02b4ed428b5d132539bfe3df022b24aee1bef161bca8d7206e50224ed8497060 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

02b4ed428b...60.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
02b4ed428b5d132539bfe3df022b24aee1bef161bca8d7206e50224ed8497060
Size 208KB
Sample260907-h2ecbaem3w
SHA256 02b4ed428b5d132539bfe3df022b24aee1bef161bca8d7206e50224ed8497060
MD5 86f56255b339f08c681222aefd01b5ba
SHA1 dd829335a86405566003604265210af9ca53e786
SHA512 a5b83be8e08bb655b02117f4adaf7a9ea921fa0a8246109d132b0d2b5cf363c2bf1a17850fbfe9a548f2f8d283ea05f4a54d99e72fa4e7009a6301bffef943df
SSDEEP 3072:uv8IaIsB4fAQDgjDUwev6txieotT2QQYd7ORHwyCMW2N/b4pLthEjQT6j:uYI6Eb08aieotTlMHwrM/kEj1
TLSH
T1C1248D15B7628232F7FB0A749CE5CB640EED3C629BA5836F120833DE98711B415B6772
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

02b4ed428b5d132539bfe3df022b24aee1bef161bca8d7206e50224ed8497060.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  02b4ed428b5d132539bfe3df022b24aee1bef161bca8d7206e50224ed8497060
- Size 208KB
- SHA256 02b4ed428b5d132539bfe3df022b24aee1bef161bca8d7206e50224ed8497060
- MD5 86f56255b339f08c681222aefd01b5ba
- SHA1 dd829335a86405566003604265210af9ca53e786
- SHA512 a5b83be8e08bb655b02117f4adaf7a9ea921fa0a8246109d132b0d2b5cf363c2bf1a17850fbfe9a548f2f8d283ea05f4a54d99e72fa4e7009a6301bffef943df
- SSDEEP 3072:uv8IaIsB4fAQDgjDUwev6txieotT2QQYd7ORHwyCMW2N/b4pLthEjQT6j:uYI6Eb08aieotTlMHwrM/kEj1
- TLSH
  T1C1248D15B7628232F7FB0A749CE5CB640EED3C629BA5836F120833DE98711B415B6772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy