General

  • Target

    175b8315c676e705e3ece38762ab25b637758cf17311d64af56e07972fafa1f6

  • Size

    289KB

  • Sample

    221124-j98rkaeb3t

  • MD5

    598c92b53bfbbbb2d5bf5c7b7895d538

  • SHA1

    44071d911d85dc9a1acebebdd8588d2d57ee2102

  • SHA256

    175b8315c676e705e3ece38762ab25b637758cf17311d64af56e07972fafa1f6

  • SHA512

    d2fc331b192c17bf100fa18df4f631091ecd817193dbbaf6aaf70226cb19f4f6c0f1be6b1fbcf60a5bba577d435c001f61163d8a0640e6f7c3be8af732b243af

  • SSDEEP

    6144:pchQ+13/4YIJ8m1MxUyRzoVOBlYQflIGa:pch31P4BJTM6++OBlYERa

Malware Config

Targets

    • Target

      175b8315c676e705e3ece38762ab25b637758cf17311d64af56e07972fafa1f6

    • Size

      289KB

    • MD5

      598c92b53bfbbbb2d5bf5c7b7895d538

    • SHA1

      44071d911d85dc9a1acebebdd8588d2d57ee2102

    • SHA256

      175b8315c676e705e3ece38762ab25b637758cf17311d64af56e07972fafa1f6

    • SHA512

      d2fc331b192c17bf100fa18df4f631091ecd817193dbbaf6aaf70226cb19f4f6c0f1be6b1fbcf60a5bba577d435c001f61163d8a0640e6f7c3be8af732b243af

    • SSDEEP

      6144:pchQ+13/4YIJ8m1MxUyRzoVOBlYQflIGa:pch31P4BJTM6++OBlYERa

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Sets DLL path for service in the registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks