General

  • Target

    058e3703e776a869b369ace200a573b99ab9802c919f5658fb18fe582a0f6ad5

  • Size

    168KB

  • Sample

    221020-ph7m3sdcck

  • MD5

    a0702a1fc564d8058ec72ede6ac221d0

  • SHA1

    2a3dfd21838c89148ec50bf9d050322e90c32513

  • SHA256

    058e3703e776a869b369ace200a573b99ab9802c919f5658fb18fe582a0f6ad5

  • SHA512

    3637783774290a9bbc0a16259b5cd15fe2a7bc055f739ab66efec43407da264f01191f3af3b88bdc74dcda2f8ba28a32c7434c7ce21bae54b8e57972ca8378db

  • SSDEEP

    3072:eqPL1/7w6ZAs+VBK54Yha+LwjWlVvgir23ejaAVkuXYJnnL:rQV84Yw+eWl97aOHXYJn

Malware Config

Targets

    • Target

      058e3703e776a869b369ace200a573b99ab9802c919f5658fb18fe582a0f6ad5

    • Size

      168KB

    • MD5

      a0702a1fc564d8058ec72ede6ac221d0

    • SHA1

      2a3dfd21838c89148ec50bf9d050322e90c32513

    • SHA256

      058e3703e776a869b369ace200a573b99ab9802c919f5658fb18fe582a0f6ad5

    • SHA512

      3637783774290a9bbc0a16259b5cd15fe2a7bc055f739ab66efec43407da264f01191f3af3b88bdc74dcda2f8ba28a32c7434c7ce21bae54b8e57972ca8378db

    • SSDEEP

      3072:eqPL1/7w6ZAs+VBK54Yha+LwjWlVvgir23ejaAVkuXYJnnL:rQV84Yw+eWl97aOHXYJn

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Sets DLL path for service in the registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks