7fa2b1cd5817591c860d2d2df02c51c89f6d73e7996caf9509b5cf0ee9ffc548 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

485fd5a389ea2c39a41e119e1731e329_JaffaCakes118
Size

57KB
Sample

240715-fxy5tazbqr
MD5

485fd5a389ea2c39a41e119e1731e329
SHA1

3472e932405f5358e2d3fbfff3d6df34e1eff1b6
SHA256

7fa2b1cd5817591c860d2d2df02c51c89f6d73e7996caf9509b5cf0ee9ffc548
SHA512

eb3348df32d2ec825fa092e6e5c2f2aceca29477c89f73c7e56d80526ad9f69c8ad197f9fd0cf743d760acd4af200166237f413f95e48b375b0289d0db43de7f
SSDEEP

1536:MysuehEZVvzDxAYA+6QfHEs7v8JHE6xbGAuNldg:MjqZlzySftu/FGnNli

Score

8^/10

aspackv2 persistence

Malware Config

Targets

- Target
  
  485fd5a389ea2c39a41e119e1731e329_JaffaCakes118
- Size
  
  57KB
- MD5
  
  485fd5a389ea2c39a41e119e1731e329
- SHA1
  
  3472e932405f5358e2d3fbfff3d6df34e1eff1b6
- SHA256
  
  7fa2b1cd5817591c860d2d2df02c51c89f6d73e7996caf9509b5cf0ee9ffc548
- SHA512
  
  eb3348df32d2ec825fa092e6e5c2f2aceca29477c89f73c7e56d80526ad9f69c8ad197f9fd0cf743d760acd4af200166237f413f95e48b375b0289d0db43de7f
- SSDEEP
  
  1536:MysuehEZVvzDxAYA+6QfHEs7v8JHE6xbGAuNldg:MjqZlzySftu/FGnNli
Score

8^/10

aspackv2 persistence
- Server Software Component: Terminal Services DLL
  persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Server Software Component

Terminal Services DLL

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2persistence

behavioral2

aspackv2persistence