Overview

overview

10

Static

static

3

4afb95d53f...18.exe

windows7-x64

10

4afb95d53f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4afb95d53f83e1dea370b2f501307dda_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240516-n9pqxabf51

  • MD5

    4afb95d53f83e1dea370b2f501307dda

  • SHA1

    25bdb482d40b3b9d29b36774c4bcc3fd090f0624

  • SHA256

    51d0bc63f05586fc726d57103a8067636dcfcef391cc15025cde2d82cc83dcfd

  • SHA512

    f8f6297f44dd6c898d32b03ec98a2ad43058850047d04524cbbe9de78afb59f013330f92e9006430a5414c07ce10a9fc2cd3b93d41d8b29899bfc3957199ec36

  • SSDEEP

    12288:RFfwcHcu8pMkZ3Fn9d+Vd3SUZ+7EeI1x7f7V3+hT6DaRWz58kc+1xy8SyG54f:RJcu8pl9d+VdCUhN1SsNK+1pSyw4f

Score
10/10
aspackv2persistence

Malware Config

Targets

    • Target

      4afb95d53f83e1dea370b2f501307dda_JaffaCakes118

    • Size

      1.9MB

    • MD5

      4afb95d53f83e1dea370b2f501307dda

    • SHA1

      25bdb482d40b3b9d29b36774c4bcc3fd090f0624

    • SHA256

      51d0bc63f05586fc726d57103a8067636dcfcef391cc15025cde2d82cc83dcfd

    • SHA512

      f8f6297f44dd6c898d32b03ec98a2ad43058850047d04524cbbe9de78afb59f013330f92e9006430a5414c07ce10a9fc2cd3b93d41d8b29899bfc3957199ec36

    • SSDEEP

      12288:RFfwcHcu8pMkZ3Fn9d+Vd3SUZ+7EeI1x7f7V3+hT6DaRWz58kc+1xy8SyG54f:RJcu8pl9d+VdCUhN1SsNK+1pSyw4f

    Score
    10/10
    aspackv2persistence

    • Modifies WinLogon for persistence

      persistence

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks