General

  • Target

    ec278c83b69639exe_JC.exe

  • Size

    90KB

  • Sample

    230719-rb3rnahb61

  • MD5

    ec278c83b696396b7da86f6194752831

  • SHA1

    4f1b6c90d0c380f7d49918e858bce461055765db

  • SHA256

    6dc345582e0f7c3fa22cc881ab1a4d6e1da9a5ca430c5e4c5bfa6f0271d912ff

  • SHA512

    8497f362a9e8595e4fa4e907a018da46660f557efa153e40af812c6a5ccd902ddbf14f32caabeff643f59f9d5ebe607cbe90acbdc6c93e753fb4f7a87a2ec158

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjuv/:zCsanOtEvwDpj3

Score
7/10
upx

Malware Config

Targets

    • Target

      ec278c83b69639exe_JC.exe

    • Size

      90KB

    • MD5

      ec278c83b696396b7da86f6194752831

    • SHA1

      4f1b6c90d0c380f7d49918e858bce461055765db

    • SHA256

      6dc345582e0f7c3fa22cc881ab1a4d6e1da9a5ca430c5e4c5bfa6f0271d912ff

    • SHA512

      8497f362a9e8595e4fa4e907a018da46660f557efa153e40af812c6a5ccd902ddbf14f32caabeff643f59f9d5ebe607cbe90acbdc6c93e753fb4f7a87a2ec158

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjuv/:zCsanOtEvwDpj3

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks