c403e4a8f6bf3014a916e38e81ee2fe1d2a59b7caf561bc45b0c9380c121ae74 | Triage

Sharing

General

Target

12160ee56280f1exe_JC.exe
Size

67KB
Sample

230713-y4ad5sba58
MD5

12160ee56280f1590a0ed0803754c423
SHA1

a452c936081ff6ac79d012e2efa9709a09967ebd
SHA256

c403e4a8f6bf3014a916e38e81ee2fe1d2a59b7caf561bc45b0c9380c121ae74
SHA512

3be9ddc15de8b5fd554086d2e77a097716ce9fafbc218ddd5402cc90b65c7b750bd45cf734bb0ad87ab5c7c135925a94db161bd1f5dcc175c39ee24349f32a85
SSDEEP

1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36n9QN+:ZVxkGOtEvwDpjcaAV

Score

7^/10

Malware Config

Targets

- Target
  
  12160ee56280f1exe_JC.exe
- Size
  
  67KB
- MD5
  
  12160ee56280f1590a0ed0803754c423
- SHA1
  
  a452c936081ff6ac79d012e2efa9709a09967ebd
- SHA256
  
  c403e4a8f6bf3014a916e38e81ee2fe1d2a59b7caf561bc45b0c9380c121ae74
- SHA512
  
  3be9ddc15de8b5fd554086d2e77a097716ce9fafbc218ddd5402cc90b65c7b750bd45cf734bb0ad87ab5c7c135925a94db161bd1f5dcc175c39ee24349f32a85
- SSDEEP
  
  1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ36n9QN+:ZVxkGOtEvwDpjcaAV
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2