Overview

overview

8

Static

static

8

537ed1c28b...fe.exe

windows7-x64

8

537ed1c28b...fe.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    537ed1c28b8a4e57570b300a2a51f27bb278c85c83d2c195cadd1df35ce434fe

  • Size

    196KB

  • Sample

    221123-z9agrshg9t

  • MD5

    34da4ed51614882a6e864199bbc3e3b6

  • SHA1

    258dd0f766609bb3650f38fee1a6e4501ab7bfe8

  • SHA256

    537ed1c28b8a4e57570b300a2a51f27bb278c85c83d2c195cadd1df35ce434fe

  • SHA512

    c1cf801071003b7fd9b97851380554dd533585e4926f882eef356b190d7cafad99071ddcd2e7252467fa7e4c64e1eb2ee25f8a70ffe39004c7b4f72ae279870b

  • SSDEEP

    384:FRPdA1HmLgI/Hl0XdjbeoI6cySG+awHSatFNUqMh/VdAxFr6+S9Pfu7n5k4v:FRPdAGLgKKdjM6cBG+uaTqYxIdeVRv

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      537ed1c28b8a4e57570b300a2a51f27bb278c85c83d2c195cadd1df35ce434fe

    • Size

      196KB

    • MD5

      34da4ed51614882a6e864199bbc3e3b6

    • SHA1

      258dd0f766609bb3650f38fee1a6e4501ab7bfe8

    • SHA256

      537ed1c28b8a4e57570b300a2a51f27bb278c85c83d2c195cadd1df35ce434fe

    • SHA512

      c1cf801071003b7fd9b97851380554dd533585e4926f882eef356b190d7cafad99071ddcd2e7252467fa7e4c64e1eb2ee25f8a70ffe39004c7b4f72ae279870b

    • SSDEEP

      384:FRPdA1HmLgI/Hl0XdjbeoI6cySG+awHSatFNUqMh/VdAxFr6+S9Pfu7n5k4v:FRPdAGLgKKdjM6cBG+uaTqYxIdeVRv

    Score
    8/10
    aspackv2persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks