Overview

overview

7

Static

static

3

2023 Custo...oc.exe

windows7-x64

6

2023 Custo...oc.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    NEAS.4a338a75360d288e6b4fa542b39f45900c33aa433f0cfa21b45079fe900a64e7rar_JC.rar
  • Size 415KB
  • Sample231006-q2dpsaeb95
  • SHA256 4a338a75360d288e6b4fa542b39f45900c33aa433f0cfa21b45079fe900a64e7
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
persistence

Malware Config

Targets

    • Target
      2023 Customer Information Export(1).doc.exe
    • Size 690KB
    • SHA256 4d845e9e862b6cc61cf4909f4c16c2330483ba62d32c977c0080020a841bf3e1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks