c19b2dca3a31a7ac71dfca6929be31122383452120d42f03502613dfce714faf | Triage

Sharing

General

Target

1c5d3b71eeb848580811ef1686aced85_JC.exe
Size

3.6MB
Sample

231011-2t11wsaa51
MD5

1c5d3b71eeb848580811ef1686aced85
SHA1

8b5a7199ec75448026a865c0795462866816aed6
SHA256

c19b2dca3a31a7ac71dfca6929be31122383452120d42f03502613dfce714faf
SHA512

0e01011e51c20f6f467de945a3fb4326b72ff348a3aba9e0f0ad74c587297b304512cf3a3d1b9929daf68de64fd3f81984fd296f2576d5627b912e6c99fa3f10
SSDEEP

49152:3jMDkYOMwwnMb4PmyVZwnNTBkbtL2tLYcY/0KPzvoS7UKPzvoS7y:zxYOXwnS4rV6wV2Vhizwshzwsy

Score

7^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  1c5d3b71eeb848580811ef1686aced85_JC.exe
- Size
  
  3.6MB
- MD5
  
  1c5d3b71eeb848580811ef1686aced85
- SHA1
  
  8b5a7199ec75448026a865c0795462866816aed6
- SHA256
  
  c19b2dca3a31a7ac71dfca6929be31122383452120d42f03502613dfce714faf
- SHA512
  
  0e01011e51c20f6f467de945a3fb4326b72ff348a3aba9e0f0ad74c587297b304512cf3a3d1b9929daf68de64fd3f81984fd296f2576d5627b912e6c99fa3f10
- SSDEEP
  
  49152:3jMDkYOMwwnMb4PmyVZwnNTBkbtL2tLYcY/0KPzvoS7UKPzvoS7y:zxYOXwnS4rV6wV2Vhizwshzwsy
Score

7^/10

aspackv2 persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Adds Run key to start application
  persistence
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Replication Through Removable Media

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistence

behavioral2

aspackv2persistence