Overview

overview

8

Static

static

8

74e236f6a5...21.exe

windows7_x64

6

74e236f6a5...21.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74e236f6a558541ac74d2a1734e72ca01f644504fb6ced41517e60b1cba96021

  • Size

    1.1MB

  • Sample

    220703-vp365abgg3

  • MD5

    3b3c6865710b27ecd3b1e29691b2c733

  • SHA1

    be1e131837ac55efc71513008f3c3dd29a2400f5

  • SHA256

    74e236f6a558541ac74d2a1734e72ca01f644504fb6ced41517e60b1cba96021

  • SHA512

    3c7f50b3dfe4b3bf23e4b9020348a3029c7c87da564ea62280f3bb7e2ae47e4b6de2f5c816ba44afa17c9d67ad210bf6dc974b5765f51330dcedadc0d58219ab

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      74e236f6a558541ac74d2a1734e72ca01f644504fb6ced41517e60b1cba96021

    • Size

      1.1MB

    • MD5

      3b3c6865710b27ecd3b1e29691b2c733

    • SHA1

      be1e131837ac55efc71513008f3c3dd29a2400f5

    • SHA256

      74e236f6a558541ac74d2a1734e72ca01f644504fb6ced41517e60b1cba96021

    • SHA512

      3c7f50b3dfe4b3bf23e4b9020348a3029c7c87da564ea62280f3bb7e2ae47e4b6de2f5c816ba44afa17c9d67ad210bf6dc974b5765f51330dcedadc0d58219ab

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Replication Through Removable Media

1
T1091

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Replication Through Removable Media

1
T1091

Collection

Exfiltration

Command and Control

Impact

Tasks