5ccfe0d56d9508ecf410168ce6c235f8a50f969ed867decff17f1183107d0421 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

5ccfe0d56d...21.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
5ccfe0d56d9508ecf410168ce6c235f8a50f969ed867decff17f1183107d0421
Size 728KB
Sample260910-y1ppnaee79
SHA256 5ccfe0d56d9508ecf410168ce6c235f8a50f969ed867decff17f1183107d0421
MD5 fbbfdc8bb5b791b215b2fb710753bfe2
SHA1 bc48ccf3ca875c503687e915ceaaa53e383797cd
SHA512 d8053c341190fe2c92b5774158cdc7f6dd91b9b456033f4b8567ca06a069db0c3994bec65166a41d1eaa5f063cf2e4ebeeaa9e7671ea7ea3d5c65999b8f3f9eb
SSDEEP 12288:gNGG3U3ITEmUbqLELp2/RMSCbQoXyZ42R0oETr3evXd21tP:eAIAmUbqo12RMQJZ42RPEr3ev01J
TLSH
T13EF4E115F7A810F9E273C17CCD634501EAB27C5A47A1ABDF13A449962F23AD09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5ccfe0d56d9508ecf410168ce6c235f8a50f969ed867decff17f1183107d0421.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

discovery execution persistence

Malware Config

Targets

- Target
  5ccfe0d56d9508ecf410168ce6c235f8a50f969ed867decff17f1183107d0421
- Size 728KB
- SHA256 5ccfe0d56d9508ecf410168ce6c235f8a50f969ed867decff17f1183107d0421
- MD5 fbbfdc8bb5b791b215b2fb710753bfe2
- SHA1 bc48ccf3ca875c503687e915ceaaa53e383797cd
- SHA512 d8053c341190fe2c92b5774158cdc7f6dd91b9b456033f4b8567ca06a069db0c3994bec65166a41d1eaa5f063cf2e4ebeeaa9e7671ea7ea3d5c65999b8f3f9eb
- SSDEEP 12288:gNGG3U3ITEmUbqLELp2/RMSCbQoXyZ42R0oETr3evXd21tP:eAIAmUbqo12RMQJZ42RPEr3ev01J
- TLSH
  T13EF4E115F7A810F9E273C17CCD634501EAB27C5A47A1ABDF13A449962F23AD09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence
- Executes dropped EXE
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

Remote System Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistence

© 2018-2026

Terms | Privacy