e051afc479cdf7b2cc36077f282005a51d126431fc07fe49861b4a92953810fa | Triage

Sharing

General

Target

e051afc479cdf7b2cc36077f282005a51d126431fc07fe49861b4a92953810fa
Size

192KB
Sample

220703-texe6afgdm
MD5

3b9879212b5e6812511f95e570a06478
SHA1

45dd00ca4a357f02170660174a96f6a15a836dc7
SHA256

e051afc479cdf7b2cc36077f282005a51d126431fc07fe49861b4a92953810fa
SHA512

d2027cf61a5d419a1f84f779900ea4695a3d6a902b54a5e51bd6f3e7f2fc37763191f4acbde85e2481989fb9c282a16a575cd09c0e266faf85a31e56652dc190

Score

8^/10

aspackv2 persistence spyware stealer

Malware Config

Targets

- Target
  
  e051afc479cdf7b2cc36077f282005a51d126431fc07fe49861b4a92953810fa
- Size
  
  192KB
- MD5
  
  3b9879212b5e6812511f95e570a06478
- SHA1
  
  45dd00ca4a357f02170660174a96f6a15a836dc7
- SHA256
  
  e051afc479cdf7b2cc36077f282005a51d126431fc07fe49861b4a92953810fa
- SHA512
  
  d2027cf61a5d419a1f84f779900ea4695a3d6a902b54a5e51bd6f3e7f2fc37763191f4acbde85e2481989fb9c282a16a575cd09c0e266faf85a31e56652dc190
Score

7^/10

persistence spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Replication Through Removable Media

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Lateral Movement

Replication Through Removable Media

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2