5b6577fb1c73d98e93deda5776ce0756c4725a9867e5a92872ccdb5cd4d7e24a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb1f3cade3e39962079cdb053ba12960N.exe
Size

117KB
Sample

240906-g4tz4s1dlg
MD5

cb1f3cade3e39962079cdb053ba12960
SHA1

5f8e9df754f8ea8706ee85c0bd4afdfea99edf14
SHA256

5b6577fb1c73d98e93deda5776ce0756c4725a9867e5a92872ccdb5cd4d7e24a
SHA512

c06fc3fa1991de0278021dbfdf06ee1bd140a1f0d4769d24de5cd4e345e60848e6ab2acfbf9c44e08d05b5a33354e9ffe04635dac3927202cb10131f875cccc3
SSDEEP

1536:AnFBi+/CWleJEmnjI1qgkO1+LllRCGKSihdhq5fLOMK+uzLb0eiLY4HCtkWFnN2D:aviIZGEms1qE+XcJFq1XtlLY4HCBNJ

Score

7^/10

aspackv2 discovery persistence

Malware Config

Targets

- Target
  
  cb1f3cade3e39962079cdb053ba12960N.exe
- Size
  
  117KB
- MD5
  
  cb1f3cade3e39962079cdb053ba12960
- SHA1
  
  5f8e9df754f8ea8706ee85c0bd4afdfea99edf14
- SHA256
  
  5b6577fb1c73d98e93deda5776ce0756c4725a9867e5a92872ccdb5cd4d7e24a
- SHA512
  
  c06fc3fa1991de0278021dbfdf06ee1bd140a1f0d4769d24de5cd4e345e60848e6ab2acfbf9c44e08d05b5a33354e9ffe04635dac3927202cb10131f875cccc3
- SSDEEP
  
  1536:AnFBi+/CWleJEmnjI1qgkO1+LllRCGKSihdhq5fLOMK+uzLb0eiLY4HCtkWFnN2D:aviIZGEms1qE+XcJFq1XtlLY4HCBNJ
Score

7^/10

discovery aspackv2 persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

aspackv2discoverypersistence