Overview

overview

8

Static

static

7

8ff9f4513a...6c.exe

windows7-x64

8

8ff9f4513a...6c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ff9f4513a27aac296994173104350fbdbc97d41cafd3afd37a2b09f69e5856c

  • Size

    513KB

  • Sample

    230608-yc8smaaf2y

  • MD5

    6629289fd2abf1c30a16fb9578ff4e08

  • SHA1

    1bd30832f866299027722104c6a92f8ccca594f9

  • SHA256

    8ff9f4513a27aac296994173104350fbdbc97d41cafd3afd37a2b09f69e5856c

  • SHA512

    41920d19d6791b88f06fd8e57e38365c3bcc318fd5f4e4411a76318ad3fbca4cbcb8854ccd9526f2c4c00899c03eddb955ebd886b084bb11b1f13b7533842c3d

  • SSDEEP

    12288:M7y5t7wPDi5ttUT18OB2AM3zX1Ke9y0p/wgwP3QJ1:M7Kt7wPDGkJf2Amge9f9wT4J1

Score
8/10
aspackv2upx

Malware Config

Targets

    • Target

      8ff9f4513a27aac296994173104350fbdbc97d41cafd3afd37a2b09f69e5856c

    • Size

      513KB

    • MD5

      6629289fd2abf1c30a16fb9578ff4e08

    • SHA1

      1bd30832f866299027722104c6a92f8ccca594f9

    • SHA256

      8ff9f4513a27aac296994173104350fbdbc97d41cafd3afd37a2b09f69e5856c

    • SHA512

      41920d19d6791b88f06fd8e57e38365c3bcc318fd5f4e4411a76318ad3fbca4cbcb8854ccd9526f2c4c00899c03eddb955ebd886b084bb11b1f13b7533842c3d

    • SSDEEP

      12288:M7y5t7wPDi5ttUT18OB2AM3zX1Ke9y0p/wgwP3QJ1:M7Kt7wPDGkJf2Amge9f9wT4J1

    Score
    8/10
    aspackv2upx

    • Downloads MZ/PE file

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks