b6e049e8d3290c1c025755890cd2069129ecd2acb20ed526a99f5a9df5270a7b | Triage

Sharing

General

Target

dfc4e9da3ba87f_JC.exe
Size

33KB
Sample

230718-ywptvsec8z
MD5

dfc4e9da3ba87f6306c4cb45fbad2fab
SHA1

6251f7ffd8730f8dc62efcac04381d2f54167d25
SHA256

b6e049e8d3290c1c025755890cd2069129ecd2acb20ed526a99f5a9df5270a7b
SHA512

f4605ffa060e827fdfbf715d78162f0d91cd4774e047e76eb9fbe457cfc5d1930554c284175e0e7db55c1e384620f01f010d99e4928b7fecd46165bf7d2d74fa
SSDEEP

384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoi0Win1oRIwMVmaz3yHUT:b7o/2n1TCraU6GD1a4X0WcO+wMVm+CUT

Score

7^/10

Malware Config

Targets

- Target
  
  dfc4e9da3ba87f_JC.exe
- Size
  
  33KB
- MD5
  
  dfc4e9da3ba87f6306c4cb45fbad2fab
- SHA1
  
  6251f7ffd8730f8dc62efcac04381d2f54167d25
- SHA256
  
  b6e049e8d3290c1c025755890cd2069129ecd2acb20ed526a99f5a9df5270a7b
- SHA512
  
  f4605ffa060e827fdfbf715d78162f0d91cd4774e047e76eb9fbe457cfc5d1930554c284175e0e7db55c1e384620f01f010d99e4928b7fecd46165bf7d2d74fa
- SSDEEP
  
  384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoi0Win1oRIwMVmaz3yHUT:b7o/2n1TCraU6GD1a4X0WcO+wMVm+CUT
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2