9e821e3e2159657a074022c9209c0f4caa9ebbd24c0f953bfbfb5a0328fafb19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e821e3e2159657a074022c9209c0f4caa9ebbd24c0f953bfbfb5a0328fafb19
Size

3.1MB
Sample

221129-s41cnscf46
MD5

2dfa9e1dc1be9bf3667fafb9cb9edde7
SHA1

a2d1b7ff1f72ae7afc594d93fae95bc1f3a1a7b7
SHA256

9e821e3e2159657a074022c9209c0f4caa9ebbd24c0f953bfbfb5a0328fafb19
SHA512

52e81853085f4216b3568642a02151c7c287a807a0904da6221d4e19e0ef97a17a7c627fd21860cae218886d633f203b1b886c252d2525e67c19b19a8b4e84ce
SSDEEP

1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW

Score

8^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  9e821e3e2159657a074022c9209c0f4caa9ebbd24c0f953bfbfb5a0328fafb19
- Size
  
  3.1MB
- MD5
  
  2dfa9e1dc1be9bf3667fafb9cb9edde7
- SHA1
  
  a2d1b7ff1f72ae7afc594d93fae95bc1f3a1a7b7
- SHA256
  
  9e821e3e2159657a074022c9209c0f4caa9ebbd24c0f953bfbfb5a0328fafb19
- SHA512
  
  52e81853085f4216b3568642a02151c7c287a807a0904da6221d4e19e0ef97a17a7c627fd21860cae218886d633f203b1b886c252d2525e67c19b19a8b4e84ce
- SSDEEP
  
  1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2