General

  • Target

    6815d0e4237081_JC.exe

  • Size

    139KB

  • Sample

    230716-ncdblsed63

  • MD5

    6815d0e423708118fdb6702442d8ccb3

  • SHA1

    74f5d83f8f6cfc6902d3ccd742f320125bcfcbfe

  • SHA256

    a8c7d9ba824bcfcb3d7c82da06081bf7e5478b0f0a8658d48cbc349829f7af71

  • SHA512

    8c6a78b935d0cc37d2ceb31a378f5c0579c5cb0b9d6a4c7a1fae5312d7a39d877fe64242dfcd97b5831c55b037686eb856e7790857ea3bcd7e7516e42e7b691a

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp699G1mb:z6a+CdOOtEvwDpjczN

Score
7/10
upx

Malware Config

Targets

    • Target

      6815d0e4237081_JC.exe

    • Size

      139KB

    • MD5

      6815d0e423708118fdb6702442d8ccb3

    • SHA1

      74f5d83f8f6cfc6902d3ccd742f320125bcfcbfe

    • SHA256

      a8c7d9ba824bcfcb3d7c82da06081bf7e5478b0f0a8658d48cbc349829f7af71

    • SHA512

      8c6a78b935d0cc37d2ceb31a378f5c0579c5cb0b9d6a4c7a1fae5312d7a39d877fe64242dfcd97b5831c55b037686eb856e7790857ea3bcd7e7516e42e7b691a

    • SSDEEP

      1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp699G1mb:z6a+CdOOtEvwDpjczN

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks