56d0e2bcf03e7e61febe1ffb51a25661e679e9951a2f64b93d8ecd5eb53b50ee | Triage™

Login
Reports

Overview

overview

7

Static

static

3

56d0e2bcf0...ee.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
56d0e2bcf03e7e61febe1ffb51a25661e679e9951a2f64b93d8ecd5eb53b50ee
Size 603KB
Sample260910-xranpsfp7y
SHA256 56d0e2bcf03e7e61febe1ffb51a25661e679e9951a2f64b93d8ecd5eb53b50ee
MD5 13e0f631fdccc21a1e551aad88bfb049
SHA1 12abf90ac063d969f5128f6ee16fa60b92452edd
SHA512 43a78b21e105e0b3f3a46258a7aa93a9c6074a9e6931e341cf9a1b29acbfac1fffa4cda21133ba50ef4a025f28bdf0be7f6de888188e2b70abb894a58f72cf7b
SSDEEP 12288:gNGG3U3ITEmUbqLELYDqBBTh94nbqCKNA:eAIAmUbqokmBSqCUA
TLSH
T177D4D155FAA414F9E273C17CCD634602DB727CAA0770A7CB13A48A962F239D49E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

56d0e2bcf03e7e61febe1ffb51a25661e679e9951a2f64b93d8ecd5eb53b50ee.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

discovery execution persistence

Malware Config

Targets

- Target
  56d0e2bcf03e7e61febe1ffb51a25661e679e9951a2f64b93d8ecd5eb53b50ee
- Size 603KB
- SHA256 56d0e2bcf03e7e61febe1ffb51a25661e679e9951a2f64b93d8ecd5eb53b50ee
- MD5 13e0f631fdccc21a1e551aad88bfb049
- SHA1 12abf90ac063d969f5128f6ee16fa60b92452edd
- SHA512 43a78b21e105e0b3f3a46258a7aa93a9c6074a9e6931e341cf9a1b29acbfac1fffa4cda21133ba50ef4a025f28bdf0be7f6de888188e2b70abb894a58f72cf7b
- SSDEEP 12288:gNGG3U3ITEmUbqLELYDqBBTh94nbqCKNA:eAIAmUbqokmBSqCUA
- TLSH
  T177D4D155FAA414F9E273C17CCD634602DB727CAA0770A7CB13A48A962F239D49E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence
- Executes dropped EXE
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistence

© 2018-2026

Terms | Privacy