Overview

overview

10

Static

static

7

24a00c04e1...JC.exe

windows7-x64

10

24a00c04e1...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    24a00c04e11bff72a77b2c6f9fede0f3_magniber_surtr_JC.exe

  • Size

    6.6MB

  • Sample

    230818-qb2zpahf75

  • MD5

    24a00c04e11bff72a77b2c6f9fede0f3

  • SHA1

    8d734a804ab13c22510d242e5d819e2f76f65195

  • SHA256

    5ea6854a18a0a2e0951ff1a5d0bfddc80c4b0937da796bf6497706cf64e209d1

  • SHA512

    54d4acf286656b90b229b07a2a97332472a40d4dfb768dd42e18d4bd33adfcccb70db5bddbfd1031c042f1536db278ec4f3041ee20122a307325e65c612bb76f

  • SSDEEP

    49152:qwi0L0qa/iwi0L0qa/qB8NIMI8Sfpwotkzaxc1OGz8e:1i0ci0oIMzKpXOMGQe

Score
10/10
aspackv2persistence

Malware Config

Targets

    • Target

      24a00c04e11bff72a77b2c6f9fede0f3_magniber_surtr_JC.exe

    • Size

      6.6MB

    • MD5

      24a00c04e11bff72a77b2c6f9fede0f3

    • SHA1

      8d734a804ab13c22510d242e5d819e2f76f65195

    • SHA256

      5ea6854a18a0a2e0951ff1a5d0bfddc80c4b0937da796bf6497706cf64e209d1

    • SHA512

      54d4acf286656b90b229b07a2a97332472a40d4dfb768dd42e18d4bd33adfcccb70db5bddbfd1031c042f1536db278ec4f3041ee20122a307325e65c612bb76f

    • SSDEEP

      49152:qwi0L0qa/iwi0L0qa/qB8NIMI8Sfpwotkzaxc1OGz8e:1i0ci0oIMzKpXOMGQe

    Score
    10/10
    aspackv2persistence

    • Modifies WinLogon for persistence

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks