e3c6cdda8ccd4d96f15cf840b366056f014e72870d90f852c8eb796791749d91 | Triage

Sharing

General

Target

3ce4320e6e8af9176d71e8c4295e049e
Size

25KB
Sample

240101-pyk41sdfe7
MD5

3ce4320e6e8af9176d71e8c4295e049e
SHA1

33a7dd5283e7abb56f35e53e5811ad255c17a6f6
SHA256

e3c6cdda8ccd4d96f15cf840b366056f014e72870d90f852c8eb796791749d91
SHA512

a6d9f90509513bcd80b4a12a11d421c301b3330a9a0d84a7695bca3e1cc38d21831ffa55da8386636e24d2fb02229202069f6e1b1a721c29a591bc1249ff29b1
SSDEEP

384:0hJV59Xn2JJkJOYaVX0MWJukFtrzWLvu87TtWAU5EAxfr6+e9Pfqbn1RW/W:0vcJAMG5z8u8nti5XxOha5

Score

8^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  3ce4320e6e8af9176d71e8c4295e049e
- Size
  
  25KB
- MD5
  
  3ce4320e6e8af9176d71e8c4295e049e
- SHA1
  
  33a7dd5283e7abb56f35e53e5811ad255c17a6f6
- SHA256
  
  e3c6cdda8ccd4d96f15cf840b366056f014e72870d90f852c8eb796791749d91
- SHA512
  
  a6d9f90509513bcd80b4a12a11d421c301b3330a9a0d84a7695bca3e1cc38d21831ffa55da8386636e24d2fb02229202069f6e1b1a721c29a591bc1249ff29b1
- SSDEEP
  
  384:0hJV59Xn2JJkJOYaVX0MWJukFtrzWLvu87TtWAU5EAxfr6+e9Pfqbn1RW/W:0vcJAMG5z8u8nti5XxOha5
Score

8^/10

aspackv2 persistence
- Sets service image path in registry
  persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Deletes itself
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistence

behavioral2

aspackv2persistence