Overview

overview

8

Static

static

f5d4f4301b...6f.exe

windows7-x64

8

f5d4f4301b...6f.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5d4f4301bf7b94f80ac359d5f25942414fe018c245df71d7c72d55e1043bc6f

  • Size

    394KB

  • Sample

    221206-zj3evsef91

  • MD5

    c3e196729803e6e30962b946d32c22ed

  • SHA1

    6bd1e763006a42d7679530c30acc3c5248d1dbff

  • SHA256

    f5d4f4301bf7b94f80ac359d5f25942414fe018c245df71d7c72d55e1043bc6f

  • SHA512

    d4173c34c1cc54d1920a1087a50c3bb579ffee762523b2e1f718ac0325ff804027a0c00676ed384aef76a6119287fd75fc5b19cec5380d298c722f6dfcbe594c

  • SSDEEP

    12288:6+g+HPUZHa8WU2aPIBMFrHgnUS2kTzDsA/Gtey:6J+vsHZiaeMVgT2KQA/Gt7

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      f5d4f4301bf7b94f80ac359d5f25942414fe018c245df71d7c72d55e1043bc6f

    • Size

      394KB

    • MD5

      c3e196729803e6e30962b946d32c22ed

    • SHA1

      6bd1e763006a42d7679530c30acc3c5248d1dbff

    • SHA256

      f5d4f4301bf7b94f80ac359d5f25942414fe018c245df71d7c72d55e1043bc6f

    • SHA512

      d4173c34c1cc54d1920a1087a50c3bb579ffee762523b2e1f718ac0325ff804027a0c00676ed384aef76a6119287fd75fc5b19cec5380d298c722f6dfcbe594c

    • SSDEEP

      12288:6+g+HPUZHa8WU2aPIBMFrHgnUS2kTzDsA/Gtey:6J+vsHZiaeMVgT2KQA/Gt7

    Score
    8/10
    aspackv2persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks