7d046f476f2cd4f5a0d7a549a9d4587b06d9e6e8769eddffa137246a5e780270 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d6e268dbe830fa1c0ec5b306997a67f
Size

199KB
Sample

231225-hvc6nsagh5
MD5

0d6e268dbe830fa1c0ec5b306997a67f
SHA1

bca91b23fcad1471cc16e677886818e9909af8c0
SHA256

7d046f476f2cd4f5a0d7a549a9d4587b06d9e6e8769eddffa137246a5e780270
SHA512

3d8a7650e093d3fff9c5670d640e662ea517f4eb28296ece8e9f0605da3695eebae98c7e1c5d976db9e5fd31981d49fc225d1bfe5371014af68e846cbb352715
SSDEEP

6144:5ZuuObR8sVImcyYC5JNb6L9HYDIoWZTDlJQU:WV+mzBwLvV

Score

7^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  0d6e268dbe830fa1c0ec5b306997a67f
- Size
  
  199KB
- MD5
  
  0d6e268dbe830fa1c0ec5b306997a67f
- SHA1
  
  bca91b23fcad1471cc16e677886818e9909af8c0
- SHA256
  
  7d046f476f2cd4f5a0d7a549a9d4587b06d9e6e8769eddffa137246a5e780270
- SHA512
  
  3d8a7650e093d3fff9c5670d640e662ea517f4eb28296ece8e9f0605da3695eebae98c7e1c5d976db9e5fd31981d49fc225d1bfe5371014af68e846cbb352715
- SSDEEP
  
  6144:5ZuuObR8sVImcyYC5JNb6L9HYDIoWZTDlJQU:WV+mzBwLvV
Score

7^/10

aspackv2 persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistence

behavioral2

aspackv2persistence