Overview

overview

10

Static

static

8

fd950dee8c...fe.exe

windows7-x64

10

fd950dee8c...fe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd950dee8c3570f5623ed3a651bfeb1ce2229955239851c04c1c6075f0d4a7fe

  • Size

    184KB

  • Sample

    221205-1csshshd75

  • MD5

    2db206a86630d3bea3297ce6f344703d

  • SHA1

    f9cbb931ea72f1029d0902c75653d970ab1b14e0

  • SHA256

    fd950dee8c3570f5623ed3a651bfeb1ce2229955239851c04c1c6075f0d4a7fe

  • SHA512

    078b1f128b9a59f0be9e2c0fbee002c7ea58d02fb6bf32f7382abc26f281ce519881efe94eb62f1681ea02629a8997fa3370bdea135e49d7b92c9b4154997ef5

  • SSDEEP

    3072:bTl6dciOrTFWCZttR8kMHfp76OiKABadqoKOqm0CpWPGhGdeadgtdKVnoad4pDXD:nlJUWR8kMHd6rBadqohqOhGdItdKR5KT

Score
10/10
aspackv2evasionpersistence

Malware Config

Targets

    • Target

      fd950dee8c3570f5623ed3a651bfeb1ce2229955239851c04c1c6075f0d4a7fe

    • Size

      184KB

    • MD5

      2db206a86630d3bea3297ce6f344703d

    • SHA1

      f9cbb931ea72f1029d0902c75653d970ab1b14e0

    • SHA256

      fd950dee8c3570f5623ed3a651bfeb1ce2229955239851c04c1c6075f0d4a7fe

    • SHA512

      078b1f128b9a59f0be9e2c0fbee002c7ea58d02fb6bf32f7382abc26f281ce519881efe94eb62f1681ea02629a8997fa3370bdea135e49d7b92c9b4154997ef5

    • SSDEEP

      3072:bTl6dciOrTFWCZttR8kMHfp76OiKABadqoKOqm0CpWPGhGdeadgtdKVnoad4pDXD:nlJUWR8kMHd6rBadqohqOhGdItdKR5KT

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks