bd3af38b9a74a61973a9ab812675ad96208e6f9c198486b4af7cac5c0f7cfc2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8438ae029cd8407aff55c78501a274a_JaffaCakes118
Size

21KB
Sample

240408-ygtjhadc8w
MD5

e8438ae029cd8407aff55c78501a274a
SHA1

597c77b25cb1fe59a4714547654547d050838bff
SHA256

bd3af38b9a74a61973a9ab812675ad96208e6f9c198486b4af7cac5c0f7cfc2b
SHA512

b7c7e4f9508019ca5815b8b8739503bfa1e1edf78727b90af077a3d59991c64e76b1bb8b652650d1d3fce95a6183b991ab0dbb555bec1f03e800ff54f95b7007
SSDEEP

384:qMLWCpCJ6xhD8+kg7QpFls56uDo4WEpF5Z1BRIqd8jXU3bj2OTo:pzZj8+d7QpFHuDoTOFPfL3bj7

Score

8^/10

evasion upx

Malware Config

Targets

- Target
  
  e8438ae029cd8407aff55c78501a274a_JaffaCakes118
- Size
  
  21KB
- MD5
  
  e8438ae029cd8407aff55c78501a274a
- SHA1
  
  597c77b25cb1fe59a4714547654547d050838bff
- SHA256
  
  bd3af38b9a74a61973a9ab812675ad96208e6f9c198486b4af7cac5c0f7cfc2b
- SHA512
  
  b7c7e4f9508019ca5815b8b8739503bfa1e1edf78727b90af077a3d59991c64e76b1bb8b652650d1d3fce95a6183b991ab0dbb555bec1f03e800ff54f95b7007
- SSDEEP
  
  384:qMLWCpCJ6xhD8+kg7QpFls56uDo4WEpF5Z1BRIqd8jXU3bj2OTo:pzZj8+d7QpFHuDoTOFPfL3bj7
Score

8^/10

evasion upx
- Stops running service(s)
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

behavioral2