604a00327f51c387533fdc35242712e8b3cc206022ad1f2a37aed9ce62db2280 | Triage

Sharing

General

Target

e71ca2ca8c60915b50ad5b8af289675c_mafia_JC.exe
Size

4.8MB
Sample

230830-wd38esgf4z
MD5

e71ca2ca8c60915b50ad5b8af289675c
SHA1

675d4d390bd7bbc6d5981f8eccc267fb19fc4876
SHA256

604a00327f51c387533fdc35242712e8b3cc206022ad1f2a37aed9ce62db2280
SHA512

ca1da5f326ebe3fb721768a2208771f69322f9248871dc4cb3f34551171e725e0521b14c9851fc4dccb8b3dbcb00acba34e70a9ad62025c63813764229960a81
SSDEEP

98304:YQiii83RbXcYMoz77AZ0qCEhza8lkn89NA30EjaLpfVeml50SRP1ri2AGd6uxci3:tiii83RbMDhBY8M305RVeEiSRP1gQ6uP

Score

7^/10

Malware Config

Targets

- Target
  
  e71ca2ca8c60915b50ad5b8af289675c_mafia_JC.exe
- Size
  
  4.8MB
- MD5
  
  e71ca2ca8c60915b50ad5b8af289675c
- SHA1
  
  675d4d390bd7bbc6d5981f8eccc267fb19fc4876
- SHA256
  
  604a00327f51c387533fdc35242712e8b3cc206022ad1f2a37aed9ce62db2280
- SHA512
  
  ca1da5f326ebe3fb721768a2208771f69322f9248871dc4cb3f34551171e725e0521b14c9851fc4dccb8b3dbcb00acba34e70a9ad62025c63813764229960a81
- SSDEEP
  
  98304:YQiii83RbXcYMoz77AZ0qCEhza8lkn89NA30EjaLpfVeml50SRP1ri2AGd6uxci3:tiii83RbMDhBY8M305RVeEiSRP1gQ6uP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2