Overview

overview

8

Static

static

7

031b2b443f...18.exe

windows7-x64

8

031b2b443f...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    031b2b443fa2998c7e64a57a737ac1e6_JaffaCakes118

  • Size

    21KB

  • Sample

    240620-fw57qs1bja

  • MD5

    031b2b443fa2998c7e64a57a737ac1e6

  • SHA1

    85f1a30b0315a1f84012b5d65a72979c32b55ed5

  • SHA256

    151718427cb036797df38697c4b2f2b8659c1650aaf70f04d5924c9e8723f582

  • SHA512

    dbe0c710072a7d886dd96d18a0d90328f5b4ba9716d92fe6b625e5b984a3063633dfc8dcdffebed7617c2aafa7886f3f147e9bb7aa254a880599a68dbbf8e5e2

  • SSDEEP

    384:bE3OL0e5yjM+2k/IQ69pZYu4jjpJkEpTVhAxfr6+e9Pfqbn1RW/Wb:bE3OL0eQjMG/IQupZYu4jjpesVyxOhab

Score
8/10
aspackv2persistence

Malware Config

Targets

    • Target

      031b2b443fa2998c7e64a57a737ac1e6_JaffaCakes118

    • Size

      21KB

    • MD5

      031b2b443fa2998c7e64a57a737ac1e6

    • SHA1

      85f1a30b0315a1f84012b5d65a72979c32b55ed5

    • SHA256

      151718427cb036797df38697c4b2f2b8659c1650aaf70f04d5924c9e8723f582

    • SHA512

      dbe0c710072a7d886dd96d18a0d90328f5b4ba9716d92fe6b625e5b984a3063633dfc8dcdffebed7617c2aafa7886f3f147e9bb7aa254a880599a68dbbf8e5e2

    • SSDEEP

      384:bE3OL0e5yjM+2k/IQ69pZYu4jjpJkEpTVhAxfr6+e9Pfqbn1RW/Wb:bE3OL0eQjMG/IQupZYu4jjpesVyxOhab

    Score
    8/10
    aspackv2persistence

    • Sets service image path in registry

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks