General

  • Target

    9c2e7d6cccb7b5d85379e7b63c2f8bf44266cff4e4a58962e457efe88083f05e

  • Size

    292KB

  • Sample

    221124-j5ww7sdg6x

  • MD5

    903e8c5bf28636d0602befba944d7cf7

  • SHA1

    2faae8398baf5ca9cca17fc12ca9e0cbeda240e9

  • SHA256

    9c2e7d6cccb7b5d85379e7b63c2f8bf44266cff4e4a58962e457efe88083f05e

  • SHA512

    db432e7dfbc6d25be3f90ebc6a2d210ce6c683bf5236a895602c82ac0f7081d8be458d9edf077fa050abafdbdfb2f70775b89abee2044a8e6ce0765abaabc32f

  • SSDEEP

    6144:sN+HTr4epupV3/4YIJ8m1MxUyRzoVOBlYQflIGw:sNgrZeP4BJTM6++OBlYERw

Malware Config

Targets

    • Target

      9c2e7d6cccb7b5d85379e7b63c2f8bf44266cff4e4a58962e457efe88083f05e

    • Size

      292KB

    • MD5

      903e8c5bf28636d0602befba944d7cf7

    • SHA1

      2faae8398baf5ca9cca17fc12ca9e0cbeda240e9

    • SHA256

      9c2e7d6cccb7b5d85379e7b63c2f8bf44266cff4e4a58962e457efe88083f05e

    • SHA512

      db432e7dfbc6d25be3f90ebc6a2d210ce6c683bf5236a895602c82ac0f7081d8be458d9edf077fa050abafdbdfb2f70775b89abee2044a8e6ce0765abaabc32f

    • SSDEEP

      6144:sN+HTr4epupV3/4YIJ8m1MxUyRzoVOBlYQflIGw:sNgrZeP4BJTM6++OBlYERw

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Sets DLL path for service in the registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Tasks