Overview

overview

10

Static

static

7

c202e75311...8d.exe

windows7-x64

10

c202e75311...8d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c202e75311c33915f8181069f9fc2a8d

  • Size

    489KB

  • Sample

    240312-aykqxsah31

  • MD5

    c202e75311c33915f8181069f9fc2a8d

  • SHA1

    660801392eff8c1946b60632e9a943682c1c1aec

  • SHA256

    bd9d33afe999c1444bb03943505de329bf7a8ff6ae4c81e63baec115cba9216c

  • SHA512

    39168c11f8d802c401209a4d3bca2ced8e2d6399d05d2be96490f63d64e353ac674dfd459dd44813123c9dced8631822ba23cc52ca8f6c31defc9a5be0b9ae44

  • SSDEEP

    12288:5MMpXKb0hNGh1kG0HWnALbSm8erQMm8erQYKmX1:5MMpXS0hN0V0HOm8eXm8e3KmF

Score
10/10
aspackv2persistenceransomware

Malware Config

Targets

    • Target

      c202e75311c33915f8181069f9fc2a8d

    • Size

      489KB

    • MD5

      c202e75311c33915f8181069f9fc2a8d

    • SHA1

      660801392eff8c1946b60632e9a943682c1c1aec

    • SHA256

      bd9d33afe999c1444bb03943505de329bf7a8ff6ae4c81e63baec115cba9216c

    • SHA512

      39168c11f8d802c401209a4d3bca2ced8e2d6399d05d2be96490f63d64e353ac674dfd459dd44813123c9dced8631822ba23cc52ca8f6c31defc9a5be0b9ae44

    • SSDEEP

      12288:5MMpXKb0hNGh1kG0HWnALbSm8erQMm8erQYKmX1:5MMpXS0hN0V0HOm8eXm8e3KmF

    Score
    10/10
    aspackv2persistenceransomware

    • Modifies WinLogon for persistence

      persistence

    • Renames multiple (91) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks