Overview

overview

8

Static

static

8

de325ade17...91.exe

windows7-x64

8

de325ade17...91.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    de325ade1755db2e7e701f5de7df83a390071fc9df3645a103fd54e0476b2291

  • Size

    300KB

  • Sample

    221031-bgy3nahee6

  • MD5

    91bc13d145b91ac157b2cbc54137a4c0

  • SHA1

    d85a1d94790f5c52feb57a76b81492ec3eef6196

  • SHA256

    de325ade1755db2e7e701f5de7df83a390071fc9df3645a103fd54e0476b2291

  • SHA512

    a26c75bae9f5c103d7269ae8066606c5acad4040f899263f38ac0426f6f00966dd441f41dd28783bb7240c23408ec7e782021c28c713ef3462e41f98cf7bcd70

  • SSDEEP

    6144:GMKLkTzlGz9gOUb2GBqoOkR6loMnKXAOPvL2ADSPOTHM4P/rFEs7UXv5B:BKglGRgOUqmq9kR6lhKXYADSPOzMjkUj

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      de325ade1755db2e7e701f5de7df83a390071fc9df3645a103fd54e0476b2291

    • Size

      300KB

    • MD5

      91bc13d145b91ac157b2cbc54137a4c0

    • SHA1

      d85a1d94790f5c52feb57a76b81492ec3eef6196

    • SHA256

      de325ade1755db2e7e701f5de7df83a390071fc9df3645a103fd54e0476b2291

    • SHA512

      a26c75bae9f5c103d7269ae8066606c5acad4040f899263f38ac0426f6f00966dd441f41dd28783bb7240c23408ec7e782021c28c713ef3462e41f98cf7bcd70

    • SSDEEP

      6144:GMKLkTzlGz9gOUb2GBqoOkR6loMnKXAOPvL2ADSPOTHM4P/rFEs7UXv5B:BKglGRgOUqmq9kR6lhKXYADSPOzMjkUj

    Score
    8/10
    aspackv2persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks