88f5ddc7e1a0b988ba8736d06f40bca786396b1b39772d68cb759dff8035d1cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

759b1943cafda763c61255b3e6a4403c_JaffaCakes118
Size

881KB
Sample

240726-za1vnsshnl
MD5

759b1943cafda763c61255b3e6a4403c
SHA1

8eb8b3ac49c22ebdb00415da5192b3242dc147b1
SHA256

88f5ddc7e1a0b988ba8736d06f40bca786396b1b39772d68cb759dff8035d1cd
SHA512

f04f2a4cc3b81b83576e6dc7a6aac16617788f32ce504e2a6d2e48a341190de5f3b80f0820cfa827fd24fd4a3ab85a0b42848cd4dd9c0e68f087f2a8a817b507
SSDEEP

12288:2Cqeu/drYYFtkTI9IT8HHofxMEF/BQ0vUOEar++batPyY8HG+ZjPkb4qB:2CXucTIuQHaPPbAy9Hxq4a

Score

7^/10

aspackv2 discovery persistence

Malware Config

Targets

- Target
  
  759b1943cafda763c61255b3e6a4403c_JaffaCakes118
- Size
  
  881KB
- MD5
  
  759b1943cafda763c61255b3e6a4403c
- SHA1
  
  8eb8b3ac49c22ebdb00415da5192b3242dc147b1
- SHA256
  
  88f5ddc7e1a0b988ba8736d06f40bca786396b1b39772d68cb759dff8035d1cd
- SHA512
  
  f04f2a4cc3b81b83576e6dc7a6aac16617788f32ce504e2a6d2e48a341190de5f3b80f0820cfa827fd24fd4a3ab85a0b42848cd4dd9c0e68f087f2a8a817b507
- SSDEEP
  
  12288:2Cqeu/drYYFtkTI9IT8HHofxMEF/BQ0vUOEar++batPyY8HG+ZjPkb4qB:2CXucTIuQHaPPbAy9Hxq4a
Score

7^/10

aspackv2 discovery persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2discoverypersistence

behavioral2

aspackv2discoverypersistence