Overview

overview

8

Static

static

3

66f761a75d...06.exe

windows7-x64

8

66f761a75d...06.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66f761a75d498456e96c3c0a3cdba106

  • Size

    64KB

  • Sample

    240119-hlps4sggbk

  • MD5

    66f761a75d498456e96c3c0a3cdba106

  • SHA1

    5cf496f8f9ec8028d91fa9a4588d97d5af896ad6

  • SHA256

    e26bdc357e14d5ed29735048c160a26a80ab97693e513ffba66b1e1f5358534d

  • SHA512

    c1405fa82317077eddab6960fdd8e8acaf47e083df6f402ce31b589b5c7b4515e46831f5ef2e1709dde6e7a4783a378f06f0ac8b1bda11044cefbe7575d3ebbd

  • SSDEEP

    1536:DcPLXFcW9IZLVof8/zHx77SiKhc0dxdUl0K6ze:DcPLXFc3xvOj1UyK6ze

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      66f761a75d498456e96c3c0a3cdba106

    • Size

      64KB

    • MD5

      66f761a75d498456e96c3c0a3cdba106

    • SHA1

      5cf496f8f9ec8028d91fa9a4588d97d5af896ad6

    • SHA256

      e26bdc357e14d5ed29735048c160a26a80ab97693e513ffba66b1e1f5358534d

    • SHA512

      c1405fa82317077eddab6960fdd8e8acaf47e083df6f402ce31b589b5c7b4515e46831f5ef2e1709dde6e7a4783a378f06f0ac8b1bda11044cefbe7575d3ebbd

    • SSDEEP

      1536:DcPLXFcW9IZLVof8/zHx77SiKhc0dxdUl0K6ze:DcPLXFc3xvOj1UyK6ze

    Score
    8/10
    aspackv2persistence

    • Modifies Installed Components in the registry

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks