85a9ee0d585f4305ed57c7cfe2c46cdf4c38a647a3357ce8a3e50c3164b5dc70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04794e12a3f7ea7c9e27b29f8c769701_JaffaCakes118
Size

2.9MB
Sample

241001-ft2rjascjp
MD5

04794e12a3f7ea7c9e27b29f8c769701
SHA1

37deab2d8f35be711703a105675b6443a442f787
SHA256

85a9ee0d585f4305ed57c7cfe2c46cdf4c38a647a3357ce8a3e50c3164b5dc70
SHA512

1cdc2e41b00a4c2109dff64ae97a35b7226d1f38c6e4bc953df8bc04db75cef308f4052de877df9c66c27a8400447271ce18164d7794f90b556428b5cf6cf75e
SSDEEP

1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW

Score

7^/10

aspackv2 discovery persistence

Malware Config

Targets

- Target
  
  04794e12a3f7ea7c9e27b29f8c769701_JaffaCakes118
- Size
  
  2.9MB
- MD5
  
  04794e12a3f7ea7c9e27b29f8c769701
- SHA1
  
  37deab2d8f35be711703a105675b6443a442f787
- SHA256
  
  85a9ee0d585f4305ed57c7cfe2c46cdf4c38a647a3357ce8a3e50c3164b5dc70
- SHA512
  
  1cdc2e41b00a4c2109dff64ae97a35b7226d1f38c6e4bc953df8bc04db75cef308f4052de877df9c66c27a8400447271ce18164d7794f90b556428b5cf6cf75e
- SSDEEP
  
  1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW
Score

7^/10

aspackv2 discovery persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Deletes itself
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2discoverypersistence

behavioral2

aspackv2discoverypersistence