322f0470d98501144b0db3c2b1fec36161e64471320996cb36612275fc2cb0a6 | Triage

Sharing

General

Target

80f0e15181f0d8ea316e39355428b1af_JaffaCakes118
Size

337KB
Sample

241031-bc6xpsxjfn
MD5

80f0e15181f0d8ea316e39355428b1af
SHA1

e6a2bea71f6e267bca84f8823023875119d4aff2
SHA256

322f0470d98501144b0db3c2b1fec36161e64471320996cb36612275fc2cb0a6
SHA512

83aa48bd16b7a28d242e328a4968736e9cccd603f19d910c7d23c3705e5a82672427e75bab84502640d9eb8b6840c748a5f5da1edaa7caf68622857aae1e55c0
SSDEEP

1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW

Score

7^/10

aspackv2 discovery persistence

Malware Config

Targets

- Target
  
  80f0e15181f0d8ea316e39355428b1af_JaffaCakes118
- Size
  
  337KB
- MD5
  
  80f0e15181f0d8ea316e39355428b1af
- SHA1
  
  e6a2bea71f6e267bca84f8823023875119d4aff2
- SHA256
  
  322f0470d98501144b0db3c2b1fec36161e64471320996cb36612275fc2cb0a6
- SHA512
  
  83aa48bd16b7a28d242e328a4968736e9cccd603f19d910c7d23c3705e5a82672427e75bab84502640d9eb8b6840c748a5f5da1edaa7caf68622857aae1e55c0
- SSDEEP
  
  1536:OKD0A2T3vLbsih9e8bTTpb/IgQmP9zKcTDB4w/UjlQ/dpKRq:352T3siXei5bcmP9JfUjW
Score

7^/10

aspackv2 discovery persistence
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Deletes itself
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

aspackv2discoverypersistence

behavioral2

aspackv2discoverypersistence