Overview

overview

8

Static

static

8

c61d23e3bd...3a.exe

windows7-x64

8

c61d23e3bd...3a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c61d23e3bdfd9f6d05583e25c98a24f3313e93d77b47d09f06aa2166752e3c3a

  • Size

    21KB

  • Sample

    220919-nn5j8seha3

  • MD5

    14303216a7dedb014985b13c58308e73

  • SHA1

    e1553ed898d1e0aa170573b0d3dda1c181b1928c

  • SHA256

    c61d23e3bdfd9f6d05583e25c98a24f3313e93d77b47d09f06aa2166752e3c3a

  • SHA512

    bd16d8242f3d71c7749060fc134563be7b9e27ab08dce100aa0f3073ed4f28f21c0112c9223e5e3ed3c66338771c861feb05c52c7376581c6e1398fd14a2ec54

  • SSDEEP

    384:nshUHuAdwb492W08W8OY2CWNZ597y68iYf1HRjkzgQJd1Axzr6+S9Pfu7n5c:nmUHuzz8W8ByZj7y68vVRjkzgQKxKdeG

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      c61d23e3bdfd9f6d05583e25c98a24f3313e93d77b47d09f06aa2166752e3c3a

    • Size

      21KB

    • MD5

      14303216a7dedb014985b13c58308e73

    • SHA1

      e1553ed898d1e0aa170573b0d3dda1c181b1928c

    • SHA256

      c61d23e3bdfd9f6d05583e25c98a24f3313e93d77b47d09f06aa2166752e3c3a

    • SHA512

      bd16d8242f3d71c7749060fc134563be7b9e27ab08dce100aa0f3073ed4f28f21c0112c9223e5e3ed3c66338771c861feb05c52c7376581c6e1398fd14a2ec54

    • SSDEEP

      384:nshUHuAdwb492W08W8OY2CWNZ597y68iYf1HRjkzgQJd1Axzr6+S9Pfu7n5c:nmUHuzz8W8ByZj7y68vVRjkzgQKxKdeG

    Score
    8/10
    aspackv2persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks