General

  • Target
    SorryRKN-Windows-1.5.0.zip
  • Size 57.2MB
  • Sample261102-s637cabs4y
  • SHA256 b4091e480040591c896ae349ecd4b03d825b26d06599da5ce11f00b4bae76c4f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      SorryRKN/SorryRKN.exe
    • Size 7.9MB
    • SHA256 e429e1b6ca41412731b01b183431d2d93f73f4c7444c9bbfe4e004e10f9b84da
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      SorryRKN/check-network.exe
    • Size 6.5MB
    • SHA256 519f0186ad47f577780410de74e2392a2da177efacc09d4f6fa3cb966a942ea5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks