Overview

overview

10

Static

static

7

20daa3e2d6...4e.exe

windows7-x64

10

20daa3e2d6...4e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    20daa3e2d623e949f58f030d86e0774e

  • Size

    414KB

  • Sample

    231230-31te3ahgep

  • MD5

    20daa3e2d623e949f58f030d86e0774e

  • SHA1

    03e6829ef53bb7d0c1e1b7b33d12d2a7f60b0d10

  • SHA256

    caa112327001a4c787fa4e758dc7cc9097941c8d1ffb5239d31817e2ed7089d1

  • SHA512

    d08ec049803cec60b0c577a5e4d6be2e31c67ef00d9911aa1c2b42db1b0a0016a3de76b2f3235f423b449bb075acb317ef7e647be098945b397ef854b66a0d82

  • SSDEEP

    12288:UP6ys+NgzZhkDjh6wTrrAYxaBNQJYW6fz0XlrtISE4Ls:ABNUfkTT3sBNQJYXz0XlrS/t

Score
10/10
aspackv2evasion

Malware Config

Targets

    • Target

      20daa3e2d623e949f58f030d86e0774e

    • Size

      414KB

    • MD5

      20daa3e2d623e949f58f030d86e0774e

    • SHA1

      03e6829ef53bb7d0c1e1b7b33d12d2a7f60b0d10

    • SHA256

      caa112327001a4c787fa4e758dc7cc9097941c8d1ffb5239d31817e2ed7089d1

    • SHA512

      d08ec049803cec60b0c577a5e4d6be2e31c67ef00d9911aa1c2b42db1b0a0016a3de76b2f3235f423b449bb075acb317ef7e647be098945b397ef854b66a0d82

    • SSDEEP

      12288:UP6ys+NgzZhkDjh6wTrrAYxaBNQJYW6fz0XlrtISE4Ls:ABNUfkTT3sBNQJYXz0XlrS/t

    Score
    10/10
    evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks