198670f613acb58c4b29b4cf0bca62dcd833933566bc5ea721a0fc9ee6fbc927 | Triage

Sharing

General

Target

2ad77c677297158c4b6f50ea3cb21af6_JC.exe
Size

647KB
Sample

231011-nhndrsde56
MD5

2ad77c677297158c4b6f50ea3cb21af6
SHA1

c0d35bb49e092af9320c2d686464ba5c98094828
SHA256

198670f613acb58c4b29b4cf0bca62dcd833933566bc5ea721a0fc9ee6fbc927
SHA512

6bbe4c682ae37cb7bca86470d76ef5b2a66ed65d9c15596494b6b70409adc84c4bffb0cee14f6b20a0b31eb5e4a5371d703acf96e550b2e25c041a5b4246b530
SSDEEP

12288:w+67XR9JSSxvYGdodHDusQHNd1KidKjttRYLwM:w+6N986Y7DusQHNd1KidKjttRYLwM

Score

7^/10

Malware Config

Targets

- Target
  
  2ad77c677297158c4b6f50ea3cb21af6_JC.exe
- Size
  
  647KB
- MD5
  
  2ad77c677297158c4b6f50ea3cb21af6
- SHA1
  
  c0d35bb49e092af9320c2d686464ba5c98094828
- SHA256
  
  198670f613acb58c4b29b4cf0bca62dcd833933566bc5ea721a0fc9ee6fbc927
- SHA512
  
  6bbe4c682ae37cb7bca86470d76ef5b2a66ed65d9c15596494b6b70409adc84c4bffb0cee14f6b20a0b31eb5e4a5371d703acf96e550b2e25c041a5b4246b530
- SSDEEP
  
  12288:w+67XR9JSSxvYGdodHDusQHNd1KidKjttRYLwM:w+6N986Y7DusQHNd1KidKjttRYLwM
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2