Overview

overview

8

Static

static

3

LB28Jsp.exe

windows7-x64

8

LB28Jsp.exe

windows10-2004-x64

7

Resubmissions

04-02-2024 05:09

240204-ftk4saabc4 8

04-02-2024 05:06

240204-frj4pscdgp 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LB28Jsp.exe

  • Size

    43.5MB

  • Sample

    240204-ftk4saabc4

  • MD5

    8740c687985ea81cc857e41188d1d83b

  • SHA1

    5b629e447ea5ba305fa6244c06bfe9e6139112e8

  • SHA256

    d67fb1f1297108b7d1297c2883faa074c788b7c4198110c33eabb34b675cd8ab

  • SHA512

    d996d8e4007cb4d4b796bf21ee5b0a324359dbaf6b2efbd8e238c60256b4bf2bbe9f7e9b1d9418e0b71ce03054f01f57d28ccc5df3c3004578273fe9bdbd7c71

  • SSDEEP

    49152:FZTKUlPM2bq7mTv+iru13ojPJM7q3zskBFHjC2K4IeNcHQ4XwKLHHnq34jgxBBjX:ba18Doq3l

Score
8/10

Malware Config

Targets

    • Target

      LB28Jsp.exe

    • Size

      43.5MB

    • MD5

      8740c687985ea81cc857e41188d1d83b

    • SHA1

      5b629e447ea5ba305fa6244c06bfe9e6139112e8

    • SHA256

      d67fb1f1297108b7d1297c2883faa074c788b7c4198110c33eabb34b675cd8ab

    • SHA512

      d996d8e4007cb4d4b796bf21ee5b0a324359dbaf6b2efbd8e238c60256b4bf2bbe9f7e9b1d9418e0b71ce03054f01f57d28ccc5df3c3004578273fe9bdbd7c71

    • SSDEEP

      49152:FZTKUlPM2bq7mTv+iru13ojPJM7q3zskBFHjC2K4IeNcHQ4XwKLHHnq34jgxBBjX:ba18Doq3l

    Score
    8/10

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks