60872eab0489b951a61ebdf94eb5e5d3268f564e8ae530ec56484f8a22115fc5 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

60872eab04...c5.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
60872eab0489b951a61ebdf94eb5e5d3268f564e8ae530ec56484f8a22115fc5
Size 208KB
Sample260908-h4kbcas1bs
SHA256 60872eab0489b951a61ebdf94eb5e5d3268f564e8ae530ec56484f8a22115fc5
MD5 5581a398560af61f78ec9ef2c94a579a
SHA1 d8e6b719f83fa6f48a545961d524a697aaf577b6
SHA512 98b3a2d4168280f9166813745454fb1e1ed38913e99f0b63ee0b487e0e2a74b092c71b92c8b262588576d39a39c1755e18c1d45ca293fd3f5f8e352bb960f8ee
SSDEEP 3072:sCTTuHgdA5MsDw0rBYlusmhG42ojLuI79i6YrQc1ibmR0Ph34NLthEjQT6j:jyHq/0rBYsssG42yMlXGp3QEj1
TLSH
T19E248D0136B4D04BE9B7157089E2C5B44A68FDA19BF182AFBE49335E5CF37E04816FA0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

60872eab0489b951a61ebdf94eb5e5d3268f564e8ae530ec56484f8a22115fc5.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  60872eab0489b951a61ebdf94eb5e5d3268f564e8ae530ec56484f8a22115fc5
- Size 208KB
- SHA256 60872eab0489b951a61ebdf94eb5e5d3268f564e8ae530ec56484f8a22115fc5
- MD5 5581a398560af61f78ec9ef2c94a579a
- SHA1 d8e6b719f83fa6f48a545961d524a697aaf577b6
- SHA512 98b3a2d4168280f9166813745454fb1e1ed38913e99f0b63ee0b487e0e2a74b092c71b92c8b262588576d39a39c1755e18c1d45ca293fd3f5f8e352bb960f8ee
- SSDEEP 3072:sCTTuHgdA5MsDw0rBYlusmhG42ojLuI79i6YrQc1ibmR0Ph34NLthEjQT6j:jyHq/0rBYsssG42yMlXGp3QEj1
- TLSH
  T19E248D0136B4D04BE9B7157089E2C5B44A68FDA19BF182AFBE49335E5CF37E04816FA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy