37ff89de1068fd3a580398368fd8f5b3651fcb22dc573b3e0c81ebadbcb01df8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37ff89de1068fd3a580398368fd8f5b3651fcb22dc573b3e0c81ebadbcb01df8
Size

1.4MB
Sample

221030-gf5rpsfdgk
MD5

84ad592a638565d2df4650ae19b24a98
SHA1

d3bb016e74c89902391914bdcf3e10b7cbea5ce1
SHA256

37ff89de1068fd3a580398368fd8f5b3651fcb22dc573b3e0c81ebadbcb01df8
SHA512

806c2caf2629bf2fa46457ccfb97ee53e94338be898031faaf0ce471c3f92eb9e929b384040af4207d1c3e8d16bd25ab424770d8cd52c9e1446fe21c09737506
SSDEEP

1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW

Score

8^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  37ff89de1068fd3a580398368fd8f5b3651fcb22dc573b3e0c81ebadbcb01df8
- Size
  
  1.4MB
- MD5
  
  84ad592a638565d2df4650ae19b24a98
- SHA1
  
  d3bb016e74c89902391914bdcf3e10b7cbea5ce1
- SHA256
  
  37ff89de1068fd3a580398368fd8f5b3651fcb22dc573b3e0c81ebadbcb01df8
- SHA512
  
  806c2caf2629bf2fa46457ccfb97ee53e94338be898031faaf0ce471c3f92eb9e929b384040af4207d1c3e8d16bd25ab424770d8cd52c9e1446fe21c09737506
- SSDEEP
  
  1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2