53e1853e9b01c606de9618277807c81903ebf0008c8e8d2379dce080e6ed2b21 | Triage

Submit
Reports

Overview

overview

8

Static

static

53e1853e9b...21.exe

windows7-x64

53e1853e9b...21.exe

windows10-2004-x64

Sharing

General

Target

53e1853e9b01c606de9618277807c81903ebf0008c8e8d2379dce080e6ed2b21
Size

128KB
Sample

221021-ad8bgsced6
MD5

64457ebdd9ebb705f7add211be8529b0
SHA1

ffffcf9487f3374783b221222a7dbd614627c37f
SHA256

53e1853e9b01c606de9618277807c81903ebf0008c8e8d2379dce080e6ed2b21
SHA512

8a4d971535a19eba737d9ac3276e2fb835f4476972196de1c137bb1df00a98216a757415612484660cba12345edaa28de67ff6a464f3b84dd8aa0ff4f87998c6
SSDEEP

1536:pKFlVDvP8oazgLNWNjQjUaqC8VPLpcOaets8c0w2Aeq1tS5cGRwVMFq82Wagal1p:pavEoaELzLi6OaU/EmwVan5rUXz

Score

8^/10

aspackv2 discovery persistence upx

Static task

static1

Behavioral task

behavioral1

Sample

53e1853e9b01c606de9618277807c81903ebf0008c8e8d2379dce080e6ed2b21.exe

Resource

win7-20220901-en

aspackv2 discovery persistence upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

53e1853e9b01c606de9618277807c81903ebf0008c8e8d2379dce080e6ed2b21.exe

Resource

win10v2004-20220901-en

aspackv2 discovery persistence upx

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  53e1853e9b01c606de9618277807c81903ebf0008c8e8d2379dce080e6ed2b21
- Size
  
  128KB
- MD5
  
  64457ebdd9ebb705f7add211be8529b0
- SHA1
  
  ffffcf9487f3374783b221222a7dbd614627c37f
- SHA256
  
  53e1853e9b01c606de9618277807c81903ebf0008c8e8d2379dce080e6ed2b21
- SHA512
  
  8a4d971535a19eba737d9ac3276e2fb835f4476972196de1c137bb1df00a98216a757415612484660cba12345edaa28de67ff6a464f3b84dd8aa0ff4f87998c6
- SSDEEP
  
  1536:pKFlVDvP8oazgLNWNjQjUaqC8VPLpcOaets8c0w2Aeq1tS5cGRwVMFq82Wagal1p:pavEoaELzLi6OaU/EmwVan5rUXz
Score

8^/10

aspackv2 discovery persistence upx
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Sets DLL path for service in the registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2discoverypersistenceupx

behavioral2

aspackv2discoverypersistenceupx

© 2018-2025

Terms | Privacy