9ab321a4d07088e94bca4224541bb8ee7293a918f8e0e7ae212248d3dab6cde0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ab321a4d07088e94bca4224541bb8ee7293a918f8e0e7ae212248d3dab6cde0
Size

768KB
Sample

221030-gejsvaech4
MD5

a3314997977b7f48d64847aaa97b6c20
SHA1

7cd6f46573d14ee5fe0c186eac3414a72ade4fa3
SHA256

9ab321a4d07088e94bca4224541bb8ee7293a918f8e0e7ae212248d3dab6cde0
SHA512

cdc020bc7878e1b42e42e74bb47cef7eb108996475ac6ac4d748649e467de3296efc6def922740f48188d93f7cf45dd6de2c5680ff5138f7198017e504f62ab8
SSDEEP

1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRqm:352T3siXei5bcmP9JfUjWU

Score

8^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  9ab321a4d07088e94bca4224541bb8ee7293a918f8e0e7ae212248d3dab6cde0
- Size
  
  768KB
- MD5
  
  a3314997977b7f48d64847aaa97b6c20
- SHA1
  
  7cd6f46573d14ee5fe0c186eac3414a72ade4fa3
- SHA256
  
  9ab321a4d07088e94bca4224541bb8ee7293a918f8e0e7ae212248d3dab6cde0
- SHA512
  
  cdc020bc7878e1b42e42e74bb47cef7eb108996475ac6ac4d748649e467de3296efc6def922740f48188d93f7cf45dd6de2c5680ff5138f7198017e504f62ab8
- SSDEEP
  
  1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRqm:352T3siXei5bcmP9JfUjWU
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2