Overview

overview

7

Static

static

7

84f87d5a29...18.exe

windows7-x64

7

84f87d5a29...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84f87d5a2927c8f9dc01454e33e07baa_JaffaCakes118

  • Size

    336KB

  • Sample

    240810-gbckcsxfqq

  • MD5

    84f87d5a2927c8f9dc01454e33e07baa

  • SHA1

    b1093c9c089579e27703f065b025ed33b64629b2

  • SHA256

    e21c17f80aaa32cb4460e1cc41bbf840ad119ba718e1cd9613b1b802db419093

  • SHA512

    048533235a6df68a593c817d6bb3bf71d539f4d7171445e5187640076da84d2bff2a71e71f26d10aef0b5d4a77a2e53cd0810a061b161c049ae1412ae1391b57

  • SSDEEP

    6144:z0XO6EituckudSU+ZDJlLlPF42YOKCW/F:zgtucEU+ZDz5PF4IKVF

Score
7/10
aspackv2discoverypersistence

Malware Config

Targets

    • Target

      84f87d5a2927c8f9dc01454e33e07baa_JaffaCakes118

    • Size

      336KB

    • MD5

      84f87d5a2927c8f9dc01454e33e07baa

    • SHA1

      b1093c9c089579e27703f065b025ed33b64629b2

    • SHA256

      e21c17f80aaa32cb4460e1cc41bbf840ad119ba718e1cd9613b1b802db419093

    • SHA512

      048533235a6df68a593c817d6bb3bf71d539f4d7171445e5187640076da84d2bff2a71e71f26d10aef0b5d4a77a2e53cd0810a061b161c049ae1412ae1391b57

    • SSDEEP

      6144:z0XO6EituckudSU+ZDJlLlPF42YOKCW/F:zgtucEU+ZDz5PF4IKVF

    Score
    7/10
    aspackv2discoverypersistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks