0495ab33fc9c6675290184788ae67372e6e8753b54f28c6bbedd955a30ad1df9 | Triage

Sharing

General

Target

30c5d9e2a994baexeexe_JC.exe
Size

61KB
Sample

230714-vjqnvafe45
MD5

30c5d9e2a994bace9341e41587d8cb62
SHA1

36100700ce14279eea96ac052b48e83d999f6fe2
SHA256

0495ab33fc9c6675290184788ae67372e6e8753b54f28c6bbedd955a30ad1df9
SHA512

bf2136b0dc45daecd926c738fa6de034f4afc231d876f4a3aa3d5573b8df310d70e6de880e1362c58f10784a12c63ca4e5a98eac46988a83dcfd4c0f2049e529
SSDEEP

768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MzIq:i5nkFGMOtEvwDpjNbwQEU

Score

7^/10

Malware Config

Targets

- Target
  
  30c5d9e2a994baexeexe_JC.exe
- Size
  
  61KB
- MD5
  
  30c5d9e2a994bace9341e41587d8cb62
- SHA1
  
  36100700ce14279eea96ac052b48e83d999f6fe2
- SHA256
  
  0495ab33fc9c6675290184788ae67372e6e8753b54f28c6bbedd955a30ad1df9
- SHA512
  
  bf2136b0dc45daecd926c738fa6de034f4afc231d876f4a3aa3d5573b8df310d70e6de880e1362c58f10784a12c63ca4e5a98eac46988a83dcfd4c0f2049e529
- SSDEEP
  
  768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MzIq:i5nkFGMOtEvwDpjNbwQEU
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2