7b9380b2e79992d1acc9e86a6bf39ff6c698f4420b64388c3cad307134248be1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b9380b2e79992d1acc9e86a6bf39ff6c698f4420b64388c3cad307134248be1.jar
Size

3KB
Sample

240919-bweybstfjq
MD5

69113160dab119ff429cb77edfacd6a8
SHA1

875fc6a48528d155eab5875d0cb5e9a08391e52a
SHA256

7b9380b2e79992d1acc9e86a6bf39ff6c698f4420b64388c3cad307134248be1
SHA512

38ac1846de883ea7dacbf9da95417814f4ddbb433a2a9d6e71dce60de60d9f79e6c630c1d7148562be6f4874e9fa79956532b959a181df84a1916924ecdcb821

Score

7^/10

defense_evasion privilege_escalation

Malware Config

Targets

- Target
  
  7b9380b2e79992d1acc9e86a6bf39ff6c698f4420b64388c3cad307134248be1.jar
- Size
  
  3KB
- MD5
  
  69113160dab119ff429cb77edfacd6a8
- SHA1
  
  875fc6a48528d155eab5875d0cb5e9a08391e52a
- SHA256
  
  7b9380b2e79992d1acc9e86a6bf39ff6c698f4420b64388c3cad307134248be1
- SHA512
  
  38ac1846de883ea7dacbf9da95417814f4ddbb433a2a9d6e71dce60de60d9f79e6c630c1d7148562be6f4874e9fa79956532b959a181df84a1916924ecdcb821
Score

7^/10

defense_evasion privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Access Token Manipulation

Create Process with Token

Defense Evasion

Access Token Manipulation

Create Process with Token

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasionprivilege_escalation