f8a5389f69ae07300d0ac661cc229d8b803b6732b98d6c567b2336bf1fe8f0b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8a5389f69ae07300d0ac661cc229d8b803b6732b98d6c567b2336bf1fe8f0b9
Size

388KB
Sample

221020-sdmc5aagh9
MD5

96305ee1d0384ad8bdb3be8edbab60b2
SHA1

06c86e995b33113bcf3274f9ba5951db441de5b8
SHA256

f8a5389f69ae07300d0ac661cc229d8b803b6732b98d6c567b2336bf1fe8f0b9
SHA512

1a4d50a89764e88dbcc150ae3238e316fd6429b92b6ce3451f60f55ff8ca5dfbf5c7bb457d3c4e02a2d431b988ddc828b97aac5acf769687a5897a0dfd602630
SSDEEP

1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW

Score

8^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  f8a5389f69ae07300d0ac661cc229d8b803b6732b98d6c567b2336bf1fe8f0b9
- Size
  
  388KB
- MD5
  
  96305ee1d0384ad8bdb3be8edbab60b2
- SHA1
  
  06c86e995b33113bcf3274f9ba5951db441de5b8
- SHA256
  
  f8a5389f69ae07300d0ac661cc229d8b803b6732b98d6c567b2336bf1fe8f0b9
- SHA512
  
  1a4d50a89764e88dbcc150ae3238e316fd6429b92b6ce3451f60f55ff8ca5dfbf5c7bb457d3c4e02a2d431b988ddc828b97aac5acf769687a5897a0dfd602630
- SSDEEP
  
  1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2