General

  • Target

    ac3550212591a9e328e3f5e29a9b26497d3d0ba86e9e57230a42991c1f41c405

  • Size

    287KB

  • Sample

    221125-p2gwrscf21

  • MD5

    86ebd6d6a4d4cd527422c9ef3c24fd50

  • SHA1

    0db2b45f0e331d1121fbc786e50f645f198763c7

  • SHA256

    ac3550212591a9e328e3f5e29a9b26497d3d0ba86e9e57230a42991c1f41c405

  • SHA512

    82186d473e7a3d63ca0e9857aa3e0522ac9bde6593ead8d78d6d4384452bbd158c4f1306d212f08be41c748c02996730ecd6192f3623049d0cb19a25d44c715c

  • SSDEEP

    6144:KchQ+DG3/4YIJ8m1MxUyRzoVOBlYQflIGN:Kch3DGP4BJTM6++OBlYERN

Malware Config

Targets

    • Target

      ac3550212591a9e328e3f5e29a9b26497d3d0ba86e9e57230a42991c1f41c405

    • Size

      287KB

    • MD5

      86ebd6d6a4d4cd527422c9ef3c24fd50

    • SHA1

      0db2b45f0e331d1121fbc786e50f645f198763c7

    • SHA256

      ac3550212591a9e328e3f5e29a9b26497d3d0ba86e9e57230a42991c1f41c405

    • SHA512

      82186d473e7a3d63ca0e9857aa3e0522ac9bde6593ead8d78d6d4384452bbd158c4f1306d212f08be41c748c02996730ecd6192f3623049d0cb19a25d44c715c

    • SSDEEP

      6144:KchQ+DG3/4YIJ8m1MxUyRzoVOBlYQflIGN:Kch3DGP4BJTM6++OBlYERN

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Sets DLL path for service in the registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks