84ab5a23f70e9775f0a89c3a73401b9b3b45574068e58ba3c0f137a999b8e2bf | Triage

Sharing

General

Target

NEAS.ba046554cea6c176ab302385e78f1bab_JC.exe
Size

79KB
Sample

231101-wr98wsdc54
MD5

ba046554cea6c176ab302385e78f1bab
SHA1

96ab8f419e92216f40263e3fda22f8612c86fd06
SHA256

84ab5a23f70e9775f0a89c3a73401b9b3b45574068e58ba3c0f137a999b8e2bf
SHA512

1da16b098af100f9c599e7b696bc755335ea51cdfb4cd30b60ab8b25e1b04b6433303521b48143a9728ef57e148fb12c96f9537a3f3710939ed24a0b057298f7
SSDEEP

1536:EzfMMknJvVvwlTHavNbA8w9KxlO9Lc3Otp15wKwYPpLKQ:CfMbJOZHaV7wdZcm19w6p/

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.ba046554cea6c176ab302385e78f1bab_JC.exe
- Size
  
  79KB
- MD5
  
  ba046554cea6c176ab302385e78f1bab
- SHA1
  
  96ab8f419e92216f40263e3fda22f8612c86fd06
- SHA256
  
  84ab5a23f70e9775f0a89c3a73401b9b3b45574068e58ba3c0f137a999b8e2bf
- SHA512
  
  1da16b098af100f9c599e7b696bc755335ea51cdfb4cd30b60ab8b25e1b04b6433303521b48143a9728ef57e148fb12c96f9537a3f3710939ed24a0b057298f7
- SSDEEP
  
  1536:EzfMMknJvVvwlTHavNbA8w9KxlO9Lc3Otp15wKwYPpLKQ:CfMbJOZHaV7wdZcm19w6p/
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2