c1b9c8efcb30e6a1866e33a5fb2da0a6b487af7dbba09953308a79861d48a222 | Triage

Sharing

General

Target

c1b9c8efcb30e6a1866e33a5fb2da0a6b487af7dbba09953308a79861d48a222
Size

88KB
Sample

221205-hngkhseg49
MD5

ea842cc2ba0897004f06c567265d0018
SHA1

a50f998b45fbc8421843e72e26c7758d505ad1ef
SHA256

c1b9c8efcb30e6a1866e33a5fb2da0a6b487af7dbba09953308a79861d48a222
SHA512

b5fa2fe5dfc261baeb37caeec156bce6bb977eb3db7f4b95e4469b6a10667726d95fd08b4a5dcb2c3af3adad8830f851cdbb5b963a21ba5f02eaea857152fb86
SSDEEP

1536:udzCU+0hpqocjK5b3jzvQXp9rZkCRn4HoxPRPuUDFjiTzJpkuXwVXtS7Zknj0n:ulC27qOzv4hRnwoxPRPvDFGTzb3AzSNU

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  c1b9c8efcb30e6a1866e33a5fb2da0a6b487af7dbba09953308a79861d48a222
- Size
  
  88KB
- MD5
  
  ea842cc2ba0897004f06c567265d0018
- SHA1
  
  a50f998b45fbc8421843e72e26c7758d505ad1ef
- SHA256
  
  c1b9c8efcb30e6a1866e33a5fb2da0a6b487af7dbba09953308a79861d48a222
- SHA512
  
  b5fa2fe5dfc261baeb37caeec156bce6bb977eb3db7f4b95e4469b6a10667726d95fd08b4a5dcb2c3af3adad8830f851cdbb5b963a21ba5f02eaea857152fb86
- SSDEEP
  
  1536:udzCU+0hpqocjK5b3jzvQXp9rZkCRn4HoxPRPuUDFjiTzJpkuXwVXtS7Zknj0n:ulC27qOzv4hRnwoxPRPvDFGTzb3AzSNU
Score

8^/10

persistence
- Sets service image path in registry
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2