Overview

overview

8

Static

static

1

main.py

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    main.py

  • Size

    6KB

  • Sample

    241121-p8ttxawrel

  • MD5

    05c4e53647399a18df9fe55e93929f0c

  • SHA1

    5968ed8aafb90c55cbf7e657766e2a9a77996517

  • SHA256

    45c402960509b98680afe64893c800b729f979cd7a0d072b3c561d7a0260aa60

  • SHA512

    6f038ce8401eff07cb5537898aa4f33c01be9c1cac59634c69195730db44f7a7480865796140b8b5c397b9054f79c23c581d0839e3daf742da2af2e175a05aac

  • SSDEEP

    96:MbXGWDiJEv/ZqNE1AqwUGCTR1mIL/83SuFT69qkdlxqot0qotEkr:IGGvxqGOqlpT3mIL/8CuFT69bmCkr

Score
8/10
aspackv2discovery

Malware Config

Targets

    • Target

      main.py

    • Size

      6KB

    • MD5

      05c4e53647399a18df9fe55e93929f0c

    • SHA1

      5968ed8aafb90c55cbf7e657766e2a9a77996517

    • SHA256

      45c402960509b98680afe64893c800b729f979cd7a0d072b3c561d7a0260aa60

    • SHA512

      6f038ce8401eff07cb5537898aa4f33c01be9c1cac59634c69195730db44f7a7480865796140b8b5c397b9054f79c23c581d0839e3daf742da2af2e175a05aac

    • SSDEEP

      96:MbXGWDiJEv/ZqNE1AqwUGCTR1mIL/83SuFT69qkdlxqot0qotEkr:IGGvxqGOqlpT3mIL/8CuFT69bmCkr

    Score
    8/10
    aspackv2discovery

    • Downloads MZ/PE file

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks