Overview

overview

8

Static

static

7

3813153204...18.exe

windows7-x64

8

3813153204...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38131532042899a686f3ff8a2c0a2521_JaffaCakes118

  • Size

    224KB

  • Sample

    240711-heq3lawdmf

  • MD5

    38131532042899a686f3ff8a2c0a2521

  • SHA1

    fc506df77f4ccfe9a2f8971b4fad3d1d4a2c8a53

  • SHA256

    84dd84b087fb07ae9cdd1df5d73cba1785728f4da0d1a44e58acf7b79ecd2cb3

  • SHA512

    a5bc27261b5b81a51ab73950b78d34a6f92bb70943e73d1a3a3ba2b38132e430b31853f6b44d94134a64c8711f1a73638c2f60c8ebab0c6650e1802275e16cf0

  • SSDEEP

    6144:HVuFNslYq0O0KC/SOEt5zpaiRhcuGE07v6ITRxv:HSslYrMCfwNxRhTKj6I1xv

Score
8/10
aspackv2persistenceupx

Malware Config

Targets

    • Target

      38131532042899a686f3ff8a2c0a2521_JaffaCakes118

    • Size

      224KB

    • MD5

      38131532042899a686f3ff8a2c0a2521

    • SHA1

      fc506df77f4ccfe9a2f8971b4fad3d1d4a2c8a53

    • SHA256

      84dd84b087fb07ae9cdd1df5d73cba1785728f4da0d1a44e58acf7b79ecd2cb3

    • SHA512

      a5bc27261b5b81a51ab73950b78d34a6f92bb70943e73d1a3a3ba2b38132e430b31853f6b44d94134a64c8711f1a73638c2f60c8ebab0c6650e1802275e16cf0

    • SSDEEP

      6144:HVuFNslYq0O0KC/SOEt5zpaiRhcuGE07v6ITRxv:HSslYrMCfwNxRhTKj6I1xv

    Score
    8/10
    aspackv2persistenceupx

    • Server Software Component: Terminal Services DLL

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks