214a9410bf178c73ae74ba6b3545e93b5ba72129b35648ca6a12df953771df49 | Triage

Submit
Reports

Overview

overview

8

Static

static

1

214a9410bf...49.exe

windows7-x64

8

214a9410bf...49.exe

windows10-2004-x64

8

Sharing

General

Target

214a9410bf178c73ae74ba6b3545e93b5ba72129b35648ca6a12df953771df49
Size

522KB
Sample

221201-g19w6afb9s
MD5

438c93d25cdef9adaa10296fe697c810
SHA1

9327d0b4b8c6bb5ebd8a8c4579b8133506f17b7d
SHA256

214a9410bf178c73ae74ba6b3545e93b5ba72129b35648ca6a12df953771df49
SHA512

66ab8c7d998e604e1e3b3e50d2868b9e9846828d4ee7a123551790597209d1d44ac6606e07adccb3c6727411d360e33659756f389355b2ec4a7c28d2a8d5b634
SSDEEP

12288:wyTenvyXKY/bv7GcVxv1YIVdrpieBNdeAuPNCbJ:nTgv6KYrL1RNePNA

Score

8^/10

adware aspackv2 discovery stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

214a9410bf178c73ae74ba6b3545e93b5ba72129b35648ca6a12df953771df49.exe

Resource

win7-20220812-en

adware aspackv2 discovery stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

214a9410bf178c73ae74ba6b3545e93b5ba72129b35648ca6a12df953771df49.exe

Resource

win10v2004-20220812-en

adware aspackv2 discovery stealer

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  214a9410bf178c73ae74ba6b3545e93b5ba72129b35648ca6a12df953771df49
- Size
  
  522KB
- MD5
  
  438c93d25cdef9adaa10296fe697c810
- SHA1
  
  9327d0b4b8c6bb5ebd8a8c4579b8133506f17b7d
- SHA256
  
  214a9410bf178c73ae74ba6b3545e93b5ba72129b35648ca6a12df953771df49
- SHA512
  
  66ab8c7d998e604e1e3b3e50d2868b9e9846828d4ee7a123551790597209d1d44ac6606e07adccb3c6727411d360e33659756f389355b2ec4a7c28d2a8d5b634
- SSDEEP
  
  12288:wyTenvyXKY/bv7GcVxv1YIVdrpieBNdeAuPNCbJ:nTgv6KYrL1RNePNA
Score

8^/10

adware aspackv2 discovery stealer
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwareaspackv2discoverystealer

behavioral2

adwareaspackv2discoverystealer

© 2018-2025

Terms | Privacy