b1658893f2fdccdf1a9714507500c146636911d74901ba9e59bb81a2db8ff598 | Triage

Submit
Reports

Overview

overview

8

Static

static

8

b1658893f2...98.exe

windows7-x64

8

b1658893f2...98.exe

windows10-2004-x64

8

Sharing

General

Target

b1658893f2fdccdf1a9714507500c146636911d74901ba9e59bb81a2db8ff598
Size

284KB
Sample

221030-13n71scgc7
MD5

a25056ce4c817accfb3261769752f450
SHA1

169f3d6b513b8792d55cefa88d3eeb5f3dc7992b
SHA256

b1658893f2fdccdf1a9714507500c146636911d74901ba9e59bb81a2db8ff598
SHA512

d3e9895af4bd6cf364c33669dbf79cf0970cff7ec709c997f5c786895b3a2853a6e56f2f7e2fc12008c2c74942efd19ef5e51d687ffcc501342320d3f0071b8c
SSDEEP

6144:XvAclRDvO4SIA1AT+UBiPVCi55bdbP9GwCUKMCuxZG:X5bDvJAmTs9C+hGaCkZG

Score

8^/10

aspackv2 persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

b1658893f2fdccdf1a9714507500c146636911d74901ba9e59bb81a2db8ff598.exe

Resource

win7-20220812-en

aspackv2 persistence upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

b1658893f2fdccdf1a9714507500c146636911d74901ba9e59bb81a2db8ff598.exe

Resource

win10v2004-20220812-en

aspackv2 persistence upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  b1658893f2fdccdf1a9714507500c146636911d74901ba9e59bb81a2db8ff598
- Size
  
  284KB
- MD5
  
  a25056ce4c817accfb3261769752f450
- SHA1
  
  169f3d6b513b8792d55cefa88d3eeb5f3dc7992b
- SHA256
  
  b1658893f2fdccdf1a9714507500c146636911d74901ba9e59bb81a2db8ff598
- SHA512
  
  d3e9895af4bd6cf364c33669dbf79cf0970cff7ec709c997f5c786895b3a2853a6e56f2f7e2fc12008c2c74942efd19ef5e51d687ffcc501342320d3f0071b8c
- SSDEEP
  
  6144:XvAclRDvO4SIA1AT+UBiPVCi55bdbP9GwCUKMCuxZG:X5bDvJAmTs9C+hGaCkZG
Score

8^/10

aspackv2 persistence upx
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Sets DLL path for service in the registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistenceupx

behavioral2

aspackv2persistenceupx

© 2018-2025

Terms | Privacy