3cc9f3e574839093fa62f57d96b2002c76d1841f2bc8a71aca7a343de796076f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6e43c82f63071779d335699147e691c0_JC.exe
Size

143KB
Sample

231105-xpv7macd66
MD5

6e43c82f63071779d335699147e691c0
SHA1

3af54246dee2adf5f654c779fc5edb2a189734ad
SHA256

3cc9f3e574839093fa62f57d96b2002c76d1841f2bc8a71aca7a343de796076f
SHA512

80b4c3b4d35493620229ccf9a8e68599959dcae39cd1713eef8267b3b177de18140c251a1abf42a42ba1dc7f359c89c519056034d8e69867f503731cf9b6313d
SSDEEP

3072:CL7on/B+W8Te9IxdTtXXQiUBmcj2LbvpjWYgGfS+fKEObPVgUwGjl4txkNORQtOV:CL7onZ+W8Te9IFXQlBmcj2LbvpjWjGfb

Score

7^/10

Malware Config

Targets

- Target
  
  NEAS.6e43c82f63071779d335699147e691c0_JC.exe
- Size
  
  143KB
- MD5
  
  6e43c82f63071779d335699147e691c0
- SHA1
  
  3af54246dee2adf5f654c779fc5edb2a189734ad
- SHA256
  
  3cc9f3e574839093fa62f57d96b2002c76d1841f2bc8a71aca7a343de796076f
- SHA512
  
  80b4c3b4d35493620229ccf9a8e68599959dcae39cd1713eef8267b3b177de18140c251a1abf42a42ba1dc7f359c89c519056034d8e69867f503731cf9b6313d
- SSDEEP
  
  3072:CL7on/B+W8Te9IxdTtXXQiUBmcj2LbvpjWYgGfS+fKEObPVgUwGjl4txkNORQtOV:CL7onZ+W8Te9IFXQlBmcj2LbvpjWjGfb
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2