343a25e0cfa4535e6026eb633c649f0997e6a1628aa09a8cb19c2062805965fb | Triage

Sharing

General

Target

343a25e0cfa4535e6026eb633c649f0997e6a1628aa09a8cb19c2062805965fbN
Size

74KB
Sample

240919-g3lx4svcjg
MD5

502bc275898d6d0180cfa623a3fbb090
SHA1

99b2616fba999d9176495be12845840df6e80cd9
SHA256

343a25e0cfa4535e6026eb633c649f0997e6a1628aa09a8cb19c2062805965fb
SHA512

f50b58253f2822dacb3a46bd6f50d5b24bf1cba0bd12e39fdb8ed002244bed4e2a03b7cba92401efbf6be8719251589e629ac9ee556449443f87ea12728d2e9c
SSDEEP

768:dDwRAnRAGeiDTK4jDmJI5hwXfytKphH8p2R9WtIhcl:dsK1eiisDmi5FtKhcg9W0cl

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  343a25e0cfa4535e6026eb633c649f0997e6a1628aa09a8cb19c2062805965fbN
- Size
  
  74KB
- MD5
  
  502bc275898d6d0180cfa623a3fbb090
- SHA1
  
  99b2616fba999d9176495be12845840df6e80cd9
- SHA256
  
  343a25e0cfa4535e6026eb633c649f0997e6a1628aa09a8cb19c2062805965fb
- SHA512
  
  f50b58253f2822dacb3a46bd6f50d5b24bf1cba0bd12e39fdb8ed002244bed4e2a03b7cba92401efbf6be8719251589e629ac9ee556449443f87ea12728d2e9c
- SSDEEP
  
  768:dDwRAnRAGeiDTK4jDmJI5hwXfytKphH8p2R9WtIhcl:dsK1eiisDmi5FtKhcg9W0cl
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2