155c4b7a9a3921130464465cc531c6b1ae7caa07aade39cbcba31a10c38657ed | Triage

Sharing

General

Target

NCUpdater.vmp.exe
Size

1.3MB
Sample

240712-gy87va1gkq
MD5

0ebac849d6173d27bd3735611b175a76
SHA1

9463bea6850af8785efb72880a364d6f13d0bd41
SHA256

155c4b7a9a3921130464465cc531c6b1ae7caa07aade39cbcba31a10c38657ed
SHA512

f1d28bf99cc8c94353ee5c30bb1035ccd282cc5bc82982103a839add7163cd69fc00a9a7bb99dae7e6c1dd11fb538cc4a4cde0b6812ec59325b2b5aafa0e3664
SSDEEP

24576:GxZ+EUPw+NSbiePwCG9cEYOswSxq5lb358QFy7fy1R91ihJUknhXygOk742socaE:0+E8w+N+4C/EYOswSxq5lb358ay7fy1X

Score

7^/10

Malware Config

Targets

- Target
  
  NCUpdater.vmp.exe
- Size
  
  1.3MB
- MD5
  
  0ebac849d6173d27bd3735611b175a76
- SHA1
  
  9463bea6850af8785efb72880a364d6f13d0bd41
- SHA256
  
  155c4b7a9a3921130464465cc531c6b1ae7caa07aade39cbcba31a10c38657ed
- SHA512
  
  f1d28bf99cc8c94353ee5c30bb1035ccd282cc5bc82982103a839add7163cd69fc00a9a7bb99dae7e6c1dd11fb538cc4a4cde0b6812ec59325b2b5aafa0e3664
- SSDEEP
  
  24576:GxZ+EUPw+NSbiePwCG9cEYOswSxq5lb358QFy7fy1R91ihJUknhXygOk742socaE:0+E8w+N+4C/EYOswSxq5lb358ay7fy1X
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2