f6b54e03d4789392abd7c4af6a3a39f1efbe9a91357ccd3b26f18e728fb51faf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac0c1463d9a78125de12859235b8fbc6_JaffaCakes118
Size

209KB
Sample

240819-wsxzysydlg
MD5

ac0c1463d9a78125de12859235b8fbc6
SHA1

d99b0cadedab20fb96ca29d1502b73d2f102be02
SHA256

f6b54e03d4789392abd7c4af6a3a39f1efbe9a91357ccd3b26f18e728fb51faf
SHA512

fa7efb146cb942ef61870f9e4ad66da8f9599d5617180944ad97040ec36f5ab7e2251c23687083b76109be6b25affa990bcc99850584e8749291cb18332345a3
SSDEEP

3072:0cc9f8G04O2VomTz6ViSf3tQsmWMsfgdbOs3yxH+O6iaxVF01w1uUGk6Tse/DRlc:z4fCfIyVv+smWMqbWFVcCuUjkseD6

Score

7^/10

aspackv2 discovery persistence

Malware Config

Targets

- Target
  
  ac0c1463d9a78125de12859235b8fbc6_JaffaCakes118
- Size
  
  209KB
- MD5
  
  ac0c1463d9a78125de12859235b8fbc6
- SHA1
  
  d99b0cadedab20fb96ca29d1502b73d2f102be02
- SHA256
  
  f6b54e03d4789392abd7c4af6a3a39f1efbe9a91357ccd3b26f18e728fb51faf
- SHA512
  
  fa7efb146cb942ef61870f9e4ad66da8f9599d5617180944ad97040ec36f5ab7e2251c23687083b76109be6b25affa990bcc99850584e8749291cb18332345a3
- SSDEEP
  
  3072:0cc9f8G04O2VomTz6ViSf3tQsmWMsfgdbOs3yxH+O6iaxVF01w1uUGk6Tse/DRlc:z4fCfIyVv+smWMqbWFVcCuUjkseD6
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence