7e2da686b350d7ec646ca94b3c00b38d64ba8faa3a059f407a67a4cab261b49d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04c815166ad8fa7b4a80017fb6770296_JaffaCakes118
Size

275KB
Sample

240728-brxmksshqe
MD5

04c815166ad8fa7b4a80017fb6770296
SHA1

b28d4b66251c25bd93e450bee939652c7a3241d2
SHA256

7e2da686b350d7ec646ca94b3c00b38d64ba8faa3a059f407a67a4cab261b49d
SHA512

0a54d669b5ab856f036ad94e3506b03918e90086403497124a00b1cd116b7a1b639bbc5824ebfb0adec94eb6830336519f53d5c067df9103be056b95d63808d1
SSDEEP

6144:XUZyaM83nLbxKVJ3nCMkQe5HZAsHFZlxz:5lgsHyMqLHFZlxz

Score

7^/10

aspackv2 discovery persistence

Malware Config

Targets

- Target
  
  04c815166ad8fa7b4a80017fb6770296_JaffaCakes118
- Size
  
  275KB
- MD5
  
  04c815166ad8fa7b4a80017fb6770296
- SHA1
  
  b28d4b66251c25bd93e450bee939652c7a3241d2
- SHA256
  
  7e2da686b350d7ec646ca94b3c00b38d64ba8faa3a059f407a67a4cab261b49d
- SHA512
  
  0a54d669b5ab856f036ad94e3506b03918e90086403497124a00b1cd116b7a1b639bbc5824ebfb0adec94eb6830336519f53d5c067df9103be056b95d63808d1
- SSDEEP
  
  6144:XUZyaM83nLbxKVJ3nCMkQe5HZAsHFZlxz:5lgsHyMqLHFZlxz
Score

7^/10

aspackv2 discovery persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2discoverypersistence

behavioral2

aspackv2discoverypersistence