Overview

overview

9

Static

static

3

2024-05-25...mi.exe

windows7-x64

9

2024-05-25...mi.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-25_1ae4c0a29fbead545123b54448c27745_bkransomware_wapomi

  • Size

    215KB

  • Sample

    240525-twjkmaah49

  • MD5

    1ae4c0a29fbead545123b54448c27745

  • SHA1

    340e9e2f0543e2dd4c6b9354324517da55cad69b

  • SHA256

    f5a1207417c66db424cba3ae46de4914fef8075c48893812ad13dd1b734e3d73

  • SHA512

    578ced1c9e18f2c757e5b1a9497939929cb8b9b6f4cce4babf7b348886972cbc4d796f7cbb8eb1372429c74cee20fe924631bb16eefc28f2da41bd9a0ef0da83

  • SSDEEP

    3072:J666SmGgfYMSLpt690G4EHI8FeqvrvuSUdyfQHoAb3MVD+Q3KUGCH:J2SSI60GhHvjv1Q83Kp

Score
9/10
aspackv2

Malware Config

Targets

    • Target

      2024-05-25_1ae4c0a29fbead545123b54448c27745_bkransomware_wapomi

    • Size

      215KB

    • MD5

      1ae4c0a29fbead545123b54448c27745

    • SHA1

      340e9e2f0543e2dd4c6b9354324517da55cad69b

    • SHA256

      f5a1207417c66db424cba3ae46de4914fef8075c48893812ad13dd1b734e3d73

    • SHA512

      578ced1c9e18f2c757e5b1a9497939929cb8b9b6f4cce4babf7b348886972cbc4d796f7cbb8eb1372429c74cee20fe924631bb16eefc28f2da41bd9a0ef0da83

    • SSDEEP

      3072:J666SmGgfYMSLpt690G4EHI8FeqvrvuSUdyfQHoAb3MVD+Q3KUGCH:J2SSI60GhHvjv1Q83Kp

    Score
    9/10
    aspackv2

    • Detects executables packed with ASPack

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks