b14dc65ddee82651f45abcf6092da6318e936b071aa93fc955a3f930aea15beb | Triage

Sharing

General

Target

a818d6834e4d351d6fa8a2348b73f4ee_JC.exe
Size

60KB
Sample

231012-bz6kfsgc21
MD5

a818d6834e4d351d6fa8a2348b73f4ee
SHA1

b66018d1f8829b256473a6c07eabe6fbbadcd034
SHA256

b14dc65ddee82651f45abcf6092da6318e936b071aa93fc955a3f930aea15beb
SHA512

7e937a09aeaa440ba24e72bc54a52122ed3990b12758bc3d5afe47fa1983ac71f257ed96764bb4735031f0eaf9daaa15832e3fd649d1f97b56457db1369aacac
SSDEEP

384:+5rDuuOFpEauMLfQDb2pproT/z4o1GJE6Al6zVyXeTLhrqNNNNLwwwwgn777l:MDcpEBMLfQcubtGE96ByXeTLdb

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  a818d6834e4d351d6fa8a2348b73f4ee_JC.exe
- Size
  
  60KB
- MD5
  
  a818d6834e4d351d6fa8a2348b73f4ee
- SHA1
  
  b66018d1f8829b256473a6c07eabe6fbbadcd034
- SHA256
  
  b14dc65ddee82651f45abcf6092da6318e936b071aa93fc955a3f930aea15beb
- SHA512
  
  7e937a09aeaa440ba24e72bc54a52122ed3990b12758bc3d5afe47fa1983ac71f257ed96764bb4735031f0eaf9daaa15832e3fd649d1f97b56457db1369aacac
- SSDEEP
  
  384:+5rDuuOFpEauMLfQDb2pproT/z4o1GJE6Al6zVyXeTLhrqNNNNLwwwwgn777l:MDcpEBMLfQcubtGE96ByXeTLdb
Score

8^/10

evasion
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2