b585a09ad337b2aebd9288509ca3a75b64f0e318839f3588686c5718ef1f1ece | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5576647c1cd00c38e2a22f098730686c_JaffaCakes118
Size

60KB
Sample

241018-ez486sxblb
MD5

5576647c1cd00c38e2a22f098730686c
SHA1

882b9781d603d3d686924880b4e45c320e0e58de
SHA256

b585a09ad337b2aebd9288509ca3a75b64f0e318839f3588686c5718ef1f1ece
SHA512

bdcd8121a214928aaaec31deb6be50437405369689f94cfc304b453b485f82fc4405e1268818facd6a1c3449aeb71f5e7b25313656ffa0dc7cf6922ddf9aa5e3
SSDEEP

1536:0ID8J8mwO5Emw3lB2EXi9sxL+b7REeGM1l0bJP:01J8mwO5UIEyKxL+bVPA

Score

10^/10

aspackv2 discovery persistence

Malware Config

Targets

- Target
  
  5576647c1cd00c38e2a22f098730686c_JaffaCakes118
- Size
  
  60KB
- MD5
  
  5576647c1cd00c38e2a22f098730686c
- SHA1
  
  882b9781d603d3d686924880b4e45c320e0e58de
- SHA256
  
  b585a09ad337b2aebd9288509ca3a75b64f0e318839f3588686c5718ef1f1ece
- SHA512
  
  bdcd8121a214928aaaec31deb6be50437405369689f94cfc304b453b485f82fc4405e1268818facd6a1c3449aeb71f5e7b25313656ffa0dc7cf6922ddf9aa5e3
- SSDEEP
  
  1536:0ID8J8mwO5Emw3lB2EXi9sxL+b7REeGM1l0bJP:01J8mwO5UIEyKxL+bVPA
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2