c98714e61f3697f59b0af157ecc36d4727cf006240c3e55888108818bd7ea706 | Triage

Sharing

General

Target

e6ffa0aae79abfexe_JC.exe
Size

35KB
Sample

230719-qg3heaga55
MD5

e6ffa0aae79abf28ae9ed9448d160681
SHA1

f15644a145e469829acd35e4e8bd2818762220d3
SHA256

c98714e61f3697f59b0af157ecc36d4727cf006240c3e55888108818bd7ea706
SHA512

04ae18b7aef686a19c67cdbe6f7d1dd9b253b9583cceb8c1d5927df0decf52473a14d7c7b22b2d2cc175438fc7f305dcd5b23a4494bc3c648229d3c06e3007cb
SSDEEP

384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf6XT+0vJsg5b5Uz:bgX4zYcgTEu6QOaryfjqDlC6JFbKz

Score

7^/10

Malware Config

Targets

- Target
  
  e6ffa0aae79abfexe_JC.exe
- Size
  
  35KB
- MD5
  
  e6ffa0aae79abf28ae9ed9448d160681
- SHA1
  
  f15644a145e469829acd35e4e8bd2818762220d3
- SHA256
  
  c98714e61f3697f59b0af157ecc36d4727cf006240c3e55888108818bd7ea706
- SHA512
  
  04ae18b7aef686a19c67cdbe6f7d1dd9b253b9583cceb8c1d5927df0decf52473a14d7c7b22b2d2cc175438fc7f305dcd5b23a4494bc3c648229d3c06e3007cb
- SSDEEP
  
  384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf6XT+0vJsg5b5Uz:bgX4zYcgTEu6QOaryfjqDlC6JFbKz
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2