5a1e87295730feb49362b6b4468b58f05b1f07bc397ac94f25eda5fc0010a701 | Triage

Sharing

General

Target

a58aab3bd2cfaa86f7557e33b096c905_JC.exe
Size

40KB
Sample

231001-psvq9sag8t
MD5

a58aab3bd2cfaa86f7557e33b096c905
SHA1

656e534616387ea872005c8a1263a4303a2a1b03
SHA256

5a1e87295730feb49362b6b4468b58f05b1f07bc397ac94f25eda5fc0010a701
SHA512

1fee3268e2de603362b70182905352420fb298eaf10ab57b684bff2a41d3360bb8ae6e35e0391236e28758d88c7dae9a9663108fe161a551aa03ab8bb0c26435
SSDEEP

768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpa:OLsF2Kerc64sTiX2IV0Dhua

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  a58aab3bd2cfaa86f7557e33b096c905_JC.exe
- Size
  
  40KB
- MD5
  
  a58aab3bd2cfaa86f7557e33b096c905
- SHA1
  
  656e534616387ea872005c8a1263a4303a2a1b03
- SHA256
  
  5a1e87295730feb49362b6b4468b58f05b1f07bc397ac94f25eda5fc0010a701
- SHA512
  
  1fee3268e2de603362b70182905352420fb298eaf10ab57b684bff2a41d3360bb8ae6e35e0391236e28758d88c7dae9a9663108fe161a551aa03ab8bb0c26435
- SSDEEP
  
  768:qZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqKNPWQHpa:OLsF2Kerc64sTiX2IV0Dhua
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2