5c3af472ac67a262593d2bc61eb08ffc1453da0857c1bfa600a60d7f58ac58f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NA_NA_20122a1b80f681exeexe_JC.exe
Size

84KB
Sample

230723-wmj6xagb4s
MD5

20122a1b80f6810d58a90366890993cc
SHA1

05511c2f17d52014c6e00fa93c728b7e0f5a0068
SHA256

5c3af472ac67a262593d2bc61eb08ffc1453da0857c1bfa600a60d7f58ac58f2
SHA512

5ff545cf0d223e74f0580abee1a6c85ba07352d1420330c2ea5727bfd50e0050c640cb22c1f3098938848d669335b026be8bf8081b0edf01557cd41c22bb0120
SSDEEP

1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNieRpC:vCjsIOtEvwDpj5H8zPT

Score

7^/10

Malware Config

Targets

- Target
  
  NA_NA_20122a1b80f681exeexe_JC.exe
- Size
  
  84KB
- MD5
  
  20122a1b80f6810d58a90366890993cc
- SHA1
  
  05511c2f17d52014c6e00fa93c728b7e0f5a0068
- SHA256
  
  5c3af472ac67a262593d2bc61eb08ffc1453da0857c1bfa600a60d7f58ac58f2
- SHA512
  
  5ff545cf0d223e74f0580abee1a6c85ba07352d1420330c2ea5727bfd50e0050c640cb22c1f3098938848d669335b026be8bf8081b0edf01557cd41c22bb0120
- SSDEEP
  
  1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNieRpC:vCjsIOtEvwDpj5H8zPT
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2