Overview

overview

8

Static

static

8

2ddcb51962...a5.exe

windows7-x64

8

2ddcb51962...a5.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ddcb51962bfd990f021e3a03347b363778daf20951a14667ec658ef013bbaa5

  • Size

    540KB

  • Sample

    221125-skwkdafe56

  • MD5

    466606b22ec6b4d8ddc0916cdd1b7fcb

  • SHA1

    9e5180f41d226abb2f9f4f05abd39b89ea1531b9

  • SHA256

    2ddcb51962bfd990f021e3a03347b363778daf20951a14667ec658ef013bbaa5

  • SHA512

    2ad23c61d8f035f00dbf205530cdd9de1b183045d6717e9bc7f8e1441ba0f40ffd67edd9f50bcaac06e55b557c0fbae77c04db8039fc7ee854a72513dbf02291

  • SSDEEP

    12288:+f8w94y9NpM38r6ArJ8OIqYJY2xzuLnqWk21/g5x:fwRTcW6ArJ8zqYenqWkR5x

Score
8/10
aspackv2bootkitpersistence

Malware Config

Targets

    • Target

      2ddcb51962bfd990f021e3a03347b363778daf20951a14667ec658ef013bbaa5

    • Size

      540KB

    • MD5

      466606b22ec6b4d8ddc0916cdd1b7fcb

    • SHA1

      9e5180f41d226abb2f9f4f05abd39b89ea1531b9

    • SHA256

      2ddcb51962bfd990f021e3a03347b363778daf20951a14667ec658ef013bbaa5

    • SHA512

      2ad23c61d8f035f00dbf205530cdd9de1b183045d6717e9bc7f8e1441ba0f40ffd67edd9f50bcaac06e55b557c0fbae77c04db8039fc7ee854a72513dbf02291

    • SSDEEP

      12288:+f8w94y9NpM38r6ArJ8OIqYJY2xzuLnqWk21/g5x:fwRTcW6ArJ8zqYenqWkR5x

    Score
    8/10
    aspackv2bootkitpersistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks