dfa6122994dfe6baa93997497250533b6dc95a4b73dc2044b7bf8998eaafc2d6 | Triage

Sharing

General

Target

NEAS.c2b039a23bb7b1be7d4cf1cf10c38570_JC.exe
Size

25KB
Sample

231103-dlwjfabb3t
MD5

c2b039a23bb7b1be7d4cf1cf10c38570
SHA1

3f57bbf8ab667523e4c60094634d3a8cc195128f
SHA256

dfa6122994dfe6baa93997497250533b6dc95a4b73dc2044b7bf8998eaafc2d6
SHA512

f83e0a280abe774be47247a82bf809c294873195ed8ff9c796bc58981f7a42aeb75c2716f8928ef8cb8f1e87345d862566f7aaeb600e0e9765319e26a89b9943
SSDEEP

192:uvxLS4de1HNAUQcX+l2Hg5cIasUU4L3bba4q4APTK7Yypy0kIBCCvrCrNRiAnJ9J:uvxLSkeJndXQrWjMcYyrvL+P0hYw/nIb

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.c2b039a23bb7b1be7d4cf1cf10c38570_JC.exe
- Size
  
  25KB
- MD5
  
  c2b039a23bb7b1be7d4cf1cf10c38570
- SHA1
  
  3f57bbf8ab667523e4c60094634d3a8cc195128f
- SHA256
  
  dfa6122994dfe6baa93997497250533b6dc95a4b73dc2044b7bf8998eaafc2d6
- SHA512
  
  f83e0a280abe774be47247a82bf809c294873195ed8ff9c796bc58981f7a42aeb75c2716f8928ef8cb8f1e87345d862566f7aaeb600e0e9765319e26a89b9943
- SSDEEP
  
  192:uvxLS4de1HNAUQcX+l2Hg5cIasUU4L3bba4q4APTK7Yypy0kIBCCvrCrNRiAnJ9J:uvxLSkeJndXQrWjMcYyrvL+P0hYw/nIb
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2