5eb334932ec15c0106c32c7a422b225d2ac898fa082a32d357772aaa49968a24 | Triage

Sharing

General

Target

7f04aae9673279_JC.exe
Size

52KB
Sample

230716-vw7swsha21
MD5

7f04aae9673279244522a6bc4c254473
SHA1

81f46256b4b609e1e2c057c0c405306d16e8e101
SHA256

5eb334932ec15c0106c32c7a422b225d2ac898fa082a32d357772aaa49968a24
SHA512

3a7d75ca6f5234c5760a5e3593e28ac72d21d57f3d1a1d0805a30ccca0053191f6ed65f7413b49c6e5a753a1fbc6ffaf1d4a2c706e1b62b6f703915f5f922b3e
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxtawtAp:6j+1NMOtEvwDpjr8ox8T

Score

7^/10

Malware Config

Targets

- Target
  
  7f04aae9673279_JC.exe
- Size
  
  52KB
- MD5
  
  7f04aae9673279244522a6bc4c254473
- SHA1
  
  81f46256b4b609e1e2c057c0c405306d16e8e101
- SHA256
  
  5eb334932ec15c0106c32c7a422b225d2ac898fa082a32d357772aaa49968a24
- SHA512
  
  3a7d75ca6f5234c5760a5e3593e28ac72d21d57f3d1a1d0805a30ccca0053191f6ed65f7413b49c6e5a753a1fbc6ffaf1d4a2c706e1b62b6f703915f5f922b3e
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxtawtAp:6j+1NMOtEvwDpjr8ox8T
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2