cbf98ffbf089665e07fa9777fb7d888a9dbc8fa02e35ed56c956a46f9c61ef06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efcffa69246062exe_JC.exe
Size

47KB
Sample

230719-r7thvshe6t
MD5

efcffa69246062c63329d206f260165a
SHA1

79ff925a7dbd7caf3f5d09f44077a91addc65f43
SHA256

cbf98ffbf089665e07fa9777fb7d888a9dbc8fa02e35ed56c956a46f9c61ef06
SHA512

7de8b01a2c23e9d25c45c24030c0c061a4d5f1719349f947373d3459ab5dd6aa0d0bf33e0bcf159b642675cd5d9a40b6f876e423b4e7218d348726d5ebab3bbc
SSDEEP

768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4Uu6EIEIDKlEPM:bIDOw9a0DwitDwIzDKlEPM

Score

7^/10

Malware Config

Targets

- Target
  
  efcffa69246062exe_JC.exe
- Size
  
  47KB
- MD5
  
  efcffa69246062c63329d206f260165a
- SHA1
  
  79ff925a7dbd7caf3f5d09f44077a91addc65f43
- SHA256
  
  cbf98ffbf089665e07fa9777fb7d888a9dbc8fa02e35ed56c956a46f9c61ef06
- SHA512
  
  7de8b01a2c23e9d25c45c24030c0c061a4d5f1719349f947373d3459ab5dd6aa0d0bf33e0bcf159b642675cd5d9a40b6f876e423b4e7218d348726d5ebab3bbc
- SSDEEP
  
  768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4Uu6EIEIDKlEPM:bIDOw9a0DwitDwIzDKlEPM
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2