9e130db2096349e24592576a10f867914e03dba057d6edb174bfca01b05cd52d | Triage

Submit
Reports

Overview

overview

Static

static

8

9e130db209...2d.exe

windows7-x64

9e130db209...2d.exe

windows10-2004-x64

Sharing

General

Target

9e130db2096349e24592576a10f867914e03dba057d6edb174bfca01b05cd52d
Size

674KB
Sample

221124-bawnysge79
MD5

2f291ca52251df4ae8dec764ff531160
SHA1

6fe74eb50972e76dbaef4eb88701217e862c4f82
SHA256

9e130db2096349e24592576a10f867914e03dba057d6edb174bfca01b05cd52d
SHA512

ea43271aca8236f0d956ba68e6beb1e92317c3abcd0ff831dfcb0b827f82cb0762ac91aaa607d91d254cce602a315e1d068e9c61cabd984441e596b7faaebeb7
SSDEEP

12288:W3TdtLW5WIj1YSSdFxHzc7A0huHcho5vBSXyMzBUWb95s3ebU9cp/GbhYl:ADsj1dE3zc7/u86pBcJ9nGJ9c1l

Score

10^/10

aspackv2 evasion persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

9e130db2096349e24592576a10f867914e03dba057d6edb174bfca01b05cd52d.exe

Resource

win7-20220812-en

evasion persistence

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

9e130db2096349e24592576a10f867914e03dba057d6edb174bfca01b05cd52d.exe

Resource

win10v2004-20220812-en

evasion persistence

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  9e130db2096349e24592576a10f867914e03dba057d6edb174bfca01b05cd52d
- Size
  
  674KB
- MD5
  
  2f291ca52251df4ae8dec764ff531160
- SHA1
  
  6fe74eb50972e76dbaef4eb88701217e862c4f82
- SHA256
  
  9e130db2096349e24592576a10f867914e03dba057d6edb174bfca01b05cd52d
- SHA512
  
  ea43271aca8236f0d956ba68e6beb1e92317c3abcd0ff831dfcb0b827f82cb0762ac91aaa607d91d254cce602a315e1d068e9c61cabd984441e596b7faaebeb7
- SSDEEP
  
  12288:W3TdtLW5WIj1YSSdFxHzc7A0huHcho5vBSXyMzBUWb95s3ebU9cp/GbhYl:ADsj1dE3zc7/u86pBcJ9nGJ9c1l
Score

10^/10

evasion persistence
- Modifies WinLogon for persistence
  persistence
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence

© 2018-2025

Terms | Privacy