6ef64c032a37f3cfbe590fce0b01578b96b6c26f4cf827e2ef8a30c1c74ae4f8 | Triage

Sharing

General

Target

a131627d46f044_JC.exe
Size

60KB
Sample

230717-wlh78aeh61
MD5

a131627d46f0446c4bb52c5f8f34ee62
SHA1

c59b62b84bad0fc94611d9f0e2e50443a30d416b
SHA256

6ef64c032a37f3cfbe590fce0b01578b96b6c26f4cf827e2ef8a30c1c74ae4f8
SHA512

32c1f5b0e0f98ded1039d8350635cb0656c31bc64824bd68ec38ac5d45bb57007d691602443c380baf32ec223da590e9819e431ea33c8eec29cfcdf8c33dbd49
SSDEEP

1536:vj+jsMQMOtEvwDpj5HyCyh7vtRJ4BqKb1cKtqPW:vCjsIOtEvwDpj5Hv0E

Score

7^/10

Malware Config

Targets

- Target
  
  a131627d46f044_JC.exe
- Size
  
  60KB
- MD5
  
  a131627d46f0446c4bb52c5f8f34ee62
- SHA1
  
  c59b62b84bad0fc94611d9f0e2e50443a30d416b
- SHA256
  
  6ef64c032a37f3cfbe590fce0b01578b96b6c26f4cf827e2ef8a30c1c74ae4f8
- SHA512
  
  32c1f5b0e0f98ded1039d8350635cb0656c31bc64824bd68ec38ac5d45bb57007d691602443c380baf32ec223da590e9819e431ea33c8eec29cfcdf8c33dbd49
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5HyCyh7vtRJ4BqKb1cKtqPW:vCjsIOtEvwDpj5Hv0E
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2