47e54338a09afd2947c53d880c1ac5ce99c211fd2cf4e901185527c4d9605ed5 | Triage

Sharing

General

Target

NEAS.NEAS2f188bcb57dcb3785c27181f8f4346a1exe_JC.exe
Size

534KB
Sample

231013-sj1spscg62
MD5

2f188bcb57dcb3785c27181f8f4346a1
SHA1

d6b66095661667370242e019dc552d2a05835f68
SHA256

47e54338a09afd2947c53d880c1ac5ce99c211fd2cf4e901185527c4d9605ed5
SHA512

d71132f6104b426b99f8c4415dc55467887dc356b4fed47e9c20694128af42dbb4d143dcadb0162c2a8d0bdbb0a6ec231191ba11dba32ee7f74efa45f7bf19a2
SSDEEP

3072:ECaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxo:EqDAwl0xPTMiR9JSSxPUKYGdodHB

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.NEAS2f188bcb57dcb3785c27181f8f4346a1exe_JC.exe
- Size
  
  534KB
- MD5
  
  2f188bcb57dcb3785c27181f8f4346a1
- SHA1
  
  d6b66095661667370242e019dc552d2a05835f68
- SHA256
  
  47e54338a09afd2947c53d880c1ac5ce99c211fd2cf4e901185527c4d9605ed5
- SHA512
  
  d71132f6104b426b99f8c4415dc55467887dc356b4fed47e9c20694128af42dbb4d143dcadb0162c2a8d0bdbb0a6ec231191ba11dba32ee7f74efa45f7bf19a2
- SSDEEP
  
  3072:ECaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxo:EqDAwl0xPTMiR9JSSxPUKYGdodHB
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2