55674cc4779e4f804b40ed3b15a0062969472262117b1f5657302ce7856648a4 | Triage

Sharing

General

Target

NEAS.1c8cdec39b1fdb5c70ae0ae89742c19d_JC.exe
Size

522KB
Sample

231103-wat6cahg63
MD5

1c8cdec39b1fdb5c70ae0ae89742c19d
SHA1

1f0663f75bcf0aaecc1e290e8b755dd17dc7d61b
SHA256

55674cc4779e4f804b40ed3b15a0062969472262117b1f5657302ce7856648a4
SHA512

406bc48fe8f8637870a7e5285c18a20282c630da808a77fb2f8bb2d6df0e16c5bfa4075fdd352c7efeebe6e07be7c19b6d20cdcad30a85f9d80755ae7c833a32
SSDEEP

3072:pCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxC:pqDAwl0xPTMiR9JSSxPUKYGdodHz

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.1c8cdec39b1fdb5c70ae0ae89742c19d_JC.exe
- Size
  
  522KB
- MD5
  
  1c8cdec39b1fdb5c70ae0ae89742c19d
- SHA1
  
  1f0663f75bcf0aaecc1e290e8b755dd17dc7d61b
- SHA256
  
  55674cc4779e4f804b40ed3b15a0062969472262117b1f5657302ce7856648a4
- SHA512
  
  406bc48fe8f8637870a7e5285c18a20282c630da808a77fb2f8bb2d6df0e16c5bfa4075fdd352c7efeebe6e07be7c19b6d20cdcad30a85f9d80755ae7c833a32
- SSDEEP
  
  3072:pCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxC:pqDAwl0xPTMiR9JSSxPUKYGdodHz
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2