b3f098d7108cb12704938864b6375b27395b54ab92af9aa5dd3334442be490bd | Triage

Sharing

General

Target

9a217cf11b0abe9da14ce4ffea4233a7.exe
Size

251KB
Sample

231231-qrcpqsech5
MD5

9a217cf11b0abe9da14ce4ffea4233a7
SHA1

d8b98ae3ff4250d73ad144dbf55afe049d440fc8
SHA256

b3f098d7108cb12704938864b6375b27395b54ab92af9aa5dd3334442be490bd
SHA512

c646388b8ecfcaf40f63b23b83d79d14be5f6dfaece67d47cefcea505c8fe25f8a1c82a8c0fb8f7b86a6b75cc81d2b6c5d6a087da8ee4c644763ce35d3ef94e3
SSDEEP

6144:qb9iXkv6DOSCyJFDVhtc9HZlXqBLLXP1MxH:qb9EkKFFXtIHCje

Score

7^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  9a217cf11b0abe9da14ce4ffea4233a7.exe
- Size
  
  251KB
- MD5
  
  9a217cf11b0abe9da14ce4ffea4233a7
- SHA1
  
  d8b98ae3ff4250d73ad144dbf55afe049d440fc8
- SHA256
  
  b3f098d7108cb12704938864b6375b27395b54ab92af9aa5dd3334442be490bd
- SHA512
  
  c646388b8ecfcaf40f63b23b83d79d14be5f6dfaece67d47cefcea505c8fe25f8a1c82a8c0fb8f7b86a6b75cc81d2b6c5d6a087da8ee4c644763ce35d3ef94e3
- SSDEEP
  
  6144:qb9iXkv6DOSCyJFDVhtc9HZlXqBLLXP1MxH:qb9EkKFFXtIHCje
Score

7^/10

aspackv2 persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistence

behavioral2

aspackv2persistence