9c477468f5f76d1ca6ecdd39d4d149d083de65b73edf32a047a18389a0d8bc14 | Triage

Sharing

General

Target

NEAS.63fba4b49042b67642aa55b4bb309bb9_JC.exe
Size

701KB
Sample

231014-ltsfradh77
MD5

63fba4b49042b67642aa55b4bb309bb9
SHA1

e7889826f124ae7815b84e1d37e116449122f747
SHA256

9c477468f5f76d1ca6ecdd39d4d149d083de65b73edf32a047a18389a0d8bc14
SHA512

ae1cb6269843906a0836f8debc751c8cd89bd962fa35b4bf446079c2d3e1fb63419cb7a130abd5216dc07f451a58c28e989e89bb956e773611f0f412276eff9d
SSDEEP

6144:/qDAwl0xPTMiR9JSSxPUKYGdodH/baqE7Al8jk2jcbaqE7Al8c:/+67XR9JSSxvYGdodH/1CVc1Cc

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.63fba4b49042b67642aa55b4bb309bb9_JC.exe
- Size
  
  701KB
- MD5
  
  63fba4b49042b67642aa55b4bb309bb9
- SHA1
  
  e7889826f124ae7815b84e1d37e116449122f747
- SHA256
  
  9c477468f5f76d1ca6ecdd39d4d149d083de65b73edf32a047a18389a0d8bc14
- SHA512
  
  ae1cb6269843906a0836f8debc751c8cd89bd962fa35b4bf446079c2d3e1fb63419cb7a130abd5216dc07f451a58c28e989e89bb956e773611f0f412276eff9d
- SSDEEP
  
  6144:/qDAwl0xPTMiR9JSSxPUKYGdodH/baqE7Al8jk2jcbaqE7Al8c:/+67XR9JSSxvYGdodH/1CVc1Cc
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2