2cab98e957f76ee0b71577440fed15c41318803f5c3e8e9bca9f3f2622ba6493 | Triage

Sharing

General

Target

2cab98e957f76ee0b71577440fed15c41318803f5c3e8e9bca9f3f2622ba6493_JC.exe
Size

1.9MB
Sample

230923-w58l8abc77
MD5

4266ca9ad0db7e8663db5be5c8170928
SHA1

e3e80cc74cc04b096ba2e163322784cc40b1b298
SHA256

2cab98e957f76ee0b71577440fed15c41318803f5c3e8e9bca9f3f2622ba6493
SHA512

a1a743ef44e893a5e53227da772ae02d956fa7fe55ce743fbdcb9c8ad4408b5c43d20ebf62f2ac2aa52beaae94913499553a17b6ab4622db90f8b3a2cdef8406
SSDEEP

49152:rLLcrlESak4OPj3p32a+9WC0FlvpL+pQJ3yDS:rkESaktL3p32atLL+WJ3yDS

Score

7^/10

Malware Config

Targets

- Target
  
  2cab98e957f76ee0b71577440fed15c41318803f5c3e8e9bca9f3f2622ba6493_JC.exe
- Size
  
  1.9MB
- MD5
  
  4266ca9ad0db7e8663db5be5c8170928
- SHA1
  
  e3e80cc74cc04b096ba2e163322784cc40b1b298
- SHA256
  
  2cab98e957f76ee0b71577440fed15c41318803f5c3e8e9bca9f3f2622ba6493
- SHA512
  
  a1a743ef44e893a5e53227da772ae02d956fa7fe55ce743fbdcb9c8ad4408b5c43d20ebf62f2ac2aa52beaae94913499553a17b6ab4622db90f8b3a2cdef8406
- SSDEEP
  
  49152:rLLcrlESak4OPj3p32a+9WC0FlvpL+pQJ3yDS:rkESaktL3p32atLL+WJ3yDS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2