26b7c0c5e27df553247e4629b9a2a69d3687904518762a4fc646df1a1b68f8e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ee3084a73cdb0964f17c5932706a6480_JC.exe
Size

88KB
Sample

231102-lnjxescb32
MD5

ee3084a73cdb0964f17c5932706a6480
SHA1

44d42e2c74ba1cf468323ce91b0fdd7df690670f
SHA256

26b7c0c5e27df553247e4629b9a2a69d3687904518762a4fc646df1a1b68f8e9
SHA512

37184184bd9dc0923eb3cbff8f7560e3212cc71812b814dcbff0175cb204132f8264feb640a91b333662e884f098f8af3ca5549066aa4b739821200959e3f8ae
SSDEEP

1536:sDc2kE8H1AkjoSdn+hDuGj0Sgl0D8HxO6CGHSeslI:s4bjoSQPj0TBxOSHS8

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.ee3084a73cdb0964f17c5932706a6480_JC.exe
- Size
  
  88KB
- MD5
  
  ee3084a73cdb0964f17c5932706a6480
- SHA1
  
  44d42e2c74ba1cf468323ce91b0fdd7df690670f
- SHA256
  
  26b7c0c5e27df553247e4629b9a2a69d3687904518762a4fc646df1a1b68f8e9
- SHA512
  
  37184184bd9dc0923eb3cbff8f7560e3212cc71812b814dcbff0175cb204132f8264feb640a91b333662e884f098f8af3ca5549066aa4b739821200959e3f8ae
- SSDEEP
  
  1536:sDc2kE8H1AkjoSdn+hDuGj0Sgl0D8HxO6CGHSeslI:s4bjoSQPj0TBxOSHS8
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2