Overview

overview

8

Static

static

8

96c3b4fb74...b4.exe

windows7-x64

8

96c3b4fb74...b4.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    96c3b4fb74592d082c307fb9ee9aecc1dd99553afb000140dff4906248f0f3b4

  • Size

    699KB

  • Sample

    220922-fek58sdfem

  • MD5

    6b43b10b3de0e6cdc299a30c4b7c3af2

  • SHA1

    9a0f93fa091552b94632adff329c7c2686bfae33

  • SHA256

    96c3b4fb74592d082c307fb9ee9aecc1dd99553afb000140dff4906248f0f3b4

  • SHA512

    c2afb915459e2cdc0a05e8975d5719b0aeacc55f50eb110791779acb9a61f7d7c6f6be0becded2b9639197516e16ebd44953c33b34c6416436c049450c7100d2

  • SSDEEP

    12288:qPP2sGT1u2iCW0HXmD5l3ESFhOdVkRWAmAx3MMz10gLJqUZ9r:qz1H0a5lfhOzkRfmsMMZ0OJNV

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      96c3b4fb74592d082c307fb9ee9aecc1dd99553afb000140dff4906248f0f3b4

    • Size

      699KB

    • MD5

      6b43b10b3de0e6cdc299a30c4b7c3af2

    • SHA1

      9a0f93fa091552b94632adff329c7c2686bfae33

    • SHA256

      96c3b4fb74592d082c307fb9ee9aecc1dd99553afb000140dff4906248f0f3b4

    • SHA512

      c2afb915459e2cdc0a05e8975d5719b0aeacc55f50eb110791779acb9a61f7d7c6f6be0becded2b9639197516e16ebd44953c33b34c6416436c049450c7100d2

    • SSDEEP

      12288:qPP2sGT1u2iCW0HXmD5l3ESFhOdVkRWAmAx3MMz10gLJqUZ9r:qz1H0a5lfhOzkRfmsMMZ0OJNV

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks