Overview

overview

7

Static

static

3

aster.zip

windows10-2004-x64

7

aster.zip

windows11-ltsc_2024-x64

1

!ALGEA.url

windows10-2004-x64

6

!ALGEA.url

windows11-ltsc_2024-x64

6

!LOGIN_README.txt

windows10-2004-x64

1

!LOGIN_README.txt

windows11-ltsc_2024-x64

1

1njector.exe

windows10-2004-x64

1

1njector.exe

windows11-ltsc_2024-x64

1

aster.dll

windows10-2004-x64

1

aster.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    aster.zip
  • Size 2.9MB
  • Sample260903-yqhtcsvela
  • SHA256 9faa3e57db888b10bf9c42508445ee00fea62d6126f26719185277f1d84c84f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Targets

    • Target
      aster.zip
    • Size 2.9MB
    • SHA256 9faa3e57db888b10bf9c42508445ee00fea62d6126f26719185277f1d84c84f0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Executes dropped EXE

    behavioral1behavioral2
    • Target
      !ALGEA.url
    • Size 110B
    • SHA256 f8c145f475ae9f43a083054d6e3e179c7713951a586b49f99c32043f826e8447
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    discovery

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral3behavioral4
    • Target
      !LOGIN_README.txt
    • Size 68B
    • SHA256 2a5de9046bbf93e298f5a512722a3ae543d11ac2ae9e22f762bf73cd06352939
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      1njector.exe
    • Size 34KB
    • SHA256 091640ed24d10208edd709557cade21aead123659a46776b67c872ab89a93593
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      aster.dll
    • Size 7.0MB
    • SHA256 77594bee7745ee17db8b711438247ad47a68b19ca3d692dc2a256527cac9792d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks