0ab13318a48309e5f67d6151b6e37e175196f9de3264a8f5bde362481aab32a0 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

0ab13318a4...a0.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
0ab13318a48309e5f67d6151b6e37e175196f9de3264a8f5bde362481aab32a0
Size 208KB
Sample260908-v1gghagh95
SHA256 0ab13318a48309e5f67d6151b6e37e175196f9de3264a8f5bde362481aab32a0
MD5 c1b9e170d1ba6e99e635e48783f97d87
SHA1 a9f83212fbde428ce8f0d250304b113b129ce068
SHA512 c6cd36717d83e1d2594abdda28eb49d26745b644fd6df5c9e753505752da0c4b93f8f0c51541dcc7bda863866bed576a721bdc9f73774dd1ab7bc82864792ef4
SSDEEP 3072:qlOmmjXa7d6ri9E1rpt2PCa3EM4tYmh9I5TrooO+8fACg4pLthEjQT6j:qwDXrJ1ryPCGe+Vog84jkEj1
TLSH
T1B3247C017696D156E2B707348CD7CBB81A36FC21BB67121F39C9B76E3CB2A618C51325
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0ab13318a48309e5f67d6151b6e37e175196f9de3264a8f5bde362481aab32a0.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  0ab13318a48309e5f67d6151b6e37e175196f9de3264a8f5bde362481aab32a0
- Size 208KB
- SHA256 0ab13318a48309e5f67d6151b6e37e175196f9de3264a8f5bde362481aab32a0
- MD5 c1b9e170d1ba6e99e635e48783f97d87
- SHA1 a9f83212fbde428ce8f0d250304b113b129ce068
- SHA512 c6cd36717d83e1d2594abdda28eb49d26745b644fd6df5c9e753505752da0c4b93f8f0c51541dcc7bda863866bed576a721bdc9f73774dd1ab7bc82864792ef4
- SSDEEP 3072:qlOmmjXa7d6ri9E1rpt2PCa3EM4tYmh9I5TrooO+8fACg4pLthEjQT6j:qwDXrJ1ryPCGe+Vog84jkEj1
- TLSH
  T1B3247C017696D156E2B707348CD7CBB81A36FC21BB67121F39C9B76E3CB2A618C51325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy