10fccb26a58e1b903b927e5b729ba661d410596f4e3077aa4d18240d6ee979b6 | Triage

Sharing

General

Target

10fccb26a58e1b903b927e5b729ba661d410596f4e3077aa4d18240d6ee979b6
Size

197KB
Sample

221020-zgssmsdfhp
MD5

969da630c34a4116a2759e7f22badf4f
SHA1

85ad5f47e4d6255b3d720ee67ad998d1574e7e22
SHA256

10fccb26a58e1b903b927e5b729ba661d410596f4e3077aa4d18240d6ee979b6
SHA512

8d91677468940717665a4f600f41b3c6263d35a24cae8ae96b105a199481361f4f169b70db9cde2de7e915fcbf0ab4b65daf1b8b7e635352c0a496b831bed260
SSDEEP

3072:GAvVCIeoQbt6e7ZD0udkumDgkRkDaOx/mu+tkZ4Gbrndh5STyXftHd/Y39:fst6sxVBkkaOxe4lbrndhVdg

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  10fccb26a58e1b903b927e5b729ba661d410596f4e3077aa4d18240d6ee979b6
- Size
  
  197KB
- MD5
  
  969da630c34a4116a2759e7f22badf4f
- SHA1
  
  85ad5f47e4d6255b3d720ee67ad998d1574e7e22
- SHA256
  
  10fccb26a58e1b903b927e5b729ba661d410596f4e3077aa4d18240d6ee979b6
- SHA512
  
  8d91677468940717665a4f600f41b3c6263d35a24cae8ae96b105a199481361f4f169b70db9cde2de7e915fcbf0ab4b65daf1b8b7e635352c0a496b831bed260
- SSDEEP
  
  3072:GAvVCIeoQbt6e7ZD0udkumDgkRkDaOx/mu+tkZ4Gbrndh5STyXftHd/Y39:fst6sxVBkkaOxe4lbrndhVdg
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2