General
- Target asp105.zip
- Size 5.1MB
- Sample260822-ymx4watvfs
- SHA256 27be1c3a203c2caecb7b239e789aebe2fd90c174a4ab19d7b81984d53ee4aa85
- MD5 26dcb25c5d7739266ce7beb65cc43d0e
- SHA1 4d602b128376011dd4a1a82fc74b5ae07b7325d6
- SHA512 ecce50f878ca9738546eb3a31359a9e55c5c61becfc3152b662153f2d9e206007c42da67d9110bcfb874e37a7bee9ca561b72a853473d8906abe31eba85397a0
- SSDEEP 98304:KLatnWNEaDcoj0bdgbgBPCO1oLEUMuQtU6BJjUS8XB1iL3N:PWTDmKbOCb6/X8/I
- TLSH T1B73633E6DC9EA4CDD31DC3F7A9B7021523D64AA8A06A8493392313C4E68D1C931BDF57
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
asp105.zip
Resource
win10ltsc2021-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
asp105.zip
Resource
win10v2004-20260513-en
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
Aster_patch1_05.exe
Resource
win10ltsc2021-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target asp105.zip
- Size 5.1MB
- SHA256 27be1c3a203c2caecb7b239e789aebe2fd90c174a4ab19d7b81984d53ee4aa85
- MD5 26dcb25c5d7739266ce7beb65cc43d0e
- SHA1 4d602b128376011dd4a1a82fc74b5ae07b7325d6
- SHA512 ecce50f878ca9738546eb3a31359a9e55c5c61becfc3152b662153f2d9e206007c42da67d9110bcfb874e37a7bee9ca561b72a853473d8906abe31eba85397a0
- SSDEEP 98304:KLatnWNEaDcoj0bdgbgBPCO1oLEUMuQtU6BJjUS8XB1iL3N:PWTDmKbOCb6/X8/I
- TLSH T1B73633E6DC9EA4CDD31DC3F7A9B7021523D64AA8A06A8493392313C4E68D1C931BDF57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Aster_patch1_05.exe
- Size 7.5MB
- SHA256 0eac2aab01330da5ff074de28db62f1591d32698546b95bc5715a03c94611930
- MD5 07a4d6caa927701a78d9aedec39edd59
- SHA1 b5900da7d81b30898c840b4634274f83d348372e
- SHA512 bf8999267f02cf507298cc3a1a5acbc897ed461fe6661f5f159c54dcbb1ea030b3277a9a839421a99953ddf92921d80d7399a8b814b64c83dd36b6efc05cab1c
- SSDEEP 98304:5jW/rE1dh3JUMfTqCELeJiwjB5oKwQ5XqkYSOAOuc6J0z3hHKpqYbqFeGBMyLXLO:hFhzmsd5oODNOAOup0BGXqFVB
- TLSH T1C176CF31FAA6E994C8B3993DD069165414893F6C0711CACB137C728966322C1DEBE6FF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.