b1716247dfc4440b3a2f20842964b213940e2ad714c59b222f27fe59ef6300ba | Triage

Sharing

General

Target

NEAS.a6279085cf5bb836fc9700772526ed40_JC.exe
Size

224KB
Sample

231031-1dra3sgb79
MD5

a6279085cf5bb836fc9700772526ed40
SHA1

1d478b3f903856c73e7b2df68c8086401449f02c
SHA256

b1716247dfc4440b3a2f20842964b213940e2ad714c59b222f27fe59ef6300ba
SHA512

ed2ab7d23a8f475266a5c05f206fbbf17be7e15894ebe497a4bb174980bb0f16ca388ec67427858909c75f36ef7e7689df4d119b430bc29a86f45d789e24816f
SSDEEP

3072:G6wKhr5QhCjG8G3GbGVGBGfGuGxGWYcrf6KadE:G69hdQAYcD6Kad

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.a6279085cf5bb836fc9700772526ed40_JC.exe
- Size
  
  224KB
- MD5
  
  a6279085cf5bb836fc9700772526ed40
- SHA1
  
  1d478b3f903856c73e7b2df68c8086401449f02c
- SHA256
  
  b1716247dfc4440b3a2f20842964b213940e2ad714c59b222f27fe59ef6300ba
- SHA512
  
  ed2ab7d23a8f475266a5c05f206fbbf17be7e15894ebe497a4bb174980bb0f16ca388ec67427858909c75f36ef7e7689df4d119b430bc29a86f45d789e24816f
- SSDEEP
  
  3072:G6wKhr5QhCjG8G3GbGVGBGfGuGxGWYcrf6KadE:G69hdQAYcD6Kad
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2