29d8e8b185225049deab5f084eaea479e0421185e294b4d25baa6260789f5445 | Triage

Sharing

General

Target

29d8e8b185225049deab5f084eaea479e0421185e294b4d25baa6260789f5445
Size

32KB
Sample

221205-stt3xacc55
MD5

6b08de5a910c66764a8f2e106d176336
SHA1

4b5d7ff1e441f33bc23db9f70fa8e5a2f05347a5
SHA256

29d8e8b185225049deab5f084eaea479e0421185e294b4d25baa6260789f5445
SHA512

1cd366730a4990894498f7b435330faf5222c7aaee38c51770866f2e728e49928d5984d202e2e326a00f1f226a5628dfa80126e9cb50f7bb0e66bfea7ae99cfc
SSDEEP

384:W5CnW0KRE1pS5s4VmWX2uMkn7BP5aznC50D1Wwkk58Cg:WAdFSJ2uMkZ5ao0D1W7kWC

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  29d8e8b185225049deab5f084eaea479e0421185e294b4d25baa6260789f5445
- Size
  
  32KB
- MD5
  
  6b08de5a910c66764a8f2e106d176336
- SHA1
  
  4b5d7ff1e441f33bc23db9f70fa8e5a2f05347a5
- SHA256
  
  29d8e8b185225049deab5f084eaea479e0421185e294b4d25baa6260789f5445
- SHA512
  
  1cd366730a4990894498f7b435330faf5222c7aaee38c51770866f2e728e49928d5984d202e2e326a00f1f226a5628dfa80126e9cb50f7bb0e66bfea7ae99cfc
- SSDEEP
  
  384:W5CnW0KRE1pS5s4VmWX2uMkn7BP5aznC50D1Wwkk58Cg:WAdFSJ2uMkZ5ao0D1W7kWC
Score

8^/10

persistence
- Modifies AppInit DLL entries
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2