380a33b00d7d368f678984bc541249ce6c5a2e3564cb726357e1ff50fddd290c | Triage™

Login
Reports

Overview

overview

7

Static

static

5

380a33b00d...0c.exe

windows10-2004-x64

7

380a33b00d...0c.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
380a33b00d7d368f678984bc541249ce6c5a2e3564cb726357e1ff50fddd290c
Size 1.3MB
Sample260908-knl64sweja
SHA256 380a33b00d7d368f678984bc541249ce6c5a2e3564cb726357e1ff50fddd290c
MD5 5c0505b46a0c1e16cd54714e28768d0f
SHA1 cf018694f91c7e4d54d77302bdcec861754687ad
SHA512 faa20fe4ee716d5545079ad3e5ed30af263b5f2c15a16e198642bfab236312f8daf31469ff3e34400d9b0242ef04a3a9c888d90c998068de1239b08f85b3b7f1
SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEn/:WylFHUv6ReIt0jSrO+
TLSH
T179557E02BA4DC2B1C18C15702D6F73366D349A593B36CEA3B7D3DD689D32B919E27209
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

380a33b00d7d368f678984bc541249ce6c5a2e3564cb726357e1ff50fddd290c.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

380a33b00d7d368f678984bc541249ce6c5a2e3564cb726357e1ff50fddd290c.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  380a33b00d7d368f678984bc541249ce6c5a2e3564cb726357e1ff50fddd290c
- Size 1.3MB
- SHA256 380a33b00d7d368f678984bc541249ce6c5a2e3564cb726357e1ff50fddd290c
- MD5 5c0505b46a0c1e16cd54714e28768d0f
- SHA1 cf018694f91c7e4d54d77302bdcec861754687ad
- SHA512 faa20fe4ee716d5545079ad3e5ed30af263b5f2c15a16e198642bfab236312f8daf31469ff3e34400d9b0242ef04a3a9c888d90c998068de1239b08f85b3b7f1
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEn/:WylFHUv6ReIt0jSrO+
- TLSH
  T179557E02BA4DC2B1C18C15702D6F73366D349A593B36CEA3B7D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2026

Terms | Privacy