Overview

overview

8

Static

static

3

be0b3ba988...65.exe

windows7-x64

8

be0b3ba988...65.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be0b3ba988a20d55babdede4da4d4665

  • Size

    268KB

  • Sample

    240310-jg24bafh6w

  • MD5

    be0b3ba988a20d55babdede4da4d4665

  • SHA1

    0012b6e57c3e25b24510d2e853700023886688f0

  • SHA256

    3f3dba748fdbf02d0b8eb7d91ac1d6290bb5deeb1aafff5ac0dd93fbee1a8a92

  • SHA512

    a94106a050baccab6fe282e0182d68494ad589703b6243983b4f82bb31f575041e827c8b3f36526e478c95b2563c5daef8d06908339beb98e4ae4b93b82d8cc9

  • SSDEEP

    6144:YZg95gX629XfrhgkhX3EP+/LMdhX3EP+/LMwasL9TM9u:T9L29vP9TW9T/a8TAu

Score
8/10
aspackv2persistenceupx

Malware Config

Targets

    • Target

      be0b3ba988a20d55babdede4da4d4665

    • Size

      268KB

    • MD5

      be0b3ba988a20d55babdede4da4d4665

    • SHA1

      0012b6e57c3e25b24510d2e853700023886688f0

    • SHA256

      3f3dba748fdbf02d0b8eb7d91ac1d6290bb5deeb1aafff5ac0dd93fbee1a8a92

    • SHA512

      a94106a050baccab6fe282e0182d68494ad589703b6243983b4f82bb31f575041e827c8b3f36526e478c95b2563c5daef8d06908339beb98e4ae4b93b82d8cc9

    • SSDEEP

      6144:YZg95gX629XfrhgkhX3EP+/LMdhX3EP+/LMwasL9TM9u:T9L29vP9TW9T/a8TAu

    Score
    8/10
    aspackv2persistenceupx

    • Sets DLL path for service in the registry

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks