94b6212bad83555bc84744166d25aaad98fbbbb8d759e96d1be2f08149850d86 | Triage

Sharing

General

Target

94b6212bad83555bc84744166d25aaad98fbbbb8d759e96d1be2f08149850d86
Size

1.1MB
Sample

240911-hv64raxhpq
MD5

9cb2e24f881a465caa69b86f8e0c77b1
SHA1

afe16b2327a4cd552d5969da5758193c377c5a16
SHA256

94b6212bad83555bc84744166d25aaad98fbbbb8d759e96d1be2f08149850d86
SHA512

f4fd3263b48f7447f9026e1cb22b6d4f836741405dd5e3be1c5ddcaa9c6733ef2433595617038e8a47db50b9b7a57be50ced41f6fe8badb45217a5c6fd8c44c2
SSDEEP

24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q6:acallSllG4ZM7QzM5

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  94b6212bad83555bc84744166d25aaad98fbbbb8d759e96d1be2f08149850d86
- Size
  
  1.1MB
- MD5
  
  9cb2e24f881a465caa69b86f8e0c77b1
- SHA1
  
  afe16b2327a4cd552d5969da5758193c377c5a16
- SHA256
  
  94b6212bad83555bc84744166d25aaad98fbbbb8d759e96d1be2f08149850d86
- SHA512
  
  f4fd3263b48f7447f9026e1cb22b6d4f836741405dd5e3be1c5ddcaa9c6733ef2433595617038e8a47db50b9b7a57be50ced41f6fe8badb45217a5c6fd8c44c2
- SSDEEP
  
  24576:aH0dl8myX9Bg42QoXFkrzkmplSgRDYo0lG4Z8r7Qfbkiu5Q6:acallSllG4ZM7QzM5
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2