Overview

overview

7

Static

static

7

fb27c3bda7...18.exe

windows7-x64

6

fb27c3bda7...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb27c3bda77b88cb1d9cc1a21eb002ef_JaffaCakes118

  • Size

    137KB

  • Sample

    240419-zslhpsfd67

  • MD5

    fb27c3bda77b88cb1d9cc1a21eb002ef

  • SHA1

    a8492ccfdf087f395dc181fb1a5a97467a7623a5

  • SHA256

    71057fe415ea84d60d3726f76bd0b8c6cf9e3d3c497ff4c4430bb00e9e2d7564

  • SHA512

    38267a7134fd185bb3e98cb8023d170ffa61809fa79a1a59b72ea60604fb8072d9cdb6064ec62d9c3574393b372f2acaea9ce8c7eec2710b5b64459539b7dfef

  • SSDEEP

    3072:vxMbSP2gXggMDtbpzn+DlsMSh6Do4fgPqaht7UA+ZSrLP2o:vCbS+QU1zn+DlsXh6kpPqaDUd0/P2

Score
7/10
aspackv2persistence

Malware Config

Targets

    • Target

      fb27c3bda77b88cb1d9cc1a21eb002ef_JaffaCakes118

    • Size

      137KB

    • MD5

      fb27c3bda77b88cb1d9cc1a21eb002ef

    • SHA1

      a8492ccfdf087f395dc181fb1a5a97467a7623a5

    • SHA256

      71057fe415ea84d60d3726f76bd0b8c6cf9e3d3c497ff4c4430bb00e9e2d7564

    • SHA512

      38267a7134fd185bb3e98cb8023d170ffa61809fa79a1a59b72ea60604fb8072d9cdb6064ec62d9c3574393b372f2acaea9ce8c7eec2710b5b64459539b7dfef

    • SSDEEP

      3072:vxMbSP2gXggMDtbpzn+DlsMSh6Do4fgPqaht7UA+ZSrLP2o:vCbS+QU1zn+DlsXh6kpPqaDUd0/P2

    Score
    7/10
    persistenceaspackv2

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks