Overview

overview

8

Static

static

8

52c0008a00...80.exe

windows7-x64

8

52c0008a00...80.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52c0008a00b46ee2be3144fb176e9ed36f04a2f9239e5026e8d2bb8e3aa6ac80

  • Size

    320KB

  • Sample

    221030-14fbhacgf4

  • MD5

    a1dca0ba2309561195bc5dddde90db00

  • SHA1

    524f49cbccc0cac038408751bdbc318d23b2de1c

  • SHA256

    52c0008a00b46ee2be3144fb176e9ed36f04a2f9239e5026e8d2bb8e3aa6ac80

  • SHA512

    e68cf1e35490a4246f50d82d2dce3bb01ca2fd8921044588ed6d46b64179b93b5446e0fc2ef3c661bc7542042f007339a54cf27957fedade9b518ae296ebc832

  • SSDEEP

    3072:5qPL1/7w6ZAs+VBKBld/4YIzqmViGHLgwmUyq/HyWgZqaeVOc0McU/9SnGsKQfFD:eQVq3/4YIWm1MxUyRzoVOBlYQflIG

Score
8/10
aspackv2persistenceupx

Malware Config

Targets

    • Target

      52c0008a00b46ee2be3144fb176e9ed36f04a2f9239e5026e8d2bb8e3aa6ac80

    • Size

      320KB

    • MD5

      a1dca0ba2309561195bc5dddde90db00

    • SHA1

      524f49cbccc0cac038408751bdbc318d23b2de1c

    • SHA256

      52c0008a00b46ee2be3144fb176e9ed36f04a2f9239e5026e8d2bb8e3aa6ac80

    • SHA512

      e68cf1e35490a4246f50d82d2dce3bb01ca2fd8921044588ed6d46b64179b93b5446e0fc2ef3c661bc7542042f007339a54cf27957fedade9b518ae296ebc832

    • SSDEEP

      3072:5qPL1/7w6ZAs+VBKBld/4YIzqmViGHLgwmUyq/HyWgZqaeVOc0McU/9SnGsKQfFD:eQVq3/4YIWm1MxUyRzoVOBlYQflIG

    Score
    8/10
    aspackv2persistenceupx

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Sets DLL path for service in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks