Overview

overview

8

Static

static

8

fa241b6911...1b.exe

windows7_x64

6

fa241b6911...1b.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa241b691135188628e1be8a5f419d6e76d85c18da625c3c0fd1a8cf1ac71b1b

  • Size

    3.1MB

  • Sample

    220707-vww2dsedg2

  • MD5

    450bbef24639f67ef0bb2e858c28d154

  • SHA1

    07b4b278a16e0a1b18a205602ee123b1430dbad2

  • SHA256

    fa241b691135188628e1be8a5f419d6e76d85c18da625c3c0fd1a8cf1ac71b1b

  • SHA512

    5b319c488efb24dab08b878258c8f90d0d4c7131685db66c76e87c12fc98a78aa06081f746e5652bf819ab018572badf9d3d54870b4096edb1f272efb2c4c69b

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      fa241b691135188628e1be8a5f419d6e76d85c18da625c3c0fd1a8cf1ac71b1b

    • Size

      3.1MB

    • MD5

      450bbef24639f67ef0bb2e858c28d154

    • SHA1

      07b4b278a16e0a1b18a205602ee123b1430dbad2

    • SHA256

      fa241b691135188628e1be8a5f419d6e76d85c18da625c3c0fd1a8cf1ac71b1b

    • SHA512

      5b319c488efb24dab08b878258c8f90d0d4c7131685db66c76e87c12fc98a78aa06081f746e5652bf819ab018572badf9d3d54870b4096edb1f272efb2c4c69b

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Replication Through Removable Media

1
T1091

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Replication Through Removable Media

1
T1091

Collection

Exfiltration

Command and Control

Impact

Tasks