541e7eb3677f54ed7b82903cd608c42aaf4ac28495d65ece13e23c6ca5169bc1 | Triage

Sharing

General

Target

b4479c37cb051a_JC.exe
Size

66KB
Sample

230718-qallbabc3w
MD5

b4479c37cb051ae922d1d6278a50fb02
SHA1

e9d8814be2dc1b49f396c5cbbf561584339d2722
SHA256

541e7eb3677f54ed7b82903cd608c42aaf4ac28495d65ece13e23c6ca5169bc1
SHA512

cbee5a955f692c4a3a8d02480bedce5ed09f66d5130accbcc060dae5143772e9ffa34381592478a6ec94498e3ce5686d44b4bbcd0a07b04f179dc2b3b004dec4
SSDEEP

1536:79mqyNhQMOtEvwDpjBPY7xv3gnQe+OHF7c:RlqbOtEvwDpjBgf

Score

7^/10

Malware Config

Targets

- Target
  
  b4479c37cb051a_JC.exe
- Size
  
  66KB
- MD5
  
  b4479c37cb051ae922d1d6278a50fb02
- SHA1
  
  e9d8814be2dc1b49f396c5cbbf561584339d2722
- SHA256
  
  541e7eb3677f54ed7b82903cd608c42aaf4ac28495d65ece13e23c6ca5169bc1
- SHA512
  
  cbee5a955f692c4a3a8d02480bedce5ed09f66d5130accbcc060dae5143772e9ffa34381592478a6ec94498e3ce5686d44b4bbcd0a07b04f179dc2b3b004dec4
- SSDEEP
  
  1536:79mqyNhQMOtEvwDpjBPY7xv3gnQe+OHF7c:RlqbOtEvwDpjBgf
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2