6a4e4f3166e05a83f9f9b57a9ba228e29e080d27363971bd887e8bfd494beb84 | Triage

Sharing

General

Target

NEAS.6a4e4f3166e05a83f9f9b57a9ba228e29e080d27363971bd887e8bfd494beb84_JC.exe
Size

41KB
Sample

231007-x9ys9ahc94
MD5

2df7dd1501f246e21a2f06190ee6a046
SHA1

13868446996cc61e3f05396ada5bfd11ee58d1ea
SHA256

6a4e4f3166e05a83f9f9b57a9ba228e29e080d27363971bd887e8bfd494beb84
SHA512

dc6f01b7d530cb020f1609ef352e92c809764e7cb360f56cc4d4965523d4eaa74ac59ca1f21ace562d419bc1f924d5a342062521ec32a8beba02c82184bdb2b1
SSDEEP

768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbJ:bgGYcA/53GAA6y37g

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.6a4e4f3166e05a83f9f9b57a9ba228e29e080d27363971bd887e8bfd494beb84_JC.exe
- Size
  
  41KB
- MD5
  
  2df7dd1501f246e21a2f06190ee6a046
- SHA1
  
  13868446996cc61e3f05396ada5bfd11ee58d1ea
- SHA256
  
  6a4e4f3166e05a83f9f9b57a9ba228e29e080d27363971bd887e8bfd494beb84
- SHA512
  
  dc6f01b7d530cb020f1609ef352e92c809764e7cb360f56cc4d4965523d4eaa74ac59ca1f21ace562d419bc1f924d5a342062521ec32a8beba02c82184bdb2b1
- SSDEEP
  
  768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbJ:bgGYcA/53GAA6y37g
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2