5fa6378af051aa1fa13919491e559f5ec5b4a5555d77feb9597578aff05b0a09 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

5fa6378af0...09.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
5fa6378af051aa1fa13919491e559f5ec5b4a5555d77feb9597578aff05b0a09
Size 208KB
Sample260916-jg4bdavvcs
SHA256 5fa6378af051aa1fa13919491e559f5ec5b4a5555d77feb9597578aff05b0a09
MD5 37b355d448bedc54c48985c866ee40ce
SHA1 8be462817b42383ce556d59044ceed6affa56599
SHA512 91ded3ee862bf2ca3d761395aa9e7d4f7f93ee208f2a5ad4fe9fc390e2b71521e56ed0a047a3daf243ad99ba054ab2c6e9adce64cc05d29d09bdf9fe2f037a90
SSDEEP 3072:OLz8BcGvMTBgBSPRoRBwwNUxq+EcB3rPGBDE4ydDLQvnmsARe7kN44pLthEjQT6j:rBcqBKRgwBQW3rPGRE4iDd0XkEj1
TLSH
T121249E013BA4E487E453263449D2D2D01E7A7FA19FA8A307E1F0378F1BBE5598E54B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5fa6378af051aa1fa13919491e559f5ec5b4a5555d77feb9597578aff05b0a09.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

discovery execution

Malware Config

Targets

- Target
  5fa6378af051aa1fa13919491e559f5ec5b4a5555d77feb9597578aff05b0a09
- Size 208KB
- SHA256 5fa6378af051aa1fa13919491e559f5ec5b4a5555d77feb9597578aff05b0a09
- MD5 37b355d448bedc54c48985c866ee40ce
- SHA1 8be462817b42383ce556d59044ceed6affa56599
- SHA512 91ded3ee862bf2ca3d761395aa9e7d4f7f93ee208f2a5ad4fe9fc390e2b71521e56ed0a047a3daf243ad99ba054ab2c6e9adce64cc05d29d09bdf9fe2f037a90
- SSDEEP 3072:OLz8BcGvMTBgBSPRoRBwwNUxq+EcB3rPGBDE4ydDLQvnmsARe7kN44pLthEjQT6j:rBcqBKRgwBQW3rPGRE4iDd0XkEj1
- TLSH
  T121249E013BA4E487E453263449D2D2D01E7A7FA19FA8A307E1F0378F1BBE5598E54B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecution

© 2018-2026

Terms | Privacy