Overview

overview

8

Static

static

8

33322c2dbd...a4.exe

windows7-x64

1

33322c2dbd...a4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33322c2dbdf8f8010a1813a793d5421f7c78f96d011658f9ab6a97daa48386a4

  • Size

    2.2MB

  • Sample

    221125-lgxvpsbf5w

  • MD5

    04cf9237aa8eddd8737e9dbb401caa92

  • SHA1

    de08a0a729e1eeaa9d8bbfa0e270e3cbe8d5991a

  • SHA256

    33322c2dbdf8f8010a1813a793d5421f7c78f96d011658f9ab6a97daa48386a4

  • SHA512

    3a5018aa81adf9116b67cbcb14d1977636a77a8dddcd5bc79addcaa451150873b05adf6732d4f42b33969b1e2fd5dcfb09a87937ed183d22d41b21dc6ebd18ed

  • SSDEEP

    49152:IWEkDtfxp768xuWm02sm+N4q/Iu50+wm0cCPT0X2zzkwgDd3bqlWCxQPMDR:IWE0Z36y3NzIngCPTaPDdrMQE1

Score
8/10
aspackv2collection

Malware Config

Targets

    • Target

      33322c2dbdf8f8010a1813a793d5421f7c78f96d011658f9ab6a97daa48386a4

    • Size

      2.2MB

    • MD5

      04cf9237aa8eddd8737e9dbb401caa92

    • SHA1

      de08a0a729e1eeaa9d8bbfa0e270e3cbe8d5991a

    • SHA256

      33322c2dbdf8f8010a1813a793d5421f7c78f96d011658f9ab6a97daa48386a4

    • SHA512

      3a5018aa81adf9116b67cbcb14d1977636a77a8dddcd5bc79addcaa451150873b05adf6732d4f42b33969b1e2fd5dcfb09a87937ed183d22d41b21dc6ebd18ed

    • SSDEEP

      49152:IWEkDtfxp768xuWm02sm+N4q/Iu50+wm0cCPT0X2zzkwgDd3bqlWCxQPMDR:IWE0Z36y3NzIngCPTaPDdrMQE1

    Score
    8/10
    collection

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Accesses Microsoft Outlook accounts

      collection
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks