Overview

overview

8

Static

static

a3913a8ba0...8a.exe

windows7-x64

8

a3913a8ba0...8a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3913a8ba006adc3367096cd0907ba827c80a390306e0dfc4c2be61e61d8668a

  • Size

    2.2MB

  • Sample

    221001-2bgjjaaab6

  • MD5

    6e745542df9733f0c4ef1386254e7f1a

  • SHA1

    aeb17ddeb13d1d8c7fec3e21ad14ef5f9f610b48

  • SHA256

    a3913a8ba006adc3367096cd0907ba827c80a390306e0dfc4c2be61e61d8668a

  • SHA512

    e8868f92ebebd37a9a16cc78466b086599678c91fc7fd832b323286c414902c827a4e18e313f5a1cf99d78d25be2dea92cbbec09f0f9d71097168bfa71a31d13

  • SSDEEP

    49152:cIYxWDHhJylc0R5x4D8ogdmyshvqMT5DGSFeFnhGH+H42MpXq:2oDP70/eYmyscoDpunhGH+H42H

Score
8/10
aspackv2upx

Malware Config

Targets

    • Target

      a3913a8ba006adc3367096cd0907ba827c80a390306e0dfc4c2be61e61d8668a

    • Size

      2.2MB

    • MD5

      6e745542df9733f0c4ef1386254e7f1a

    • SHA1

      aeb17ddeb13d1d8c7fec3e21ad14ef5f9f610b48

    • SHA256

      a3913a8ba006adc3367096cd0907ba827c80a390306e0dfc4c2be61e61d8668a

    • SHA512

      e8868f92ebebd37a9a16cc78466b086599678c91fc7fd832b323286c414902c827a4e18e313f5a1cf99d78d25be2dea92cbbec09f0f9d71097168bfa71a31d13

    • SSDEEP

      49152:cIYxWDHhJylc0R5x4D8ogdmyshvqMT5DGSFeFnhGH+H42MpXq:2oDP70/eYmyscoDpunhGH+H42H

    Score
    8/10
    aspackv2upx

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks