61e28c0fb59a2c325ad245b9b964ed25f69bc7246ea6d6b9f8e5206d60c29288 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61e28c0fb59a2c325ad245b9b964ed25f69bc7246ea6d6b9f8e5206d60c29288
Size

36KB
Sample

221003-rvqansbbfl
MD5

6271622c616c13627bfa182741f828c8
SHA1

723718e9804561c19e48e5eace3cc85be2ad36cb
SHA256

61e28c0fb59a2c325ad245b9b964ed25f69bc7246ea6d6b9f8e5206d60c29288
SHA512

ab49b26da909b5cc71a105da1cf74124f43a844c19ba9c1d6282553d00f94545a86fcd58ba249f39fc168167ea7fa9f084e761ec5d44f1572669bff13cdf10a8
SSDEEP

384:kqgZzRc9yOYwLVy+kDguVSLrYvTttHk+aQv1pFw/O58DY:klackuVgrYLLEzs1XIOWE

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  61e28c0fb59a2c325ad245b9b964ed25f69bc7246ea6d6b9f8e5206d60c29288
- Size
  
  36KB
- MD5
  
  6271622c616c13627bfa182741f828c8
- SHA1
  
  723718e9804561c19e48e5eace3cc85be2ad36cb
- SHA256
  
  61e28c0fb59a2c325ad245b9b964ed25f69bc7246ea6d6b9f8e5206d60c29288
- SHA512
  
  ab49b26da909b5cc71a105da1cf74124f43a844c19ba9c1d6282553d00f94545a86fcd58ba249f39fc168167ea7fa9f084e761ec5d44f1572669bff13cdf10a8
- SSDEEP
  
  384:kqgZzRc9yOYwLVy+kDguVSLrYvTttHk+aQv1pFw/O58DY:klackuVgrYLLEzs1XIOWE
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2