45a7b861baac5f8234433fefd9dbdd0a5f288a18b72346b6b6917cf56882bf85 | Triage

Sharing

General

Target

66e705d09b33c_jack.exe
Size

4.1MB
Sample

240921-1c9q2avejb
MD5

abdbcc23bd8f767e671bac6d2ff60335
SHA1

18ca867c0502b353e9aad63553efd4eb4e25723f
SHA256

45a7b861baac5f8234433fefd9dbdd0a5f288a18b72346b6b6917cf56882bf85
SHA512

67c00713e6d24d192c0f8e3e49fa146418faf72b2bb42c276ad560f08e39c68f4ab446c47c7e7710778aee9ca1f193ad65e061645b6bcec414844165b5e16bc7
SSDEEP

49152:HYcdjDQdrscIC5SmTT+mfkj8J6iKG7suEAeMDsaUmxb7WnpRGnKuAsF33PKQTunw:HK/f+mfNptIZ/alxGR7uA8Phanzuhjf

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  66e705d09b33c_jack.exe
- Size
  
  4.1MB
- MD5
  
  abdbcc23bd8f767e671bac6d2ff60335
- SHA1
  
  18ca867c0502b353e9aad63553efd4eb4e25723f
- SHA256
  
  45a7b861baac5f8234433fefd9dbdd0a5f288a18b72346b6b6917cf56882bf85
- SHA512
  
  67c00713e6d24d192c0f8e3e49fa146418faf72b2bb42c276ad560f08e39c68f4ab446c47c7e7710778aee9ca1f193ad65e061645b6bcec414844165b5e16bc7
- SSDEEP
  
  49152:HYcdjDQdrscIC5SmTT+mfkj8J6iKG7suEAeMDsaUmxb7WnpRGnKuAsF33PKQTunw:HK/f+mfNptIZ/alxGR7uA8Phanzuhjf
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence

behavioral3

discoverypersistence

behavioral4

discoverypersistence