Overview

overview

8

Static

static

a70effbdf4...d0.exe

windows7-x64

8

a70effbdf4...d0.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a70effbdf4c33db9dd9f7dea494582504a4f2115b2c3375d6a2a6024ee50c4d0

  • Size

    1.0MB

  • Sample

    221206-acj79sac86

  • MD5

    3a75bd0ce69360fffe01f2ff8b80b986

  • SHA1

    0c88a7944172dd2f1fc18f7a1f58fd1a1892b920

  • SHA256

    a70effbdf4c33db9dd9f7dea494582504a4f2115b2c3375d6a2a6024ee50c4d0

  • SHA512

    e9c5d63edc16f4d9f743d3b88dcba88a4447851786a4fab3c7f78ba9583726d11d3cd15df4e01b6751015461dc8360af1d10f1c0f2b73c1b1f1e5c2f50f2c7bc

  • SSDEEP

    24576:n4eGFfwoWsT6AA1dPHrgVrQSv0ndFre4OUk5U3kvtva5idA:nhGwxsT6A48pQ5dFS4O/ab

Score
8/10
adwareaspackv2persistencestealer

Malware Config

Targets

    • Target

      a70effbdf4c33db9dd9f7dea494582504a4f2115b2c3375d6a2a6024ee50c4d0

    • Size

      1.0MB

    • MD5

      3a75bd0ce69360fffe01f2ff8b80b986

    • SHA1

      0c88a7944172dd2f1fc18f7a1f58fd1a1892b920

    • SHA256

      a70effbdf4c33db9dd9f7dea494582504a4f2115b2c3375d6a2a6024ee50c4d0

    • SHA512

      e9c5d63edc16f4d9f743d3b88dcba88a4447851786a4fab3c7f78ba9583726d11d3cd15df4e01b6751015461dc8360af1d10f1c0f2b73c1b1f1e5c2f50f2c7bc

    • SSDEEP

      24576:n4eGFfwoWsT6AA1dPHrgVrQSv0ndFre4OUk5U3kvtva5idA:nhGwxsT6A48pQ5dFS4O/ab

    Score
    8/10
    adwareaspackv2persistencestealer

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks