d357c6acc7b4a543848229d66da8ea6a1d1be8a8859b36de763342ab7ce48cd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d357c6acc7b4a543848229d66da8ea6a1d1be8a8859b36de763342ab7ce48cd7_JC.exe
Size

62KB
Sample

231007-y3wkzsfb2v
MD5

899bbaa2d3349363a1f41e102fd0b23b
SHA1

a7f549c8775042a81535e996c41d66075e487b4b
SHA256

d357c6acc7b4a543848229d66da8ea6a1d1be8a8859b36de763342ab7ce48cd7
SHA512

8823351cf45517ae80ae153419f47e4939d83c30e1c69a0b18ebc49d150c2b82dca327eb0301f41de13b0db3e0d678ec4ea77063ceedffdee512009bae98e36c
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEWZ+o:6j+1NMOtEvwDpjr8ox8UDEpso

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.d357c6acc7b4a543848229d66da8ea6a1d1be8a8859b36de763342ab7ce48cd7_JC.exe
- Size
  
  62KB
- MD5
  
  899bbaa2d3349363a1f41e102fd0b23b
- SHA1
  
  a7f549c8775042a81535e996c41d66075e487b4b
- SHA256
  
  d357c6acc7b4a543848229d66da8ea6a1d1be8a8859b36de763342ab7ce48cd7
- SHA512
  
  8823351cf45517ae80ae153419f47e4939d83c30e1c69a0b18ebc49d150c2b82dca327eb0301f41de13b0db3e0d678ec4ea77063ceedffdee512009bae98e36c
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpEWZ+o:6j+1NMOtEvwDpjr8ox8UDEpso
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2