5e52e13a5791f474ff431136756525b69207fb76673b40227087c249a294e5c7 | Triage

Sharing

General

Target

39a5ab240a423bf6f3610fef959af15b_JaffaCakes118
Size

74KB
Sample

240711-slryks1hqq
MD5

39a5ab240a423bf6f3610fef959af15b
SHA1

74be8c58229e8c5c1ab50e1006c4f17d52c686cf
SHA256

5e52e13a5791f474ff431136756525b69207fb76673b40227087c249a294e5c7
SHA512

0e34bea50e674b011960e1552b3079f7cb6f9b88d7834cf61f10a51912d80c9ea666e42567991d59b24121cec38de2dcac4cee77715a8abc171676e90aaf6fa8
SSDEEP

1536:DwmUBoGYyUUrWqi54hxmYdsinXfjBribmzTGO0pAFNXdtl3ZOVI8X0DJU:DNU4UrsUmQ1+mzIAFFdtl3ZO6b

Score

7^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  39a5ab240a423bf6f3610fef959af15b_JaffaCakes118
- Size
  
  74KB
- MD5
  
  39a5ab240a423bf6f3610fef959af15b
- SHA1
  
  74be8c58229e8c5c1ab50e1006c4f17d52c686cf
- SHA256
  
  5e52e13a5791f474ff431136756525b69207fb76673b40227087c249a294e5c7
- SHA512
  
  0e34bea50e674b011960e1552b3079f7cb6f9b88d7834cf61f10a51912d80c9ea666e42567991d59b24121cec38de2dcac4cee77715a8abc171676e90aaf6fa8
- SSDEEP
  
  1536:DwmUBoGYyUUrWqi54hxmYdsinXfjBribmzTGO0pAFNXdtl3ZOVI8X0DJU:DNU4UrsUmQ1+mzIAFFdtl3ZO6b
Score

7^/10

aspackv2 persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistence

behavioral2

aspackv2persistence