25248978b34dd98299c7a363cf82ad09f3fa8b02e423cf77f7cecfaa8e475233 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b12a491a20001exe_JC.exe
Size

51KB
Sample

230714-p24erseg51
MD5

1b12a491a20001fe6d466656261909f8
SHA1

f3053c40a5f1c8951c64381159a974841194c4f1
SHA256

25248978b34dd98299c7a363cf82ad09f3fa8b02e423cf77f7cecfaa8e475233
SHA512

5b962e0a9be2c2365e1931e402960c5e81412ca85bc96a1546585e070d0efe49691f3870c6a96aa85330ad3fdd22357e7f4a1084ab20fa443dd7efc32cb881f0
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61u:BbdDmjr+OtEvwDpjM0

Score

7^/10

Malware Config

Targets

- Target
  
  1b12a491a20001exe_JC.exe
- Size
  
  51KB
- MD5
  
  1b12a491a20001fe6d466656261909f8
- SHA1
  
  f3053c40a5f1c8951c64381159a974841194c4f1
- SHA256
  
  25248978b34dd98299c7a363cf82ad09f3fa8b02e423cf77f7cecfaa8e475233
- SHA512
  
  5b962e0a9be2c2365e1931e402960c5e81412ca85bc96a1546585e070d0efe49691f3870c6a96aa85330ad3fdd22357e7f4a1084ab20fa443dd7efc32cb881f0
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61u:BbdDmjr+OtEvwDpjM0
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2