Overview

overview

8

Static

static

db5b69f789...75.exe

windows7-x64

8

db5b69f789...75.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db5b69f7898d87dca5422ec9e3ee0fd7711f8a3440291468cc5f4c29dbd19b75

  • Size

    287KB

  • Sample

    221021-fjdlyscha7

  • MD5

    7bf0e9f5e70df85793d1acca4bc51a80

  • SHA1

    0ec1711024612b0eaa037ba3965113ec29e42a7f

  • SHA256

    db5b69f7898d87dca5422ec9e3ee0fd7711f8a3440291468cc5f4c29dbd19b75

  • SHA512

    571b7c0d1d859c1ba58efd62b061810bf440eec2e1bf0aa0633360cd868246454c7e28df49cb698c64e91de1c4fefc0ef1d2bf7b5c7894c568a4244d284bb7d0

  • SSDEEP

    6144:m/0uo+LqSEMqmfJdzrK8Tz7xweripPhEG:mJzLukjrK8/7xwZXEG

Score
8/10
aspackv2persistenceupx

Malware Config

Targets

    • Target

      db5b69f7898d87dca5422ec9e3ee0fd7711f8a3440291468cc5f4c29dbd19b75

    • Size

      287KB

    • MD5

      7bf0e9f5e70df85793d1acca4bc51a80

    • SHA1

      0ec1711024612b0eaa037ba3965113ec29e42a7f

    • SHA256

      db5b69f7898d87dca5422ec9e3ee0fd7711f8a3440291468cc5f4c29dbd19b75

    • SHA512

      571b7c0d1d859c1ba58efd62b061810bf440eec2e1bf0aa0633360cd868246454c7e28df49cb698c64e91de1c4fefc0ef1d2bf7b5c7894c568a4244d284bb7d0

    • SSDEEP

      6144:m/0uo+LqSEMqmfJdzrK8Tz7xweripPhEG:mJzLukjrK8/7xwZXEG

    Score
    8/10
    aspackv2persistenceupx

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Sets DLL path for service in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks