341e4ed476b233a4d86441c0362017ce8adea1011e32f2af006b43a42545a858 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

341e4ed476b233a4d86441c0362017ce8adea1011e32f2af006b43a42545a858
Size

1.7MB
Sample

230316-bddybagb94
MD5

499d97c32204b0fab09c93f602b53726
SHA1

d557717f94342840fe0aaa78129f7de5e4a98d16
SHA256

341e4ed476b233a4d86441c0362017ce8adea1011e32f2af006b43a42545a858
SHA512

356bbc1d0f60cad9c59fac3e858d86f8009518e5c1d9f5a904d24dce284d7c0823d37180ce881bbf0a7965d7c7ec3b5255ed20861dce1c773277a2cb1ac1b919
SSDEEP

49152:W+Whq+BfJXAEExkSDjuQE8HspIB+Z5yHnUEFFSqdK/qKH:W+Whq+BfKE+vDjuh8HsLMnnSq9KH

Score

7^/10

Malware Config

Targets

- Target
  
  341e4ed476b233a4d86441c0362017ce8adea1011e32f2af006b43a42545a858
- Size
  
  1.7MB
- MD5
  
  499d97c32204b0fab09c93f602b53726
- SHA1
  
  d557717f94342840fe0aaa78129f7de5e4a98d16
- SHA256
  
  341e4ed476b233a4d86441c0362017ce8adea1011e32f2af006b43a42545a858
- SHA512
  
  356bbc1d0f60cad9c59fac3e858d86f8009518e5c1d9f5a904d24dce284d7c0823d37180ce881bbf0a7965d7c7ec3b5255ed20861dce1c773277a2cb1ac1b919
- SSDEEP
  
  49152:W+Whq+BfJXAEExkSDjuQE8HspIB+Z5yHnUEFFSqdK/qKH:W+Whq+BfKE+vDjuh8HsLMnnSq9KH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1