0afbc61299e1c194ca41055899be9f6f8631097efdc4b396a51eaf6f6436e748 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

0afbc61299...48.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
0afbc61299e1c194ca41055899be9f6f8631097efdc4b396a51eaf6f6436e748
Size 208KB
Sample260909-ghkjjssapc
SHA256 0afbc61299e1c194ca41055899be9f6f8631097efdc4b396a51eaf6f6436e748
MD5 318a2d98666cffaf4523e2eafb5e718a
SHA1 fadba3bd842bfa9a5638948296159098662d31e2
SHA512 6742a06b7c2696dbd756e43b26f3d16fe9ff3e8644ffb6eb1a18374e3e9981af3c0a970bfa331230195be10c7c2c0f84cdf9d9d278ff6023cb2426b101e88f6f
SSDEEP 3072:xqU+AIUy9K7dKXTBfe/72VP74/qA/OETv4NLthEjQT6j:Yvv9CdWTBm/7k70qiVvQEj1
TLSH
T1C9248D02B243C912E8B33A7448F152E26D65BC715FE6450FB78C739FADB25B02DA2791
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0afbc61299e1c194ca41055899be9f6f8631097efdc4b396a51eaf6f6436e748.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  0afbc61299e1c194ca41055899be9f6f8631097efdc4b396a51eaf6f6436e748
- Size 208KB
- SHA256 0afbc61299e1c194ca41055899be9f6f8631097efdc4b396a51eaf6f6436e748
- MD5 318a2d98666cffaf4523e2eafb5e718a
- SHA1 fadba3bd842bfa9a5638948296159098662d31e2
- SHA512 6742a06b7c2696dbd756e43b26f3d16fe9ff3e8644ffb6eb1a18374e3e9981af3c0a970bfa331230195be10c7c2c0f84cdf9d9d278ff6023cb2426b101e88f6f
- SSDEEP 3072:xqU+AIUy9K7dKXTBfe/72VP74/qA/OETv4NLthEjQT6j:Yvv9CdWTBm/7k70qiVvQEj1
- TLSH
  T1C9248D02B243C912E8B33A7448F152E26D65BC715FE6450FB78C739FADB25B02DA2791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy