317d33a56b922e37265b1f29c9b722bbb20044300272f703f8470d878a4186d1 | Triage

Submit
Reports

Overview

overview

8

Static

static

8

317d33a56b...d1.exe

windows7-x64

8

317d33a56b...d1.exe

windows10-2004-x64

8

Sharing

General

Target

317d33a56b922e37265b1f29c9b722bbb20044300272f703f8470d878a4186d1
Size

340KB
Sample

221030-cglyrsgbf8
MD5

a28492a1b6f983de61a8ac8ca51c62a0
SHA1

433143385fac2899b159757ae7554046be8d7e4e
SHA256

317d33a56b922e37265b1f29c9b722bbb20044300272f703f8470d878a4186d1
SHA512

fd7508362787c5f3f45e97f0c2d43e515cdd3100c015a386a3a6fc5173a3ef652d6c19ed1d1143a5c3ce5964e464f8886a155562f7f2cbd01e099e1a1972d5c2
SSDEEP

6144:OPeyxTwclRDvO4SIA1AT+UBiPVCi55bdbP9GwCUKMCuxZG:OPbZhbDvJAmTs9C+hGaCkZG

Score

8^/10

aspackv2 persistence upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

317d33a56b922e37265b1f29c9b722bbb20044300272f703f8470d878a4186d1.exe

Resource

win7-20220812-en

aspackv2 persistence upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

317d33a56b922e37265b1f29c9b722bbb20044300272f703f8470d878a4186d1.exe

Resource

win10v2004-20220812-en

aspackv2 persistence upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  317d33a56b922e37265b1f29c9b722bbb20044300272f703f8470d878a4186d1
- Size
  
  340KB
- MD5
  
  a28492a1b6f983de61a8ac8ca51c62a0
- SHA1
  
  433143385fac2899b159757ae7554046be8d7e4e
- SHA256
  
  317d33a56b922e37265b1f29c9b722bbb20044300272f703f8470d878a4186d1
- SHA512
  
  fd7508362787c5f3f45e97f0c2d43e515cdd3100c015a386a3a6fc5173a3ef652d6c19ed1d1143a5c3ce5964e464f8886a155562f7f2cbd01e099e1a1972d5c2
- SSDEEP
  
  6144:OPeyxTwclRDvO4SIA1AT+UBiPVCi55bdbP9GwCUKMCuxZG:OPbZhbDvJAmTs9C+hGaCkZG
Score

8^/10

aspackv2 persistence upx
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Sets DLL path for service in the registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistenceupx

behavioral2

aspackv2persistenceupx

© 2018-2024

Terms | Privacy