0b1f30232f38e6a42a059dbb62f58b6e49d3738b237beab400f3cb212d348015 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

0b1f30232f...15.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
0b1f30232f38e6a42a059dbb62f58b6e49d3738b237beab400f3cb212d348015
Size 208KB
Sample260909-glahrastct
SHA256 0b1f30232f38e6a42a059dbb62f58b6e49d3738b237beab400f3cb212d348015
MD5 dda68476587b8cbbe33fedc7f1a67b22
SHA1 0d876f0704277ef2e6c370a8fcabc7f9ad90553d
SHA512 5395c9650f31d2508faa9e7b52a7de1e3e343d773ae410625bc112caf49dca4ab4df8de414759cb048c04394c6ddb56b88542c309974b500304f027b1567c06b
SSDEEP 3072:7R8bcmauaTM2H1NIRuOT4wN9BqLKX1Ueh3+4pLthEjQT6j:7+bhh2gRuKfBqLK1U9kEj1
TLSH
T12D248C60F392C513C9A70B365EE297E61A387C30EFB48327F951379D06312DD48A67A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

0b1f30232f38e6a42a059dbb62f58b6e49d3738b237beab400f3cb212d348015.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  0b1f30232f38e6a42a059dbb62f58b6e49d3738b237beab400f3cb212d348015
- Size 208KB
- SHA256 0b1f30232f38e6a42a059dbb62f58b6e49d3738b237beab400f3cb212d348015
- MD5 dda68476587b8cbbe33fedc7f1a67b22
- SHA1 0d876f0704277ef2e6c370a8fcabc7f9ad90553d
- SHA512 5395c9650f31d2508faa9e7b52a7de1e3e343d773ae410625bc112caf49dca4ab4df8de414759cb048c04394c6ddb56b88542c309974b500304f027b1567c06b
- SSDEEP 3072:7R8bcmauaTM2H1NIRuOT4wN9BqLKX1Ueh3+4pLthEjQT6j:7+bhh2gRuKfBqLK1U9kEj1
- TLSH
  T12D248C60F392C513C9A70B365EE297E61A387C30EFB48327F951379D06312DD48A67A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy