General

  • Target

    190bd201bba9ed7b41399b889d737bb35c7be304820901edb76223e03917461d

  • Size

    3.6MB

  • Sample

    221125-pjswbagb47

  • MD5

    f3b79cfc8f0c006b0a2059bbc085f41e

  • SHA1

    85691c69807cd536aaf8163d31771fddcbe61abf

  • SHA256

    190bd201bba9ed7b41399b889d737bb35c7be304820901edb76223e03917461d

  • SHA512

    e91ec0ddaa121c8fcd303389071f2608728a0ab49cfc73f612808846cdaeb3077281c71158ff883591102c130c90648feba37a79301833a3975800efd9645f93

  • SSDEEP

    98304:xQmhlyDrLjdbaHDkv1W1vBEYCqb61sWLhBs+QlOfbC2M:ymhgTjdbM4W1vBp1mCiVfbCp

Malware Config

Targets

    • Target

      190bd201bba9ed7b41399b889d737bb35c7be304820901edb76223e03917461d

    • Size

      3.6MB

    • MD5

      f3b79cfc8f0c006b0a2059bbc085f41e

    • SHA1

      85691c69807cd536aaf8163d31771fddcbe61abf

    • SHA256

      190bd201bba9ed7b41399b889d737bb35c7be304820901edb76223e03917461d

    • SHA512

      e91ec0ddaa121c8fcd303389071f2608728a0ab49cfc73f612808846cdaeb3077281c71158ff883591102c130c90648feba37a79301833a3975800efd9645f93

    • SSDEEP

      98304:xQmhlyDrLjdbaHDkv1W1vBEYCqb61sWLhBs+QlOfbC2M:ymhgTjdbM4W1vBp1mCiVfbCp

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Discovery

System Information Discovery

1
T1082

Tasks