5ed968d16ee4ce6145921d4ccbc3f43972ffbbe9ebb333c80f40633bec19a582 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

5ed968d16e...82.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
5ed968d16ee4ce6145921d4ccbc3f43972ffbbe9ebb333c80f40633bec19a582
Size 208KB
Sample260908-hz7k3stfrd
SHA256 5ed968d16ee4ce6145921d4ccbc3f43972ffbbe9ebb333c80f40633bec19a582
MD5 f6b8b2a82e2417973db309262bbc06dc
SHA1 513cf2eca22e16565f0c243f417c1b1e53b459e3
SHA512 ba5c83ce7f2be2fa58000887bc9f5796582f26be551259730cc884bf05e44cc7db4f6b07f2961b5dbef350aa89299c7e5a2436a7660b0914b65470544472fe3b
SSDEEP 3072:0rVTLpDFF60ghnzsGC3d4PbW4YifU55Jfkdn1Nu9F4pLthEjQT6j:0rVnpDiDzsGMIi4fURfkpakEj1
TLSH
T17E247C017791C257D2A369366ED2D258DBBA3DB24F3E831BFD447B0E28B26906CD0B15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5ed968d16ee4ce6145921d4ccbc3f43972ffbbe9ebb333c80f40633bec19a582.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  5ed968d16ee4ce6145921d4ccbc3f43972ffbbe9ebb333c80f40633bec19a582
- Size 208KB
- SHA256 5ed968d16ee4ce6145921d4ccbc3f43972ffbbe9ebb333c80f40633bec19a582
- MD5 f6b8b2a82e2417973db309262bbc06dc
- SHA1 513cf2eca22e16565f0c243f417c1b1e53b459e3
- SHA512 ba5c83ce7f2be2fa58000887bc9f5796582f26be551259730cc884bf05e44cc7db4f6b07f2961b5dbef350aa89299c7e5a2436a7660b0914b65470544472fe3b
- SSDEEP 3072:0rVTLpDFF60ghnzsGC3d4PbW4YifU55Jfkdn1Nu9F4pLthEjQT6j:0rVnpDiDzsGMIi4fURfkpakEj1
- TLSH
  T17E247C017791C257D2A369366ED2D258DBBA3DB24F3E831BFD447B0E28B26906CD0B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy