58f16534d792ac21ed289821211caa1e6bf8314364bad939cc5b9bbd1be1098a

General

Target
e6c33031ccd92cbda63bbc7046a9ac02_JaffaCakes118
Size 621KB
Sample240408-ggddvaab81
SHA256 58f16534d792ac21ed289821211caa1e6bf8314364bad939cc5b9bbd1be1098a
MD5 e6c33031ccd92cbda63bbc7046a9ac02
SHA1 99b021e6ad490f41da2b1777fa7311e7a297e073
SHA512 c95ca9d7db30635267ed569203a6591345a98a902da6b51682283bb3c0ea25063f6ea56023e5131e9c6085208ec0236d03ee39336d53a35eab9e6682594638a9
SSDEEP 12288:mltyc+0zT2pU0SQmWH3CMEBaLiNFLT+AR02lKhmmCAYJfzRNz:mv+030UpFME0CRJCvmcYJ1Nz
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  e6c33031ccd92cbda63bbc7046a9ac02_JaffaCakes118
- Size 621KB
- SHA256 58f16534d792ac21ed289821211caa1e6bf8314364bad939cc5b9bbd1be1098a
- MD5 e6c33031ccd92cbda63bbc7046a9ac02
- SHA1 99b021e6ad490f41da2b1777fa7311e7a297e073
- SHA512 c95ca9d7db30635267ed569203a6591345a98a902da6b51682283bb3c0ea25063f6ea56023e5131e9c6085208ec0236d03ee39336d53a35eab9e6682594638a9
- SSDEEP 12288:mltyc+0zT2pU0SQmWH3CMEBaLiNFLT+AR02lKhmmCAYJfzRNz:mv+030UpFME0CRJCvmcYJ1Nz
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

adware aspackv2 discovery stealer
- Drops file in Drivers directory
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

1

T1176

Privilege Escalation

Defense Evasion

Modify Registry

2

T1112

Credential Access

Discovery

Query Registry

2

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Installs/modifies Browser Helper Object

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2