General

  • Target

    1cbe1e96f66e2cf365e2ae425cc1f474d89ccb01a317601f2c092d3a82d5bb95

  • Size

    476KB

  • Sample

    221030-14rdrscgg4

  • MD5

    a1800ca10efb91c7e112945492663770

  • SHA1

    b8950ac6c23df92bb1b10e59039a9633da250cd0

  • SHA256

    1cbe1e96f66e2cf365e2ae425cc1f474d89ccb01a317601f2c092d3a82d5bb95

  • SHA512

    fb64cd9c8901493b70cd25a14652df9b8989d0d5425a11807b21376471b500a724a11f271bb26b7fa764da4980f64f98e18a0bb1feb26a24e79744ca37bd491e

  • SSDEEP

    12288:xbDvJAmTs9C+hGaCkqbDvJAmTs9C+hGaCk:xW4DkcW4Dk

Malware Config

Targets

    • Target

      1cbe1e96f66e2cf365e2ae425cc1f474d89ccb01a317601f2c092d3a82d5bb95

    • Size

      476KB

    • MD5

      a1800ca10efb91c7e112945492663770

    • SHA1

      b8950ac6c23df92bb1b10e59039a9633da250cd0

    • SHA256

      1cbe1e96f66e2cf365e2ae425cc1f474d89ccb01a317601f2c092d3a82d5bb95

    • SHA512

      fb64cd9c8901493b70cd25a14652df9b8989d0d5425a11807b21376471b500a724a11f271bb26b7fa764da4980f64f98e18a0bb1feb26a24e79744ca37bd491e

    • SSDEEP

      12288:xbDvJAmTs9C+hGaCkqbDvJAmTs9C+hGaCk:xW4DkcW4Dk

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Sets DLL path for service in the registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks