5362fe0bae64cc7f369505bce08d43143fc638cc68a71d28d734669bac1684a1 | Triage

Submit
Reports

Overview

overview

8

Static

static

8

5362fe0bae...a1.exe

windows7-x64

8

5362fe0bae...a1.exe

windows10-2004-x64

8

Sharing

General

Target

5362fe0bae64cc7f369505bce08d43143fc638cc68a71d28d734669bac1684a1
Size

291KB
Sample

221121-k6n4esgc5v
MD5

0933c29d22c7eaedffc652f2ac935880
SHA1

cb21b6e9a6366358ce91ba7b94d18056e4358dc4
SHA256

5362fe0bae64cc7f369505bce08d43143fc638cc68a71d28d734669bac1684a1
SHA512

fb33263902734793cf477bbf8b21cd24041a1ba3c1ed4b49c8252b03380ed94d4b140dc8512c7eb3a538bc8365fd7cc997930a63f69b0ec6197ea93a33f2ff77
SSDEEP

6144:aOPjpslDyzkXhCaVbJRdgHgnuoE681zPHM/4/3S7o:3NOyznalJRdgHZoEXRs/4v+o

Score

8^/10

aspackv2 persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

5362fe0bae64cc7f369505bce08d43143fc638cc68a71d28d734669bac1684a1.exe

Resource

win7-20221111-en

aspackv2 persistence upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

5362fe0bae64cc7f369505bce08d43143fc638cc68a71d28d734669bac1684a1.exe

Resource

win10v2004-20221111-en

aspackv2 persistence upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  5362fe0bae64cc7f369505bce08d43143fc638cc68a71d28d734669bac1684a1
- Size
  
  291KB
- MD5
  
  0933c29d22c7eaedffc652f2ac935880
- SHA1
  
  cb21b6e9a6366358ce91ba7b94d18056e4358dc4
- SHA256
  
  5362fe0bae64cc7f369505bce08d43143fc638cc68a71d28d734669bac1684a1
- SHA512
  
  fb33263902734793cf477bbf8b21cd24041a1ba3c1ed4b49c8252b03380ed94d4b140dc8512c7eb3a538bc8365fd7cc997930a63f69b0ec6197ea93a33f2ff77
- SSDEEP
  
  6144:aOPjpslDyzkXhCaVbJRdgHgnuoE681zPHM/4/3S7o:3NOyznalJRdgHZoEXRs/4v+o
Score

8^/10

aspackv2 persistence upx
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Sets DLL path for service in the registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistenceupx

behavioral2

aspackv2persistenceupx

© 2018-2025

Terms | Privacy