8d0dc1ff20dd7c9a08de5da055d13797d46674c6c8de71d4ed7144e17f77cbe2 | Triage

Sharing

General

Target

628e7f2628b153_JC.exe
Size

43KB
Sample

230716-l245hsea47
MD5

628e7f2628b153f69908adb42342cd92
SHA1

daaa657e63cd7eb7702b5070b01bf4e447383246
SHA256

8d0dc1ff20dd7c9a08de5da055d13797d46674c6c8de71d4ed7144e17f77cbe2
SHA512

3aa1ce5836da7692afd00ba331dac599677bbb313e4e008e7f0d18a7d74ee20e2b51f2f8eb8f9bf029bea5d5f87bf272e5a2b2556c7ffb0c0ca2c776285bd789
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVajSKm5uzOHxulioog:X6QFElP6n+gJQMOtEvwDpjBcSKm5upl

Score

7^/10

Malware Config

Targets

- Target
  
  628e7f2628b153_JC.exe
- Size
  
  43KB
- MD5
  
  628e7f2628b153f69908adb42342cd92
- SHA1
  
  daaa657e63cd7eb7702b5070b01bf4e447383246
- SHA256
  
  8d0dc1ff20dd7c9a08de5da055d13797d46674c6c8de71d4ed7144e17f77cbe2
- SHA512
  
  3aa1ce5836da7692afd00ba331dac599677bbb313e4e008e7f0d18a7d74ee20e2b51f2f8eb8f9bf029bea5d5f87bf272e5a2b2556c7ffb0c0ca2c776285bd789
- SSDEEP
  
  768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVajSKm5uzOHxulioog:X6QFElP6n+gJQMOtEvwDpjBcSKm5upl
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2