Overview

overview

8

Static

static

8

f4ac9a4e86...30.exe

windows7-x64

8

f4ac9a4e86...30.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4ac9a4e862dc709d615a9b04078c7ca0b558c0dfc30857c6a5840401c2d7e30

  • Size

    327KB

  • Sample

    221123-zv4gasha2s

  • MD5

    4496103fd2f55102cd6c4bcadd9172e0

  • SHA1

    82f977e9b2bb2c5aa8ebdd662bc37dba2dcd6626

  • SHA256

    f4ac9a4e862dc709d615a9b04078c7ca0b558c0dfc30857c6a5840401c2d7e30

  • SHA512

    b5df7f8f186363276b5eb1c9b054fce2db2c74f5352bf31483a63a81c9a16c1be126f3b1f3aa0df0f5a85575431a9c6c59b1df6893e82a09798ce45b014cbbc1

  • SSDEEP

    6144:fUZyAj8olritKpGmgXIaik9gvrmQGfMcIZnpYAHIe+cg/fpi:xiEKGLXIJkwrmrrIZpYAHnkY

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      f4ac9a4e862dc709d615a9b04078c7ca0b558c0dfc30857c6a5840401c2d7e30

    • Size

      327KB

    • MD5

      4496103fd2f55102cd6c4bcadd9172e0

    • SHA1

      82f977e9b2bb2c5aa8ebdd662bc37dba2dcd6626

    • SHA256

      f4ac9a4e862dc709d615a9b04078c7ca0b558c0dfc30857c6a5840401c2d7e30

    • SHA512

      b5df7f8f186363276b5eb1c9b054fce2db2c74f5352bf31483a63a81c9a16c1be126f3b1f3aa0df0f5a85575431a9c6c59b1df6893e82a09798ce45b014cbbc1

    • SSDEEP

      6144:fUZyAj8olritKpGmgXIaik9gvrmQGfMcIZnpYAHIe+cg/fpi:xiEKGLXIJkwrmrrIZpYAHnkY

    Score
    8/10
    aspackv2persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks