1266953cb52ce3d2673ef0da78011f46697f0f3a4c6bca3ac1c1a0981e75b939 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16519f8c1c568c5702269c2afc93391a_JaffaCakes118
Size

142KB
Sample

240627-rnwtwavepd
MD5

16519f8c1c568c5702269c2afc93391a
SHA1

7c5c6a84d06e16952355d072de5ec93c00aa5f12
SHA256

1266953cb52ce3d2673ef0da78011f46697f0f3a4c6bca3ac1c1a0981e75b939
SHA512

2f84709ce91f9abe4f36434b504353057c033433a8a00067cce31ab80ee53d2fd7edd408db59e7b116929f6985e8b11b26394cc92722588fbc69d3051840609b
SSDEEP

3072:sPr0o7Ins0wFb144ONaRuc1r+xeyStktZSadjaMe:sD0MIsF4paP16xM2BF

Score

7^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  16519f8c1c568c5702269c2afc93391a_JaffaCakes118
- Size
  
  142KB
- MD5
  
  16519f8c1c568c5702269c2afc93391a
- SHA1
  
  7c5c6a84d06e16952355d072de5ec93c00aa5f12
- SHA256
  
  1266953cb52ce3d2673ef0da78011f46697f0f3a4c6bca3ac1c1a0981e75b939
- SHA512
  
  2f84709ce91f9abe4f36434b504353057c033433a8a00067cce31ab80ee53d2fd7edd408db59e7b116929f6985e8b11b26394cc92722588fbc69d3051840609b
- SSDEEP
  
  3072:sPr0o7Ins0wFb144ONaRuc1r+xeyStktZSadjaMe:sD0MIsF4paP16xM2BF
Score

7^/10

aspackv2 persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistence

behavioral2

aspackv2persistence