Overview

overview

8

Static

static

8

331b6ff2a0...72.exe

windows7-x64

8

331b6ff2a0...72.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    331b6ff2a0962ad1ad0cb542f66258e020c30f96a30a515a60340883314a8d72

  • Size

    336KB

  • Sample

    221030-14ltaadgaq

  • MD5

    a18c28f720e8ea455af3281f2594fc70

  • SHA1

    4d67bafe0391360a5a04658b93bf5bde58d0dc93

  • SHA256

    331b6ff2a0962ad1ad0cb542f66258e020c30f96a30a515a60340883314a8d72

  • SHA512

    62bcf080b653d9f75ee0631017c3cd2083314a499b70accab1d179c283512cf765253ab0bd888b1b07b668d98810358b7c1a2890d9570d5173f73bc2ff00e841

  • SSDEEP

    3072:oqPL1/7w6ZAs+VBKLld/4YIzVOhmViGHLgwmUyq/HyWgZqaeVOc0McU/9SnGsKQx:ZQVI3/4YIJ8m1MxUyRzoVOBlYQflIG

Score
8/10
aspackv2persistenceupx

Malware Config

Targets

    • Target

      331b6ff2a0962ad1ad0cb542f66258e020c30f96a30a515a60340883314a8d72

    • Size

      336KB

    • MD5

      a18c28f720e8ea455af3281f2594fc70

    • SHA1

      4d67bafe0391360a5a04658b93bf5bde58d0dc93

    • SHA256

      331b6ff2a0962ad1ad0cb542f66258e020c30f96a30a515a60340883314a8d72

    • SHA512

      62bcf080b653d9f75ee0631017c3cd2083314a499b70accab1d179c283512cf765253ab0bd888b1b07b668d98810358b7c1a2890d9570d5173f73bc2ff00e841

    • SSDEEP

      3072:oqPL1/7w6ZAs+VBKLld/4YIzVOhmViGHLgwmUyq/HyWgZqaeVOc0McU/9SnGsKQx:ZQVI3/4YIJ8m1MxUyRzoVOBlYQflIG

    Score
    8/10
    aspackv2persistenceupx

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Sets DLL path for service in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks