General

  • Target

    58c8444996386b67cb027fa671eab46d

  • Size

    251KB

  • Sample

    240113-nclb8ahbaj

  • MD5

    58c8444996386b67cb027fa671eab46d

  • SHA1

    059133bdcb0c067a8a455c5f06d640978774ff57

  • SHA256

    7d2c25cc02002045dc1da6a47c1bd38a3621a0b2f7e1dcf15ecbfba048ce0f80

  • SHA512

    35ce7a654ded45a426c116f37cfedfb0336c781556fe3213610503772e32b206764eec49a50b32e094393d9775a83a35c7f5caa9b2c29e0af642902ccd8f26e0

  • SSDEEP

    6144:SzclRDvO4SIA1AT+UBiPVCi55bdbP9GwCUKMCux:nbDvJAmTs9C+hGaCk

Malware Config

Targets

    • Target

      58c8444996386b67cb027fa671eab46d

    • Size

      251KB

    • MD5

      58c8444996386b67cb027fa671eab46d

    • SHA1

      059133bdcb0c067a8a455c5f06d640978774ff57

    • SHA256

      7d2c25cc02002045dc1da6a47c1bd38a3621a0b2f7e1dcf15ecbfba048ce0f80

    • SHA512

      35ce7a654ded45a426c116f37cfedfb0336c781556fe3213610503772e32b206764eec49a50b32e094393d9775a83a35c7f5caa9b2c29e0af642902ccd8f26e0

    • SSDEEP

      6144:SzclRDvO4SIA1AT+UBiPVCi55bdbP9GwCUKMCux:nbDvJAmTs9C+hGaCk

    • Sets DLL path for service in the registry

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks