5505414a77cb25c03133d651195921bfa30a193c12f7d176948897511c513a99 | Triage

Sharing

General

Target

806ba78c270689dc8d04d63a74ac34d1_JaffaCakes118
Size

585KB
Sample

241030-2ea6xstnbr
MD5

806ba78c270689dc8d04d63a74ac34d1
SHA1

5228a732d560d61947b383c90ea706284fda2a59
SHA256

5505414a77cb25c03133d651195921bfa30a193c12f7d176948897511c513a99
SHA512

61d223422011d80c4296fad361f034f9ca6d7f91721bb0eadbd6036bb1e2fc887e3c7091e4e646c851fd171647b7d508f270bfa7563de3971a7943d204468679
SSDEEP

3072:kaPa4q4hBSvcghvrJ5h4syGiLtvzgBOzgmo2v:kUqfvrjh4MitvzgAzB

Score

7^/10

aspackv2 discovery persistence

Malware Config

Targets

- Target
  
  806ba78c270689dc8d04d63a74ac34d1_JaffaCakes118
- Size
  
  585KB
- MD5
  
  806ba78c270689dc8d04d63a74ac34d1
- SHA1
  
  5228a732d560d61947b383c90ea706284fda2a59
- SHA256
  
  5505414a77cb25c03133d651195921bfa30a193c12f7d176948897511c513a99
- SHA512
  
  61d223422011d80c4296fad361f034f9ca6d7f91721bb0eadbd6036bb1e2fc887e3c7091e4e646c851fd171647b7d508f270bfa7563de3971a7943d204468679
- SSDEEP
  
  3072:kaPa4q4hBSvcghvrJ5h4syGiLtvzgBOzgmo2v:kUqfvrjh4MitvzgAzB
Score

7^/10

aspackv2 discovery persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2discoverypersistence

behavioral2

aspackv2discoverypersistence