General

  • Target

    5589a833821107_JC.exe

  • Size

    100KB

  • Sample

    230716-jpk5rsdb89

  • MD5

    5589a8338211071469efc1a20ddce48f

  • SHA1

    8f846e7fcb1967ac662956a55ddf71a749963e5f

  • SHA256

    5a58a8c07b417aa00f327c47b566b140833a092f57991630f5a948f6c3fa34f8

  • SHA512

    1d654da08f707be53d7844b5d9b70f219fe75949eff73e7524ff410c8219e0ec332c5b2483f497879537b6b8b22ae70a80ef0927d56374878f3914d338741dac

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpQbCJjMcoR:AnBdOOtEvwDpj6zH

Score
7/10
upx

Malware Config

Targets

    • Target

      5589a833821107_JC.exe

    • Size

      100KB

    • MD5

      5589a8338211071469efc1a20ddce48f

    • SHA1

      8f846e7fcb1967ac662956a55ddf71a749963e5f

    • SHA256

      5a58a8c07b417aa00f327c47b566b140833a092f57991630f5a948f6c3fa34f8

    • SHA512

      1d654da08f707be53d7844b5d9b70f219fe75949eff73e7524ff410c8219e0ec332c5b2483f497879537b6b8b22ae70a80ef0927d56374878f3914d338741dac

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpQbCJjMcoR:AnBdOOtEvwDpj6zH

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks