54adb1549616d0c11a9b6aa9c3a7363e8d65ca00261332db793dbb24d59ce8e2 | Triage

Submit
Reports

Overview

overview

8

Static

static

54adb15496...e2.exe

windows7-x64

8

54adb15496...e2.exe

windows10-2004-x64

8

Sharing

General

Target

54adb1549616d0c11a9b6aa9c3a7363e8d65ca00261332db793dbb24d59ce8e2
Size

1.6MB
Sample

221126-gjckbsfc82
MD5

f84e4dd9cddd7925078a10cae8009c31
SHA1

97a94ed43ec689934fe7af84f9570194570fc781
SHA256

54adb1549616d0c11a9b6aa9c3a7363e8d65ca00261332db793dbb24d59ce8e2
SHA512

3e0d7c91b144ef52ad988e53a80a1b4457d9b77e5350341f4706b2707abc5b416aa761d1c35fdd4c13c5b5bdc935670e2ee957fe62c296c3d6dab8876a2c513b
SSDEEP

24576:HNw52RX3IGgsPJnOK5BF6t1poyRBKx3htCYpJ4+I0z1N2V2:HDBhrFulixtC24+RU2

Score

8^/10

aspackv2 persistence vmprotect

Static task

static1

Behavioral task

behavioral1

Sample

54adb1549616d0c11a9b6aa9c3a7363e8d65ca00261332db793dbb24d59ce8e2.exe

Resource

win7-20220901-en

aspackv2 persistence vmprotect

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

54adb1549616d0c11a9b6aa9c3a7363e8d65ca00261332db793dbb24d59ce8e2.exe

Resource

win10v2004-20220901-en

aspackv2 persistence vmprotect

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  54adb1549616d0c11a9b6aa9c3a7363e8d65ca00261332db793dbb24d59ce8e2
- Size
  
  1.6MB
- MD5
  
  f84e4dd9cddd7925078a10cae8009c31
- SHA1
  
  97a94ed43ec689934fe7af84f9570194570fc781
- SHA256
  
  54adb1549616d0c11a9b6aa9c3a7363e8d65ca00261332db793dbb24d59ce8e2
- SHA512
  
  3e0d7c91b144ef52ad988e53a80a1b4457d9b77e5350341f4706b2707abc5b416aa761d1c35fdd4c13c5b5bdc935670e2ee957fe62c296c3d6dab8876a2c513b
- SSDEEP
  
  24576:HNw52RX3IGgsPJnOK5BF6t1poyRBKx3htCYpJ4+I0z1N2V2:HDBhrFulixtC24+RU2
Score

8^/10

aspackv2 persistence vmprotect
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistencevmprotect

behavioral2

aspackv2persistencevmprotect

© 2018-2024

Terms | Privacy