General

  • Target

    Olympus.exe

  • Size

    1.6MB

  • Sample

    230516-3xxcjsda99

  • MD5

    f0be4da3b32d61513371ecf570719885

  • SHA1

    9d19d021c39be9ec83c15877a1076723fe41a257

  • SHA256

    846794ab91f137ea04c1c530069c9ac992ec43dfbfcafc3317773225a19a0689

  • SHA512

    1b7f5b4a5268ad7ec11bdf426c1ea47fe37d4a2563cf840dc31f9c1284065223c1f927c349b7275c914cb1814226602fa4897132e9c5ed92bdc56beef9a66e17

  • SSDEEP

    24576:W7vdzEDnjH0WMqO/om295zBAVz70yN5FsBcGiYt70M:MGX0aO5xNoBcGzo

Score
7/10

Malware Config

Targets

    • Target

      Olympus.exe

    • Size

      1.6MB

    • MD5

      f0be4da3b32d61513371ecf570719885

    • SHA1

      9d19d021c39be9ec83c15877a1076723fe41a257

    • SHA256

      846794ab91f137ea04c1c530069c9ac992ec43dfbfcafc3317773225a19a0689

    • SHA512

      1b7f5b4a5268ad7ec11bdf426c1ea47fe37d4a2563cf840dc31f9c1284065223c1f927c349b7275c914cb1814226602fa4897132e9c5ed92bdc56beef9a66e17

    • SSDEEP

      24576:W7vdzEDnjH0WMqO/om295zBAVz70yN5FsBcGiYt70M:MGX0aO5xNoBcGzo

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks