68e1853307b7d2412013364f9d2c712b6b9602d82cd64482ccc2c5f0cf6c4b6d | Triage

Sharing

General

Target

68e1853307b7d2412013364f9d2c712b6b9602d82cd64482ccc2c5f0cf6c4b6d
Size

62KB
Sample

221020-yxc7fscffr
MD5

a020acd9672a90dc2b86cb037cb67dd0
SHA1

a4f13efe5d0874bbe25e3639325ee47f57258356
SHA256

68e1853307b7d2412013364f9d2c712b6b9602d82cd64482ccc2c5f0cf6c4b6d
SHA512

c577c6dba72c7dae0975beccd45fdbd58084055705c212c2d833002a63c15d892b670b3c5380a13385d55bb2e84a86214d81d1131132b04d9216adfcb34abd8a
SSDEEP

1536:V58Ib8heU7Oqa1t7uQoSUvzlPCyhdH3lSaajFx8CEIgxT2:VyQaeNRf7uQovv5PCy7lZiFvcxT

Score

8^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  68e1853307b7d2412013364f9d2c712b6b9602d82cd64482ccc2c5f0cf6c4b6d
- Size
  
  62KB
- MD5
  
  a020acd9672a90dc2b86cb037cb67dd0
- SHA1
  
  a4f13efe5d0874bbe25e3639325ee47f57258356
- SHA256
  
  68e1853307b7d2412013364f9d2c712b6b9602d82cd64482ccc2c5f0cf6c4b6d
- SHA512
  
  c577c6dba72c7dae0975beccd45fdbd58084055705c212c2d833002a63c15d892b670b3c5380a13385d55bb2e84a86214d81d1131132b04d9216adfcb34abd8a
- SSDEEP
  
  1536:V58Ib8heU7Oqa1t7uQoSUvzlPCyhdH3lSaajFx8CEIgxT2:VyQaeNRf7uQovv5PCy7lZiFvcxT
Score

8^/10

aspackv2 persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistence

behavioral2

aspackv2persistence