Overview

overview

7

Static

static

3

93e98e4eb7...JC.exe

windows7-x64

7

93e98e4eb7...JC.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    93e98e4eb76b6f7e5f7962d42dbf766c_JC.exe

  • Size

    2.0MB

  • Sample

    231012-spwqyafh4s

  • MD5

    93e98e4eb76b6f7e5f7962d42dbf766c

  • SHA1

    fb6b2711498858e5139b0fe08de98b2d6d4fb19f

  • SHA256

    841d6ce34dc051867eb8401d44921b2f62b916fc9fe1ee6934c34f9d7fc9b224

  • SHA512

    b82e8a38c4bceec703a1428510e3c5efccf7cd1bde17e97cfeb6b8b2e82e19b3c6d41546487d1ddaa609b0db269cdc4ff3a64c02d10b74fceb29193e634904a3

  • SSDEEP

    49152:VBO2M1Uz5417/ecAAcToZMpOU84CP258UNObuCL6inq:iz/ePoZhU84Cu5DNiVzq

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      93e98e4eb76b6f7e5f7962d42dbf766c_JC.exe

    • Size

      2.0MB

    • MD5

      93e98e4eb76b6f7e5f7962d42dbf766c

    • SHA1

      fb6b2711498858e5139b0fe08de98b2d6d4fb19f

    • SHA256

      841d6ce34dc051867eb8401d44921b2f62b916fc9fe1ee6934c34f9d7fc9b224

    • SHA512

      b82e8a38c4bceec703a1428510e3c5efccf7cd1bde17e97cfeb6b8b2e82e19b3c6d41546487d1ddaa609b0db269cdc4ff3a64c02d10b74fceb29193e634904a3

    • SSDEEP

      49152:VBO2M1Uz5417/ecAAcToZMpOU84CP258UNObuCL6inq:iz/ePoZhU84Cu5DNiVzq

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks