Overview

overview

10

Static

static

3

319f408ff1...JC.exe

windows7-x64

10

319f408ff1...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    319f408ff1b363ef7c70cc05ff085930_JC.exe

  • Size

    132KB

  • Sample

    231006-pkh3habc2s

  • MD5

    319f408ff1b363ef7c70cc05ff085930

  • SHA1

    09272c928f48cd17216c0ec35fedde77e5f0df55

  • SHA256

    ec150ea23fcda5b7e1239cb735bdbfa857ab8ddae9d7eaf47204131ef25555cb

  • SHA512

    40a86dcead1408217339834d483da19603ccede765d79f51d9ba20809c0647da0fca0bec452ada20c2727c4482e0c9a5d58ed63b01abf7ee42cd328e1548e0c9

  • SSDEEP

    384:zsHsvnK/en5HsvnK/e/I13rz9qcGPJWkr4VMXC6vgxlCxCvPktXuDU/W:zsH1en5H1e/IteWo4iXLvgx48kZQU/W

Score
10/10
persistence

Malware Config

Targets

    • Target

      319f408ff1b363ef7c70cc05ff085930_JC.exe

    • Size

      132KB

    • MD5

      319f408ff1b363ef7c70cc05ff085930

    • SHA1

      09272c928f48cd17216c0ec35fedde77e5f0df55

    • SHA256

      ec150ea23fcda5b7e1239cb735bdbfa857ab8ddae9d7eaf47204131ef25555cb

    • SHA512

      40a86dcead1408217339834d483da19603ccede765d79f51d9ba20809c0647da0fca0bec452ada20c2727c4482e0c9a5d58ed63b01abf7ee42cd328e1548e0c9

    • SSDEEP

      384:zsHsvnK/en5HsvnK/e/I13rz9qcGPJWkr4VMXC6vgxlCxCvPktXuDU/W:zsH1en5H1e/IteWo4iXLvgx48kZQU/W

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Modifies AppInit DLL entries

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks