21828517308b115eb8c114382c6439c57effaefc2b2461cd4bda03f835a25b18 | Triage

Sharing

General

Target

30545d776eaefabd6e99440ca4bee78a.bin
Size

2.0MB
Sample

240606-cey6baec9t
MD5

004bbfc3b11ff4c854bf7dc0df130bd5
SHA1

eea5be52e74f1ddafd14cd52f637c90eb0880e28
SHA256

21828517308b115eb8c114382c6439c57effaefc2b2461cd4bda03f835a25b18
SHA512

03ee48d96371e32629142a725fbc027ae35d61eb03ca138498662c77bbe38d3129c69623bc5e9fe5e805876611775d5c0a151382370ff8e00f7f6f28bf0480c8
SSDEEP

49152:TULfaV8zeqwqgFLbSE7NrUAt+40NE1M5FV//3K7:TUtwTFvd5UOxPWHK7

Score

7^/10

execution

Malware Config

Targets

- Target
  
  N-WITHERSPOON-86707.js
- Size
  
  1KB
- MD5
  
  97df66f95eced4fb840fd9d706d2763d
- SHA1
  
  608f9e2389f4eaab66f584bd51f93ff3c3ed8a04
- SHA256
  
  138265fa05533c8d6c8b9bb8686e00926bf5fa6f4b0d5b9a5ade065c5180a9db
- SHA512
  
  2fbf85c74d3945330138d46518e34725800775644147f105deb4cbf0fdb06a4568f69fa1995d5967d95f2587b13a4b91e23524aab253a2adb58487296d156e57
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2