Overview

overview

10

Static

static

7

adde2fca5b...18.exe

windows7-x64

10

adde2fca5b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    adde2fca5b96d6b0b3186ba7a98edcbb_JaffaCakes118

  • Size

    557KB

  • Sample

    240820-e6cshaxcrk

  • MD5

    adde2fca5b96d6b0b3186ba7a98edcbb

  • SHA1

    bf88dbd9dfbd5cd427cb7caeb0c11fae00db5cb5

  • SHA256

    7f95cd69aecb4f59a8845fe50d8e0fdd9d29694615b53f4a1eb780734445e144

  • SHA512

    e7c629231866d5867798ea49f9aac6a88667c5bef92be253623729101868c7ad5690f1bc143e9b11d804aa8a11ed25edee25e9796521eda34ef569ad64750b94

  • SSDEEP

    6144:XRqmpp+amNOGokzLyM9tsLAitQo6tzOKkzIt8gKyfjxfR9D2j4yI:hqmpplpGoGL3etQoMiXM8gxf/Sj4yI

Score
10/10
aspackv2discoverypersistenceupx

Malware Config

Targets

    • Target

      adde2fca5b96d6b0b3186ba7a98edcbb_JaffaCakes118

    • Size

      557KB

    • MD5

      adde2fca5b96d6b0b3186ba7a98edcbb

    • SHA1

      bf88dbd9dfbd5cd427cb7caeb0c11fae00db5cb5

    • SHA256

      7f95cd69aecb4f59a8845fe50d8e0fdd9d29694615b53f4a1eb780734445e144

    • SHA512

      e7c629231866d5867798ea49f9aac6a88667c5bef92be253623729101868c7ad5690f1bc143e9b11d804aa8a11ed25edee25e9796521eda34ef569ad64750b94

    • SSDEEP

      6144:XRqmpp+amNOGokzLyM9tsLAitQo6tzOKkzIt8gKyfjxfR9D2j4yI:hqmpplpGoGL3etQoMiXM8gxf/Sj4yI

    Score
    10/10
    aspackv2discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Adds policy Run key to start application

      persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks