788a74a32dafd485cd44bdaf53bc2e30f59efaf1b4f5f178de605bb194d0cff0 | Triage

Sharing

General

Target

788a74a32dafd485cd44bdaf53bc2e30f59efaf1b4f5f178de605bb194d0cff0
Size

138KB
Sample

240723-268w9sxdrf
MD5

151bcf0a8f31d45e55a5dfdb4ed5c18d
SHA1

ac5d9feb3692254938c8f38d96bc774f399523bf
SHA256

788a74a32dafd485cd44bdaf53bc2e30f59efaf1b4f5f178de605bb194d0cff0
SHA512

dbe81a49d3498b0619e79ebee8f84b48eb1ba9be9648c00d17ea0df33257a9e8f3f724e02b775058b9c74ea1185c9f4166802dc4585ba326d929bdb9bc76d5cb
SSDEEP

3072:AE9ByF5wP7Ht99mbaa+vKAzWvSVJSwpi6Ds9/w:7907wTr9mea+i6WKQ2

Score

8^/10

aspackv2 discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  788a74a32dafd485cd44bdaf53bc2e30f59efaf1b4f5f178de605bb194d0cff0
- Size
  
  138KB
- MD5
  
  151bcf0a8f31d45e55a5dfdb4ed5c18d
- SHA1
  
  ac5d9feb3692254938c8f38d96bc774f399523bf
- SHA256
  
  788a74a32dafd485cd44bdaf53bc2e30f59efaf1b4f5f178de605bb194d0cff0
- SHA512
  
  dbe81a49d3498b0619e79ebee8f84b48eb1ba9be9648c00d17ea0df33257a9e8f3f724e02b775058b9c74ea1185c9f4166802dc4585ba326d929bdb9bc76d5cb
- SSDEEP
  
  3072:AE9ByF5wP7Ht99mbaa+vKAzWvSVJSwpi6Ds9/w:7907wTr9mea+i6WKQ2
Score

8^/10

aspackv2 discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2discoverypersistenceprivilege_escalation

behavioral2

aspackv2discoverypersistenceprivilege_escalation