Overview

overview

8

Static

static

7

1a2e731523...18.exe

windows7-x64

8

1a2e731523...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a2e731523018e2ff3f45b564d25ed05_JaffaCakes118

  • Size

    108KB

  • Sample

    240628-p2vgvszgjh

  • MD5

    1a2e731523018e2ff3f45b564d25ed05

  • SHA1

    a4ce9cd19c63aa62f10796a7c6d2afedb551c360

  • SHA256

    2d4528d263508a54f8bb96df1c9573f87d740f4b48592afa0094bdc86ff26d27

  • SHA512

    9273f8660e097661bd8d510be687ec0482182d2cc2ff1a6b561ade0af208996c4292c49c17479e1fe9934ddc4254566f0fe302c1d256e0f4b5979b8a6d926e2f

  • SSDEEP

    3072:th3YIQGs64Yha+LwjWlVvgir23ejaAVkuXYJnnL:ttYDO4Yw+eWl97aOHXYJn

Score
8/10
aspackv2persistenceupx

Malware Config

Targets

    • Target

      1a2e731523018e2ff3f45b564d25ed05_JaffaCakes118

    • Size

      108KB

    • MD5

      1a2e731523018e2ff3f45b564d25ed05

    • SHA1

      a4ce9cd19c63aa62f10796a7c6d2afedb551c360

    • SHA256

      2d4528d263508a54f8bb96df1c9573f87d740f4b48592afa0094bdc86ff26d27

    • SHA512

      9273f8660e097661bd8d510be687ec0482182d2cc2ff1a6b561ade0af208996c4292c49c17479e1fe9934ddc4254566f0fe302c1d256e0f4b5979b8a6d926e2f

    • SSDEEP

      3072:th3YIQGs64Yha+LwjWlVvgir23ejaAVkuXYJnnL:ttYDO4Yw+eWl97aOHXYJn

    Score
    8/10
    aspackv2persistenceupx

    • Server Software Component: Terminal Services DLL

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks