bfb6533e27dd808db01dba04064a2b776430592597fe1ca77ade9d345b5ab961 | Triage

Sharing

General

Target

bfb6533e27dd808db01dba04064a2b776430592597fe1ca77ade9d345b5ab961N
Size

191KB
Sample

241004-pmp9layalc
MD5

9af890a0360aaa76f01e401bb10f4fc0
SHA1

8a47ee433da5a8ae1265620f5024622e02134fbd
SHA256

bfb6533e27dd808db01dba04064a2b776430592597fe1ca77ade9d345b5ab961
SHA512

1473e230c275c3afbac437f3bbb0c5c817747553b6e3bda3377a3248bb3370c223a164dc77736adccae9cf86669bc12c660f14f1113250a8f5c654e9621234af
SSDEEP

3072:rYubs4vIPfIOKyCRfyJiJJMXybJg30TZZ+MbpqdNjfBDckH8sbigzwQjoy:Euk6fK6tixMbwNL+kDrt

Score

8^/10

aspackv2 discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  bfb6533e27dd808db01dba04064a2b776430592597fe1ca77ade9d345b5ab961N
- Size
  
  191KB
- MD5
  
  9af890a0360aaa76f01e401bb10f4fc0
- SHA1
  
  8a47ee433da5a8ae1265620f5024622e02134fbd
- SHA256
  
  bfb6533e27dd808db01dba04064a2b776430592597fe1ca77ade9d345b5ab961
- SHA512
  
  1473e230c275c3afbac437f3bbb0c5c817747553b6e3bda3377a3248bb3370c223a164dc77736adccae9cf86669bc12c660f14f1113250a8f5c654e9621234af
- SSDEEP
  
  3072:rYubs4vIPfIOKyCRfyJiJJMXybJg30TZZ+MbpqdNjfBDckH8sbigzwQjoy:Euk6fK6tixMbwNL+kDrt
Score

8^/10

aspackv2 discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2discoverypersistenceprivilege_escalation

behavioral2

aspackv2discoverypersistenceprivilege_escalation