22757d47f38b1a0b723ebfc240b8a4fcf0ef531fb9c9f9fba0b5ce3bb4b46247 | Triage

Sharing

General

Target

e54e56b1fb8c9fexe_JC.exe
Size

42KB
Sample

230719-p8ltasfd53
MD5

e54e56b1fb8c9fc4aafef77e3c9cdfd2
SHA1

76ca6cb90b468c0cf5341cf18530f51562fdce89
SHA256

22757d47f38b1a0b723ebfc240b8a4fcf0ef531fb9c9f9fba0b5ce3bb4b46247
SHA512

28e3b52d39ce5905cdca8cf89f87752a295b9f5c58b9e7da324f8a0da3e2cd6808d812419cf3f76618d4aaed77a86e5bd2f80ba880f8889698a0bb003203d0bd
SSDEEP

384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/W/rJ+xLrs7cwcx4MQ:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8Q

Score

7^/10

Malware Config

Targets

- Target
  
  e54e56b1fb8c9fexe_JC.exe
- Size
  
  42KB
- MD5
  
  e54e56b1fb8c9fc4aafef77e3c9cdfd2
- SHA1
  
  76ca6cb90b468c0cf5341cf18530f51562fdce89
- SHA256
  
  22757d47f38b1a0b723ebfc240b8a4fcf0ef531fb9c9f9fba0b5ce3bb4b46247
- SHA512
  
  28e3b52d39ce5905cdca8cf89f87752a295b9f5c58b9e7da324f8a0da3e2cd6808d812419cf3f76618d4aaed77a86e5bd2f80ba880f8889698a0bb003203d0bd
- SSDEEP
  
  384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/W/rJ+xLrs7cwcx4MQ:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8Q
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2