Overview

overview

8

Static

static

350300ffe6...fb.exe

windows7-x64

8

350300ffe6...fb.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    350300ffe615597412347c3b391fe0a5cfa2ffe734603347415d43fdb64141fb

  • Size

    2.9MB

  • Sample

    221206-1wkk9aba9v

  • MD5

    55a2d8a1767338017b9e5e2348288316

  • SHA1

    3d2d027befcec21805603da95ade28f28b9f8f79

  • SHA256

    350300ffe615597412347c3b391fe0a5cfa2ffe734603347415d43fdb64141fb

  • SHA512

    18941b1d98499e59ecf93511c4fb7379015234ed20ab5f874caf55f8f959b9efa671f4eb94759af78a7e331d7406fab530a023a12b58f0f335e81c6937211a44

  • SSDEEP

    49152:0g4T25CimxgjsZCEAiYmx7LbYVtwN5ARmZcLP2Slk4HbHGlEdLsdmagf:0f1imyCpxTmtuKoxSS4q+VJagf

Score
8/10
aspackv2bootkitpersistence

Malware Config

Targets

    • Target

      350300ffe615597412347c3b391fe0a5cfa2ffe734603347415d43fdb64141fb

    • Size

      2.9MB

    • MD5

      55a2d8a1767338017b9e5e2348288316

    • SHA1

      3d2d027befcec21805603da95ade28f28b9f8f79

    • SHA256

      350300ffe615597412347c3b391fe0a5cfa2ffe734603347415d43fdb64141fb

    • SHA512

      18941b1d98499e59ecf93511c4fb7379015234ed20ab5f874caf55f8f959b9efa671f4eb94759af78a7e331d7406fab530a023a12b58f0f335e81c6937211a44

    • SSDEEP

      49152:0g4T25CimxgjsZCEAiYmx7LbYVtwN5ARmZcLP2Slk4HbHGlEdLsdmagf:0f1imyCpxTmtuKoxSS4q+VJagf

    Score
    8/10
    aspackv2bootkitpersistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks