295462719087e80bdd5c4121811a73a80beb132cf8ea6d6986c65fcb2dca46d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

058244b6d284c0exe_JC.exe
Size

74KB
Sample

230713-wzpxxsaa38
MD5

058244b6d284c0417a0f0b8371770793
SHA1

1e77a69fe447fe7428a96c63674421a527e1516b
SHA256

295462719087e80bdd5c4121811a73a80beb132cf8ea6d6986c65fcb2dca46d4
SHA512

422c337a1d630581160ee4277402c45c62299b48f4c7ac07046a8619267e20f3ee889efcb628dca784dd01f94ea7ddcf98bf55fc624a0ff214043d0d96ffe61c
SSDEEP

1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWajSl:vCjsIOtEvwDpj5H9YvQd2G

Score

7^/10

Malware Config

Targets

- Target
  
  058244b6d284c0exe_JC.exe
- Size
  
  74KB
- MD5
  
  058244b6d284c0417a0f0b8371770793
- SHA1
  
  1e77a69fe447fe7428a96c63674421a527e1516b
- SHA256
  
  295462719087e80bdd5c4121811a73a80beb132cf8ea6d6986c65fcb2dca46d4
- SHA512
  
  422c337a1d630581160ee4277402c45c62299b48f4c7ac07046a8619267e20f3ee889efcb628dca784dd01f94ea7ddcf98bf55fc624a0ff214043d0d96ffe61c
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWajSl:vCjsIOtEvwDpj5H9YvQd2G
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2