General

  • Target

    NEAS.13d1a45039fed3faf1c46fd3ec2608c0_JC.exe

  • Size

    35KB

  • Sample

    231013-ycybwsga45

  • MD5

    13d1a45039fed3faf1c46fd3ec2608c0

  • SHA1

    a40dee827246789b1eb672eead2671ea2d1f6373

  • SHA256

    538c527f04dc48345502a1315096785a2b8574b196a6dad735a81e59f375198e

  • SHA512

    180fb5c02890fdc541abb55f51486ac0055fe575184f96919d0826f1fde5c1a0f3fafee411e6f53cf36c29fb8a6bd150c08903582efdbbb372a6185728ae9050

  • SSDEEP

    768:WWH6E4y5Uiy1SssZqdoadXFrC8EBXbuLRCShkgJ:WWH6E4y58SsskdoadXZH6bVa

Score
7/10
upx

Malware Config

Targets

    • Target

      NEAS.13d1a45039fed3faf1c46fd3ec2608c0_JC.exe

    • Size

      35KB

    • MD5

      13d1a45039fed3faf1c46fd3ec2608c0

    • SHA1

      a40dee827246789b1eb672eead2671ea2d1f6373

    • SHA256

      538c527f04dc48345502a1315096785a2b8574b196a6dad735a81e59f375198e

    • SHA512

      180fb5c02890fdc541abb55f51486ac0055fe575184f96919d0826f1fde5c1a0f3fafee411e6f53cf36c29fb8a6bd150c08903582efdbbb372a6185728ae9050

    • SSDEEP

      768:WWH6E4y5Uiy1SssZqdoadXFrC8EBXbuLRCShkgJ:WWH6E4y58SsskdoadXZH6bVa

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks