89dbc443ad952b8f8b2ba6e43126ef43fde0bf9024cf38f6bc66514a4525fb19 | Triage

Sharing

General

Target

89dbc443ad952b8f8b2ba6e43126ef43fde0bf9024cf38f6bc66514a4525fb19
Size

60KB
Sample

221129-gnlnssbg65
MD5

68b5aa82f663f1d46fde94f6ffefb1d9
SHA1

1234892386db5d4fc63225512057a38e499c877b
SHA256

89dbc443ad952b8f8b2ba6e43126ef43fde0bf9024cf38f6bc66514a4525fb19
SHA512

6cb951a3a49a75538d4ecdb765ae2f7aac06eb7247b397efef8416c2ac9a14ff6bf58e0516e10c653828ea735ddb65a16d37d9b61c28f8f40704d63394e10663
SSDEEP

768:aBZX+Nzp4mjNx4Ds4l6iE18++uWdB9GBc81f+Iw5BLJUXNPgH9nmscY:aPdc1inuWdB9r8YXPJY2BmscY

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  89dbc443ad952b8f8b2ba6e43126ef43fde0bf9024cf38f6bc66514a4525fb19
- Size
  
  60KB
- MD5
  
  68b5aa82f663f1d46fde94f6ffefb1d9
- SHA1
  
  1234892386db5d4fc63225512057a38e499c877b
- SHA256
  
  89dbc443ad952b8f8b2ba6e43126ef43fde0bf9024cf38f6bc66514a4525fb19
- SHA512
  
  6cb951a3a49a75538d4ecdb765ae2f7aac06eb7247b397efef8416c2ac9a14ff6bf58e0516e10c653828ea735ddb65a16d37d9b61c28f8f40704d63394e10663
- SSDEEP
  
  768:aBZX+Nzp4mjNx4Ds4l6iE18++uWdB9GBc81f+Iw5BLJUXNPgH9nmscY:aPdc1inuWdB9r8YXPJY2BmscY
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2