
Size 208KB
Sample260906-xyl1bach28
SHA256 013ba3480891d45f48bbca4b5e1b121d7768bb5fbe01acce53fb2a899861b1b9
MD5 b2e650054c52a7c83a46ef5365b41295
SHA1 b0b80b09967aa1de6e6248ce2cf575555fe2777d
SHA512 9f648097cba05b10c895721a38a8607616d34204a66b321d883bcf13604cd8a42cbf021044faa39614c2a106e4492aba06a0cd9d980b779fd4e317bf669280f4
SSDEEP 3072:qlOmmjXa7d6ri9E1rpt2PCa3EM4tYmh9I5TrooO+8fAC54pLthEjQT6j:qwDXrJ1ryPCGe+Vog84mkEj1
TLSH
T1F1247C017696D156E2B703348CD7CBB81A3AFC21BB67121F39C9B76E3CB2A618C51325
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

013ba3480891d45f48bbca4b5e1b121d7768bb5fbe01acce53fb2a899861b1b9.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  013ba3480891d45f48bbca4b5e1b121d7768bb5fbe01acce53fb2a899861b1b9
- Size 208KB
- SHA256 013ba3480891d45f48bbca4b5e1b121d7768bb5fbe01acce53fb2a899861b1b9
- MD5 b2e650054c52a7c83a46ef5365b41295
- SHA1 b0b80b09967aa1de6e6248ce2cf575555fe2777d
- SHA512 9f648097cba05b10c895721a38a8607616d34204a66b321d883bcf13604cd8a42cbf021044faa39614c2a106e4492aba06a0cd9d980b779fd4e317bf669280f4
- SSDEEP 3072:qlOmmjXa7d6ri9E1rpt2PCa3EM4tYmh9I5TrooO+8fAC54pLthEjQT6j:qwDXrJ1ryPCGe+Vog84mkEj1
- TLSH
  T1F1247C017696D156E2B703348CD7CBB81A3AFC21BB67121F39C9B76E3CB2A618C51325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy