2b2dc779497057294e8283ef2b94379e5408e3e3781859b06e4a6a884a120f54 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2b2dc77949...54.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2b2dc779497057294e8283ef2b94379e5408e3e3781859b06e4a6a884a120f54
Size 208KB
Sample260916-289lkstyh1
SHA256 2b2dc779497057294e8283ef2b94379e5408e3e3781859b06e4a6a884a120f54
MD5 688faa29fcb9b4da338cfe21e146b7e8
SHA1 cc244c7f4fc8f6e5bea08e4a3fd3bea21acdb689
SHA512 5ab23b8465654365037693a650677e69b4422fe21c2378275654775df0b1df60801814d8d96e0b7ea6d5a3cf242e7717b24544513aa3b6969e45210bfee3e321
SSDEEP 3072:+uYeSzKUOI4911KiWRNhULMD7ZQymO9Dc1eCqJ8QOV4pLthEjQT6D:+uYQUZM16nhULMJQhOS1lqJDckEjV
TLSH
T179247B8631F4864BD04F263148EA99906E737D22AF72A24F75C9B3FD1CB1AD0C935B52
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2b2dc779497057294e8283ef2b94379e5408e3e3781859b06e4a6a884a120f54.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  2b2dc779497057294e8283ef2b94379e5408e3e3781859b06e4a6a884a120f54
- Size 208KB
- SHA256 2b2dc779497057294e8283ef2b94379e5408e3e3781859b06e4a6a884a120f54
- MD5 688faa29fcb9b4da338cfe21e146b7e8
- SHA1 cc244c7f4fc8f6e5bea08e4a3fd3bea21acdb689
- SHA512 5ab23b8465654365037693a650677e69b4422fe21c2378275654775df0b1df60801814d8d96e0b7ea6d5a3cf242e7717b24544513aa3b6969e45210bfee3e321
- SSDEEP 3072:+uYeSzKUOI4911KiWRNhULMD7ZQymO9Dc1eCqJ8QOV4pLthEjQT6D:+uYQUZM16nhULMJQhOS1lqJDckEjV
- TLSH
  T179247B8631F4864BD04F263148EA99906E737D22AF72A24F75C9B3FD1CB1AD0C935B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy