1751a5903ad7bb6f0ea28e8e0b0879f45c2d2536ac31790b048e3d319e9566d4 | Triage

Sharing

General

Target

c0ebbf4e189b8721fa92832b391cb739_JaffaCakes118
Size

637KB
Sample

240825-rlzsrazfmq
MD5

c0ebbf4e189b8721fa92832b391cb739
SHA1

9c71564dfdbcc2846a03bd5587218d5e6ea42a61
SHA256

1751a5903ad7bb6f0ea28e8e0b0879f45c2d2536ac31790b048e3d319e9566d4
SHA512

a262b9d805122702438ece5901a20b5396fab73676dd1f12313cf50e897a16ca5024f1588e6472fbc3b03aac4b582c9f0b007c809834fb94dcb43fce97445c1e
SSDEEP

12288:q6CR7AXRqAbUXWzXBv59qUE/soigqhlhmmP23CVY48qLX05Q:AlAXsAb5TjMUEBilrhBPr6nKX05Q

Score

7^/10

aspackv2 discovery persistence

Malware Config

Targets

- Target
  
  c0ebbf4e189b8721fa92832b391cb739_JaffaCakes118
- Size
  
  637KB
- MD5
  
  c0ebbf4e189b8721fa92832b391cb739
- SHA1
  
  9c71564dfdbcc2846a03bd5587218d5e6ea42a61
- SHA256
  
  1751a5903ad7bb6f0ea28e8e0b0879f45c2d2536ac31790b048e3d319e9566d4
- SHA512
  
  a262b9d805122702438ece5901a20b5396fab73676dd1f12313cf50e897a16ca5024f1588e6472fbc3b03aac4b582c9f0b007c809834fb94dcb43fce97445c1e
- SSDEEP
  
  12288:q6CR7AXRqAbUXWzXBv59qUE/soigqhlhmmP23CVY48qLX05Q:AlAXsAb5TjMUEBilrhBPr6nKX05Q
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence