Overview

overview

8

Static

static

8

403dea1f68...b8.exe

windows7-x64

8

403dea1f68...b8.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    403dea1f6851bd3268d9f1f3171d8df72e682082dc3516a60f2dda51d2a486b8

  • Size

    324KB

  • Sample

    221124-pe4f9ach25

  • MD5

    75aeb9facfdfe635dda8b49690336833

  • SHA1

    8fe8a10203eb98839aa73d751d24f7dc15f1dff0

  • SHA256

    403dea1f6851bd3268d9f1f3171d8df72e682082dc3516a60f2dda51d2a486b8

  • SHA512

    05b3eae537fc3435d1c041b1b4c77ecb8e691656150d9db6740a8e90df564fac0a5e02d3939377b0c90b941b9257ca9b6616808222f44c83197595f6602c9a7b

  • SSDEEP

    6144:d/j5C+Ed3/4YIJ8m1MxUyRzoVOBlYQflIGE:d/s+aP4BJTM6++OBlYERE

Score
8/10
aspackv2persistenceupx

Malware Config

Targets

    • Target

      403dea1f6851bd3268d9f1f3171d8df72e682082dc3516a60f2dda51d2a486b8

    • Size

      324KB

    • MD5

      75aeb9facfdfe635dda8b49690336833

    • SHA1

      8fe8a10203eb98839aa73d751d24f7dc15f1dff0

    • SHA256

      403dea1f6851bd3268d9f1f3171d8df72e682082dc3516a60f2dda51d2a486b8

    • SHA512

      05b3eae537fc3435d1c041b1b4c77ecb8e691656150d9db6740a8e90df564fac0a5e02d3939377b0c90b941b9257ca9b6616808222f44c83197595f6602c9a7b

    • SSDEEP

      6144:d/j5C+Ed3/4YIJ8m1MxUyRzoVOBlYQflIGE:d/s+aP4BJTM6++OBlYERE

    Score
    8/10
    aspackv2persistenceupx

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Sets DLL path for service in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks