5c1afaa528114a95e676abc37b4305f4c7efd7a5f3bae132ad817dc3cb2ac092 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c68f509343adcexe_JC.exe
Size

76KB
Sample

230713-x3htfsbd5s
MD5

0c68f509343adc3dfd1bcff9a633c359
SHA1

d29c46d3c0b2cdf195525b31ff6d6d54cf42b35d
SHA256

5c1afaa528114a95e676abc37b4305f4c7efd7a5f3bae132ad817dc3cb2ac092
SHA512

3d5fcfe1e19d7440ee82760af6417ae72066e94c5784132ee1458b0ae9981f352ce00cf29cd57330f25f3353a0cdf1f17bee7b6df3d9ac7f2dcc4a6d9eb0f291
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJNpsAnJYqdIR++:ZVxkGOtEvwDpjcNw

Score

7^/10

Malware Config

Targets

- Target
  
  0c68f509343adcexe_JC.exe
- Size
  
  76KB
- MD5
  
  0c68f509343adc3dfd1bcff9a633c359
- SHA1
  
  d29c46d3c0b2cdf195525b31ff6d6d54cf42b35d
- SHA256
  
  5c1afaa528114a95e676abc37b4305f4c7efd7a5f3bae132ad817dc3cb2ac092
- SHA512
  
  3d5fcfe1e19d7440ee82760af6417ae72066e94c5784132ee1458b0ae9981f352ce00cf29cd57330f25f3353a0cdf1f17bee7b6df3d9ac7f2dcc4a6d9eb0f291
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJNpsAnJYqdIR++:ZVxkGOtEvwDpjcNw
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2