Overview

overview

8

Static

static

7

89505d28ec...18.exe

windows7-x64

8

89505d28ec...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89505d28eca47dfa51e4644cd110aa46_JaffaCakes118

  • Size

    96KB

  • Sample

    240811-g2m4sayblj

  • MD5

    89505d28eca47dfa51e4644cd110aa46

  • SHA1

    fdbff2035bc79835e17b44ae65fa55539f9c76bb

  • SHA256

    5e34b7e06b96462bc06e3da56949b157c0e7f250eef60fda21b661e5257f921b

  • SHA512

    4a2e776237058db0f1309a747fb2e9a0c6126fbd93bb89cfa471c729adc5eaf13b5f94ae671cbfb5fdeb2fc064e6d5d08dff77908e7b14b98641b27f43d6a246

  • SSDEEP

    1536:wlSyEtzUUb8Z6XnDs9OilgbiS4pN9WmCNWych5NybFungOzp+edWTgLrpp:Q8UJ6XnY9KinsNWychLybQngwUY

Score
8/10
aspackv2discoverypersistenceupx

Malware Config

Targets

    • Target

      89505d28eca47dfa51e4644cd110aa46_JaffaCakes118

    • Size

      96KB

    • MD5

      89505d28eca47dfa51e4644cd110aa46

    • SHA1

      fdbff2035bc79835e17b44ae65fa55539f9c76bb

    • SHA256

      5e34b7e06b96462bc06e3da56949b157c0e7f250eef60fda21b661e5257f921b

    • SHA512

      4a2e776237058db0f1309a747fb2e9a0c6126fbd93bb89cfa471c729adc5eaf13b5f94ae671cbfb5fdeb2fc064e6d5d08dff77908e7b14b98641b27f43d6a246

    • SSDEEP

      1536:wlSyEtzUUb8Z6XnDs9OilgbiS4pN9WmCNWych5NybFungOzp+edWTgLrpp:Q8UJ6XnY9KinsNWychLybQngwUY

    Score
    8/10
    aspackv2discoverypersistenceupx

    • Server Software Component: Terminal Services DLL

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks