c85b4ad1cc2f99884d9c72aad7a77df78ac5d3ff8a85058563e83d131dcd4dcc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b20654159fa855fb8622e575a136107a_JC.exe
Size

512KB
Sample

231012-sj5fwsff4x
MD5

b20654159fa855fb8622e575a136107a
SHA1

d7233a553b48ec96c656f854575a5be93d339e8f
SHA256

c85b4ad1cc2f99884d9c72aad7a77df78ac5d3ff8a85058563e83d131dcd4dcc
SHA512

c14e64a93c88398e3500871ecc5ba71a3a226d1dd05cce2596c394f2f10cb477644ee2ad4e1b34eb5cf9dc1ae5e39b283388859f85466ede949abd5d3a65643f
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxQ:dqDAwl0xPTMiR9JSSxPUKYGdodHV

Score

7^/10

Malware Config

Targets

- Target
  
  b20654159fa855fb8622e575a136107a_JC.exe
- Size
  
  512KB
- MD5
  
  b20654159fa855fb8622e575a136107a
- SHA1
  
  d7233a553b48ec96c656f854575a5be93d339e8f
- SHA256
  
  c85b4ad1cc2f99884d9c72aad7a77df78ac5d3ff8a85058563e83d131dcd4dcc
- SHA512
  
  c14e64a93c88398e3500871ecc5ba71a3a226d1dd05cce2596c394f2f10cb477644ee2ad4e1b34eb5cf9dc1ae5e39b283388859f85466ede949abd5d3a65643f
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxQ:dqDAwl0xPTMiR9JSSxPUKYGdodHV
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2