General

  • Target

    ff3211b63f8e61exe_JC.exe

  • Size

    77KB

  • Sample

    230719-wn6rasba6x

  • MD5

    ff3211b63f8e613281970139d2386946

  • SHA1

    4706fa834e664ae6d274c6dd0b1ac368cc57ff13

  • SHA256

    242ff0d478e782aca371ff9892c14225d47052acb304f9d068be1c1bf0ae3e16

  • SHA512

    c3138a194fa825891ee0a16d7f366b7b1aa626c96cfb4bcc85655c9d6943d3a150e4f2f60fcb3c14403b82de6aee7ba9c95f0518bd45678d3635aaadac59631f

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOTdSWCPRMoA:T6a+rdOOtEvwDpjNN

Score
7/10
upx

Malware Config

Targets

    • Target

      ff3211b63f8e61exe_JC.exe

    • Size

      77KB

    • MD5

      ff3211b63f8e613281970139d2386946

    • SHA1

      4706fa834e664ae6d274c6dd0b1ac368cc57ff13

    • SHA256

      242ff0d478e782aca371ff9892c14225d47052acb304f9d068be1c1bf0ae3e16

    • SHA512

      c3138a194fa825891ee0a16d7f366b7b1aa626c96cfb4bcc85655c9d6943d3a150e4f2f60fcb3c14403b82de6aee7ba9c95f0518bd45678d3635aaadac59631f

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOTdSWCPRMoA:T6a+rdOOtEvwDpjNN

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v6

Tasks