01da2bfd8a75c19653ed48e4b8fe7bb79b7e306b60e438935a27f3e58017c22a | Triage™

Login
Reports

Overview

overview

7

Static

static

3

01da2bfd8a...2a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
01da2bfd8a75c19653ed48e4b8fe7bb79b7e306b60e438935a27f3e58017c22a
Size 208KB
Sample260906-ymtrfssajf
SHA256 01da2bfd8a75c19653ed48e4b8fe7bb79b7e306b60e438935a27f3e58017c22a
MD5 7f94daff054c80ad347cf2124b06eefb
SHA1 f86cc486f255979e5f08aae44217aff68b36e6e0
SHA512 18bba4a71be662272f2dc105930a7174d23ee9393a9f3cdac4048c97ec4dd44027da74d21d75c7ff70c4e042db3d52d06fb46026a3e5eda7d8204f2dd894020e
SSDEEP 3072:r7Kg8vO/OtPk5RX8bX0eCNGe3qlf7B+By45teSNYQDpI/Ka+3S4NLthEjQT6j:fitmXQX2NGNu5seYckwSQEj1
TLSH
T157247CCBBA4C9667C8978670D8F64A24D126BF62F7A2775B3680339D6DB23D08D10770
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

01da2bfd8a75c19653ed48e4b8fe7bb79b7e306b60e438935a27f3e58017c22a.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  01da2bfd8a75c19653ed48e4b8fe7bb79b7e306b60e438935a27f3e58017c22a
- Size 208KB
- SHA256 01da2bfd8a75c19653ed48e4b8fe7bb79b7e306b60e438935a27f3e58017c22a
- MD5 7f94daff054c80ad347cf2124b06eefb
- SHA1 f86cc486f255979e5f08aae44217aff68b36e6e0
- SHA512 18bba4a71be662272f2dc105930a7174d23ee9393a9f3cdac4048c97ec4dd44027da74d21d75c7ff70c4e042db3d52d06fb46026a3e5eda7d8204f2dd894020e
- SSDEEP 3072:r7Kg8vO/OtPk5RX8bX0eCNGe3qlf7B+By45teSNYQDpI/Ka+3S4NLthEjQT6j:fitmXQX2NGNu5seYckwSQEj1
- TLSH
  T157247CCBBA4C9667C8978670D8F64A24D126BF62F7A2775B3680339D6DB23D08D10770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy