Overview

overview

7

Static

static

7

a_friend.exe

windows7-x64

1

a_friend.exe

windows10-2004-x64

1

csrss.exe

windows7-x64

6

csrss.exe

windows10-2004-x64

6

instsrv.exe

windows7-x64

1

instsrv.exe

windows10-2004-x64

1

script.ps1

windows7-x64

1

script.ps1

windows10-2004-x64

1

sup.exe

windows7-x64

1

sup.exe

windows10-2004-x64

1

svchost.exe

windows7-x64

1

svchost.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    45147b4f15914be56d76d40bfc59881c

  • Size

    1.0MB

  • MD5

    45147b4f15914be56d76d40bfc59881c

  • SHA1

    e185c4d10ca800b75214b53e392ab25e10374aa5

  • SHA256

    26c03f72a3321fb103647ee6bc0e5260207a3cfacc888fa65525b4035b235fd1

  • SHA512

    bf321ed48fad70e6a00a6a95ad113184371bf368a422bf596f67c5ae1eb8b4de6154b6c6507f46ef9c41de47773c362d3ebe1dfad5667eb63bfb851cb50ba457

  • SSDEEP

    24576:o/S74MvT1p9UuT8u5dVlO1LtGl1GEt3G3:o/W4op9Iu5dVY1k1GES

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 45147b4f15914be56d76d40bfc59881c
    .rar
  • Desktop.ini
  • a.reg
  • a_friend.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • aliases.ini
  • control.ini
  • csrss.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • fullname.txt
  • instsrv.exe
    .exe windows:5 windows x86 arch:x86

    53d338fb5ceeb033459bc873d466d86d


    Headers

    Imports

    Sections

  • mirc.ico
  • mirc.ini
  • popups.txt
  • remote.ini
  • script.ini
    .ps1
  • servers.ini
  • sup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • svchost.exe
    .exe windows:5 windows x86 arch:x86

    42cccb59fb52078015be74288575c424


    Headers

    Imports

    Sections

  • users.ini