Overview

overview

7

Static

static

1

lqDlnfqxrSGluJIMPr.7z

windows11-21h2-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lqDlnfqxrSGluJIMPr.7z

  • Size

    1279.7MB

  • Sample

    240531-yg5lrsba5y

  • MD5

    e6170e131bf6ded9d3400cace0bbedf6

  • SHA1

    30b5766654c618dc65fe4eef0872162ace3ac268

  • SHA256

    a96016b154c00de4f7fcbe3c8627745e29c86a950bd8d2a1286d1fc2da594738

  • SHA512

    6a7e429b704cef2fafa078cc56c6fa6a75dbd0f2d760dd51d731bfe35d57d9de2377d5dbb1b8b30cd5397dbcd1dddae6ef33478b5a5f7541066811071f48d796

  • SSDEEP

    25165824:NoeXQa8Xcwyo+GqYj/HPWgLIVq8T6IXBjuNYWe8pVSIRXk58:NnXvYpfPkU8T64Bj0XAM058

Score
7/10
aspackv2discoverypersistenceupx

Malware Config

Targets

    • Target

      lqDlnfqxrSGluJIMPr.7z

    • Size

      1279.7MB

    • MD5

      e6170e131bf6ded9d3400cace0bbedf6

    • SHA1

      30b5766654c618dc65fe4eef0872162ace3ac268

    • SHA256

      a96016b154c00de4f7fcbe3c8627745e29c86a950bd8d2a1286d1fc2da594738

    • SHA512

      6a7e429b704cef2fafa078cc56c6fa6a75dbd0f2d760dd51d731bfe35d57d9de2377d5dbb1b8b30cd5397dbcd1dddae6ef33478b5a5f7541066811071f48d796

    • SSDEEP

      25165824:NoeXQa8Xcwyo+GqYj/HPWgLIVq8T6IXBjuNYWe8pVSIRXk58:NnXvYpfPkU8T64Bj0XAM058

    Score
    7/10
    aspackv2discoverypersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks