334dc06cb1f2a1613603445264215dfd1ccf3c7181d341728c04678476573364 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02d9e02ee8a6d9b5dd052ca1134e0b5d
Size

84KB
Sample

231229-y3jlesdge3
MD5

02d9e02ee8a6d9b5dd052ca1134e0b5d
SHA1

85efe3f62599bc1f65e5b7d1ff03d18ee9fe03d0
SHA256

334dc06cb1f2a1613603445264215dfd1ccf3c7181d341728c04678476573364
SHA512

584a929e2feb95c9e8b1fec0b0a225eb47c8ed170d5ed275b263b47327ddf5bc031eae3ef9130e3530183ce4ff3094ae70a0327b5fcfcc1e1ae0852f00ab720c
SSDEEP

1536:vYOKipOBrRliwDFjS9DanycPgfT72F19W9HHfp1S53/KCY3L3RiAfLiZaK+Q:viiUHpFj8DMdPgfg3/VefLib

Score

7^/10

Malware Config

Targets

- Target
  
  02d9e02ee8a6d9b5dd052ca1134e0b5d
- Size
  
  84KB
- MD5
  
  02d9e02ee8a6d9b5dd052ca1134e0b5d
- SHA1
  
  85efe3f62599bc1f65e5b7d1ff03d18ee9fe03d0
- SHA256
  
  334dc06cb1f2a1613603445264215dfd1ccf3c7181d341728c04678476573364
- SHA512
  
  584a929e2feb95c9e8b1fec0b0a225eb47c8ed170d5ed275b263b47327ddf5bc031eae3ef9130e3530183ce4ff3094ae70a0327b5fcfcc1e1ae0852f00ab720c
- SSDEEP
  
  1536:vYOKipOBrRliwDFjS9DanycPgfT72F19W9HHfp1S53/KCY3L3RiAfLiZaK+Q:viiUHpFj8DMdPgfg3/VefLib
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2