Overview

overview

7

Static

static

7

32a23c3c9e...a2.exe

windows7-x64

7

32a23c3c9e...a2.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32a23c3c9e4b4e5abf1d78e4939c7b9f7c7956cc382e18381284f2558e023ea2

  • Size

    600KB

  • Sample

    240709-zjcjfavdkj

  • MD5

    e104123267c6e51e82e3a80639226e6f

  • SHA1

    7cc90fce3cc9907f24aadcb6dbde74ac9e05ecd5

  • SHA256

    32a23c3c9e4b4e5abf1d78e4939c7b9f7c7956cc382e18381284f2558e023ea2

  • SHA512

    03584f4713d037eba532fa8dd27deaa143d7d9b1afc9ab4a028d4ac7ee27e77e3891e2556bba837c143fc1e868360cc3fa35dfd3f87f36ce4c5720658b5196cb

  • SSDEEP

    12288:yPYmIjE7g8bP3nCeNr3CWV7q9zGImAjJdcH4j3ttzFdVCLNSfHoS:yN7g8OC1V7uNRjr4CFTl

Score
7/10
aspackv2persistencespywarestealer

Malware Config

Targets

    • Target

      32a23c3c9e4b4e5abf1d78e4939c7b9f7c7956cc382e18381284f2558e023ea2

    • Size

      600KB

    • MD5

      e104123267c6e51e82e3a80639226e6f

    • SHA1

      7cc90fce3cc9907f24aadcb6dbde74ac9e05ecd5

    • SHA256

      32a23c3c9e4b4e5abf1d78e4939c7b9f7c7956cc382e18381284f2558e023ea2

    • SHA512

      03584f4713d037eba532fa8dd27deaa143d7d9b1afc9ab4a028d4ac7ee27e77e3891e2556bba837c143fc1e868360cc3fa35dfd3f87f36ce4c5720658b5196cb

    • SSDEEP

      12288:yPYmIjE7g8bP3nCeNr3CWV7q9zGImAjJdcH4j3ttzFdVCLNSfHoS:yN7g8OC1V7uNRjr4CFTl

    Score
    7/10
    aspackv2persistencespywarestealer

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks