84d12ea1b0b2818c8b6d41244b189fdc86d37e8d4771bfcae87b241d4d18d12a | Triage

Sharing

General

Target

94cd5e8c004aecfae197f0ebd97276e1.bin
Size

234KB
Sample

230130-xqk32sdc8v
MD5

94cd5e8c004aecfae197f0ebd97276e1
SHA1

f0c289d8dd74bc33c273b397a4eb01c4cacfca78
SHA256

84d12ea1b0b2818c8b6d41244b189fdc86d37e8d4771bfcae87b241d4d18d12a
SHA512

07441a6475d4a7100dc45c152733346a0976d7f25c64b004f6e0fe0db16810cb83625f28e37cc799dd21a00878feadef3476cb709c3d62dfd25274c0aca44c0e
SSDEEP

6144:T740IQeeeeeeeeeeeeeeee7eeeeeeeeeeeeeezeeeeeeeeeeeeeeeeee7eeeeeeD:/xeeeeeeeeeeeeeeee7eeeeeeeeeeeeT

Score

8^/10

Malware Config

Targets

- Target
  
  94cd5e8c004aecfae197f0ebd97276e1.bin
- Size
  
  234KB
- MD5
  
  94cd5e8c004aecfae197f0ebd97276e1
- SHA1
  
  f0c289d8dd74bc33c273b397a4eb01c4cacfca78
- SHA256
  
  84d12ea1b0b2818c8b6d41244b189fdc86d37e8d4771bfcae87b241d4d18d12a
- SHA512
  
  07441a6475d4a7100dc45c152733346a0976d7f25c64b004f6e0fe0db16810cb83625f28e37cc799dd21a00878feadef3476cb709c3d62dfd25274c0aca44c0e
- SSDEEP
  
  6144:T740IQeeeeeeeeeeeeeeee7eeeeeeeeeeeeeezeeeeeeeeeeeeeeeeee7eeeeeeD:/xeeeeeeeeeeeeeeee7eeeeeeeeeeeeT
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2