586675c28b01911e75f8e53814ae1b0cc8e2f76e2d5936d3f353e6598a9f5f3f | Triage

Sharing

General

Target

NEAS.NEAS3d2b8c97962a6c98b7f733b59dcfb59aexe_JC.exe
Size

538KB
Sample

231013-spq6fsah8t
MD5

3d2b8c97962a6c98b7f733b59dcfb59a
SHA1

5aa7bad8eb7057c9c9eb4b663e42bcc52a2530ff
SHA256

586675c28b01911e75f8e53814ae1b0cc8e2f76e2d5936d3f353e6598a9f5f3f
SHA512

42edac3e8bd28197ab1c3cefe2cfdda23cdf73188a465f9ffbbf5a762db9efa453a3c1af2e041103238b3a721cafd42e0560e4e44d84f2044fc91c3578062d70
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx7:dqDAwl0xPTMiR9JSSxPUKYGdodHi

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.NEAS3d2b8c97962a6c98b7f733b59dcfb59aexe_JC.exe
- Size
  
  538KB
- MD5
  
  3d2b8c97962a6c98b7f733b59dcfb59a
- SHA1
  
  5aa7bad8eb7057c9c9eb4b663e42bcc52a2530ff
- SHA256
  
  586675c28b01911e75f8e53814ae1b0cc8e2f76e2d5936d3f353e6598a9f5f3f
- SHA512
  
  42edac3e8bd28197ab1c3cefe2cfdda23cdf73188a465f9ffbbf5a762db9efa453a3c1af2e041103238b3a721cafd42e0560e4e44d84f2044fc91c3578062d70
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx7:dqDAwl0xPTMiR9JSSxPUKYGdodHi
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2