c77694a3dd8a8d96cc7a933fde0cf25de920823b11a4895aff15550aff5aa009 | Triage

Submit
Reports

Overview

overview

Static

static

8

c77694a3dd...09.exe

windows7-x64

c77694a3dd...09.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

c77694a3dd8a8d96cc7a933fde0cf25de920823b11a4895aff15550aff5aa009
Size

738KB
Sample

221203-m9zqfaeb47
MD5

829adbe8cc2c8649e681ef27caf9052c
SHA1

4767cfd92d2aea2e92dd4fa4277af4783088e09a
SHA256

c77694a3dd8a8d96cc7a933fde0cf25de920823b11a4895aff15550aff5aa009
SHA512

3af70668106db033c962acf98193f52523d58ab03a702cf15257c3c200ec59848fc3457056b3afc6d7fb739113afca4c66dbdb148e450174f833b505aafb3d9b
SSDEEP

12288:W3TdtLW5WIj1YSSdFx0vBSYvBSXyMzBUWb9lx/9AgHLo8OW+rB:ADsj1dEkB7BcJ9nPx/igrp+

Score

10^/10

aspackv2 evasion persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c77694a3dd8a8d96cc7a933fde0cf25de920823b11a4895aff15550aff5aa009.exe

Resource

win7-20220812-en

evasion persistence

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

c77694a3dd8a8d96cc7a933fde0cf25de920823b11a4895aff15550aff5aa009.exe

Resource

win10v2004-20221111-en

evasion persistence

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  c77694a3dd8a8d96cc7a933fde0cf25de920823b11a4895aff15550aff5aa009
- Size
  
  738KB
- MD5
  
  829adbe8cc2c8649e681ef27caf9052c
- SHA1
  
  4767cfd92d2aea2e92dd4fa4277af4783088e09a
- SHA256
  
  c77694a3dd8a8d96cc7a933fde0cf25de920823b11a4895aff15550aff5aa009
- SHA512
  
  3af70668106db033c962acf98193f52523d58ab03a702cf15257c3c200ec59848fc3457056b3afc6d7fb739113afca4c66dbdb148e450174f833b505aafb3d9b
- SSDEEP
  
  12288:W3TdtLW5WIj1YSSdFx0vBSYvBSXyMzBUWb9lx/9AgHLo8OW+rB:ADsj1dEkB7BcJ9nPx/igrp+
Score

10^/10

evasion persistence
- Modifies WinLogon for persistence
  persistence
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence

behavioral2

evasionpersistence

© 2018-2025

Terms | Privacy