8984179fffdf01c4fb3a2a10dbb08406d635c78f5f15a2d4998c28ef2a8c1808 | Triage

Sharing

General

Target

8984179fffdf01c4fb3a2a10dbb08406d635c78f5f15a2d4998c28ef2a8c1808
Size

174KB
Sample

221203-ksrx6acf21
MD5

c913b1673a381e59e2bf720a4797e622
SHA1

1e791b7fe799466ac56ee9d387e39438384ce370
SHA256

8984179fffdf01c4fb3a2a10dbb08406d635c78f5f15a2d4998c28ef2a8c1808
SHA512

cb0b2d2ffcb2f6184ae4d7318a9a49f3b8d35cda2be6faf65e478b8fc63f46e5dfde6973b11308a32288a6d73f8692d50a0033a2e75895ec5cc563a38c0a9247
SSDEEP

3072:6L+TQIEJzM3dK9QUZhraguvSB7bNE++u864lv+JLbequPbPavIA7xd7:6q0/NQs/uvS1bN51osbhYbivIA7X

Score

8^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  8984179fffdf01c4fb3a2a10dbb08406d635c78f5f15a2d4998c28ef2a8c1808
- Size
  
  174KB
- MD5
  
  c913b1673a381e59e2bf720a4797e622
- SHA1
  
  1e791b7fe799466ac56ee9d387e39438384ce370
- SHA256
  
  8984179fffdf01c4fb3a2a10dbb08406d635c78f5f15a2d4998c28ef2a8c1808
- SHA512
  
  cb0b2d2ffcb2f6184ae4d7318a9a49f3b8d35cda2be6faf65e478b8fc63f46e5dfde6973b11308a32288a6d73f8692d50a0033a2e75895ec5cc563a38c0a9247
- SSDEEP
  
  3072:6L+TQIEJzM3dK9QUZhraguvSB7bNE++u864lv+JLbequPbPavIA7xd7:6q0/NQs/uvS1bN51osbhYbivIA7X
Score

8^/10

aspackv2 persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistence

behavioral2