e0a95ac99f393fd7815f43de65beaef59bacd5d6af1a394688ad88ec2984edfc

Target

gridIcon.1d8a85f3.svg
Size

293B
Sample

241001-vf6wnatgrb
MD5

1d8a85f34abd62b14d14839dfc8c61fc
SHA1

ce4656701f932004cb94519e610f888f8b22ccef
SHA256

e0a95ac99f393fd7815f43de65beaef59bacd5d6af1a394688ad88ec2984edfc
SHA512

b560c2023f0590c4da329c245ff1259a285fb969686a3c10861f3c829cd53f800f98c8768c4f6a8b6f08f9fa4d2a57472958765fd24aace6427e11824238a0a2

Score

8^/10

Malware Config

Targets

- Target
  
  gridIcon.1d8a85f3.svg
- Size
  
  293B
- MD5
  
  1d8a85f34abd62b14d14839dfc8c61fc
- SHA1
  
  ce4656701f932004cb94519e610f888f8b22ccef
- SHA256
  
  e0a95ac99f393fd7815f43de65beaef59bacd5d6af1a394688ad88ec2984edfc
- SHA512
  
  b560c2023f0590c4da329c245ff1259a285fb969686a3c10861f3c829cd53f800f98c8768c4f6a8b6f08f9fa4d2a57472958765fd24aace6427e11824238a0a2
Score

8^/10

aspackv2 discovery evasion upx
- Downloads MZ/PE file
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Legitimate hosting services abused for malware hosting/C2
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Sets file to hidden

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

Legitimate hosting services abused for malware hosting/C2

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2