Overview

overview

8

Static

static

8

a449a0e94d...51.exe

windows7-x64

6

a449a0e94d...51.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a449a0e94d0b23db140a78f642de9dde0a734b97c8d55f229ecffc7e38512851

  • Size

    896KB

  • Sample

    221125-yfjb5sdg9s

  • MD5

    ea7f73b279a592170cbc9f99f9b3f910

  • SHA1

    9f227fda80a3afd9944ceb05ad2d72d42fe49f0a

  • SHA256

    a449a0e94d0b23db140a78f642de9dde0a734b97c8d55f229ecffc7e38512851

  • SHA512

    f87a053569c549f9acb3fdd0eaa451cd5f267b291e04e24d8826c230d2b299ffb74761dd823be95985f9c0371ca1abb55db2ba655e8be0be03f0e862a18438b5

  • SSDEEP

    1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRqk:352T3siXei5bcmP9JfUjW

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      a449a0e94d0b23db140a78f642de9dde0a734b97c8d55f229ecffc7e38512851

    • Size

      896KB

    • MD5

      ea7f73b279a592170cbc9f99f9b3f910

    • SHA1

      9f227fda80a3afd9944ceb05ad2d72d42fe49f0a

    • SHA256

      a449a0e94d0b23db140a78f642de9dde0a734b97c8d55f229ecffc7e38512851

    • SHA512

      f87a053569c549f9acb3fdd0eaa451cd5f267b291e04e24d8826c230d2b299ffb74761dd823be95985f9c0371ca1abb55db2ba655e8be0be03f0e862a18438b5

    • SSDEEP

      1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRqk:352T3siXei5bcmP9JfUjW

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks