General

  • Target

    a0696daf931f54b5392032aa41687131510df233a4832380e210da802369e209

  • Size

    228KB

  • Sample

    221030-cxt93sghb3

  • MD5

    a34d3e100beb05419af47626463bb0ed

  • SHA1

    aa67e09536a68d68323e801faf918ffae6559991

  • SHA256

    a0696daf931f54b5392032aa41687131510df233a4832380e210da802369e209

  • SHA512

    26867a7441df112c88135bd8f7240d4fc8c270824588d8e1027dd20e4143305bd5c6a84a4d126c45c4a2babbebac0ce9df5bec69262d9d317ded47a901ecc46a

  • SSDEEP

    6144:MvJR60RV2tZdSNVzNP6KkXR60RV2tZdSNVz:MfLVedwNd8LVedw

Malware Config

Targets

    • Target

      a0696daf931f54b5392032aa41687131510df233a4832380e210da802369e209

    • Size

      228KB

    • MD5

      a34d3e100beb05419af47626463bb0ed

    • SHA1

      aa67e09536a68d68323e801faf918ffae6559991

    • SHA256

      a0696daf931f54b5392032aa41687131510df233a4832380e210da802369e209

    • SHA512

      26867a7441df112c88135bd8f7240d4fc8c270824588d8e1027dd20e4143305bd5c6a84a4d126c45c4a2babbebac0ce9df5bec69262d9d317ded47a901ecc46a

    • SSDEEP

      6144:MvJR60RV2tZdSNVzNP6KkXR60RV2tZdSNVz:MfLVedwNd8LVedw

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Sets DLL path for service in the registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks