616fdb1e8d5782b17404537b143d87a457c088f40a3923a76893be9bed23cd79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

616fdb1e8d5782b17404537b143d87a457c088f40a3923a76893be9bed23cd79
Size

671KB
Sample

221020-sfpw2aaefl
MD5

a0399c5d92dc29a57f6211e161cba220
SHA1

a4695469bdbdda51f56e570749c0e45483eeae01
SHA256

616fdb1e8d5782b17404537b143d87a457c088f40a3923a76893be9bed23cd79
SHA512

e9a7396ef902cb358d64059274da45b7c0c6bde987d2f8c523bc20d6283a55d566875b2a930bef556832e0524a3b6860466ab2907b495e4925dfb26411d3cf14
SSDEEP

1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRqvYGVpRlBSvPo2Ght:352T3siXei5bcmP9JfUjWhpE

Score

8^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  616fdb1e8d5782b17404537b143d87a457c088f40a3923a76893be9bed23cd79
- Size
  
  671KB
- MD5
  
  a0399c5d92dc29a57f6211e161cba220
- SHA1
  
  a4695469bdbdda51f56e570749c0e45483eeae01
- SHA256
  
  616fdb1e8d5782b17404537b143d87a457c088f40a3923a76893be9bed23cd79
- SHA512
  
  e9a7396ef902cb358d64059274da45b7c0c6bde987d2f8c523bc20d6283a55d566875b2a930bef556832e0524a3b6860466ab2907b495e4925dfb26411d3cf14
- SSDEEP
  
  1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRqvYGVpRlBSvPo2Ght:352T3siXei5bcmP9JfUjWhpE
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2