52fc5a90d4109a4e7dd2b79f90e8b7703e8cdb5decc613395864b2e86f3c50e8 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

52fc5a90d4...e8.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
52fc5a90d4109a4e7dd2b79f90e8b7703e8cdb5decc613395864b2e86f3c50e8
Size 208KB
Sample260907-hsdpesyyay
SHA256 52fc5a90d4109a4e7dd2b79f90e8b7703e8cdb5decc613395864b2e86f3c50e8
MD5 1356fba526857d857878ab83cd0f55ee
SHA1 e5673a1b1b47e067b3578f82f4f0d397eeb597e1
SHA512 23e384df68ef7d674c7ff3ba492efdd0c6685a589dff2ef425bf432a179b673ce3e0105a0327b61216ecb80a5b89cc5765c40eb3df044c77153ea7ae3de27bb4
SSDEEP 3072:4MMWQMTwyU2eKAZjAYtgKYG41qRjMBx919M7djV0hjycTuACibr05zr+D9Kvo+ep:H/TyTm0lVcXoRwIvBv+QEj1
TLSH
T183248D0DB9959865F6B316F489E4EBE81964BC62AB7FC21F78C433CF78709600822F55
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

52fc5a90d4109a4e7dd2b79f90e8b7703e8cdb5decc613395864b2e86f3c50e8.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  52fc5a90d4109a4e7dd2b79f90e8b7703e8cdb5decc613395864b2e86f3c50e8
- Size 208KB
- SHA256 52fc5a90d4109a4e7dd2b79f90e8b7703e8cdb5decc613395864b2e86f3c50e8
- MD5 1356fba526857d857878ab83cd0f55ee
- SHA1 e5673a1b1b47e067b3578f82f4f0d397eeb597e1
- SHA512 23e384df68ef7d674c7ff3ba492efdd0c6685a589dff2ef425bf432a179b673ce3e0105a0327b61216ecb80a5b89cc5765c40eb3df044c77153ea7ae3de27bb4
- SSDEEP 3072:4MMWQMTwyU2eKAZjAYtgKYG41qRjMBx919M7djV0hjycTuACibr05zr+D9Kvo+ep:H/TyTm0lVcXoRwIvBv+QEj1
- TLSH
  T183248D0DB9959865F6B316F489E4EBE81964BC62AB7FC21F78C433CF78709600822F55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy