General

  • Target

    79b9a9b172f908_JC.exe

  • Size

    98KB

  • Sample

    230716-vfzgksgg2x

  • MD5

    79b9a9b172f9089e8d9fc9abc4263601

  • SHA1

    d6474f3ac829153e0a4ce5e3961df871a1435b29

  • SHA256

    0f48a04ed1f69396aa5b374f80c16739e0613572ab01295be4bfdbdfd24e74cd

  • SHA512

    5095fd504a51dbfe60ad41b3be2b2f5eaef6b94b7a48b4b6b01d4e2aec3eea8d9c4c3d9fa8bf9feeeca844ef19612ab5478a2c92ed1e79710192bb0f64a17f1e

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpQbCJjLyV4:AnBdOOtEvwDpj6zO

Score
7/10
upx

Malware Config

Targets

    • Target

      79b9a9b172f908_JC.exe

    • Size

      98KB

    • MD5

      79b9a9b172f9089e8d9fc9abc4263601

    • SHA1

      d6474f3ac829153e0a4ce5e3961df871a1435b29

    • SHA256

      0f48a04ed1f69396aa5b374f80c16739e0613572ab01295be4bfdbdfd24e74cd

    • SHA512

      5095fd504a51dbfe60ad41b3be2b2f5eaef6b94b7a48b4b6b01d4e2aec3eea8d9c4c3d9fa8bf9feeeca844ef19612ab5478a2c92ed1e79710192bb0f64a17f1e

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpQbCJjLyV4:AnBdOOtEvwDpj6zO

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks