fc831b18fd013eca37e55095c984333ac8929b6993142e2bf04bf788a1c18b5e | Triage

Sharing

General

Target

eb05eb24f36c37912f71843ba0598c6d_JaffaCakes118
Size

3.9MB
Sample

240410-n69lxaaa61
MD5

eb05eb24f36c37912f71843ba0598c6d
SHA1

f49a2687598045f00f8870e9cffbf9a3365f124d
SHA256

fc831b18fd013eca37e55095c984333ac8929b6993142e2bf04bf788a1c18b5e
SHA512

8effe6f7f09b1f556bc48541863a2d52e066521efc711506798b4c7e6ef5ab5888834a26853c4923bfbbed2130baa255e32c00fc7df4280ddf3f4c073802eaae
SSDEEP

98304:4Bj4EjN3rcakcibiqhMbMgOn7n0bcakcibiqhG/JewlX9HGnrcakcibiqhMbMgO1:sjVBbdlirybMgOnkdlirhwlXhGnrdlix

Score

7^/10

upx

Malware Config

Targets

- Target
  
  eb05eb24f36c37912f71843ba0598c6d_JaffaCakes118
- Size
  
  3.9MB
- MD5
  
  eb05eb24f36c37912f71843ba0598c6d
- SHA1
  
  f49a2687598045f00f8870e9cffbf9a3365f124d
- SHA256
  
  fc831b18fd013eca37e55095c984333ac8929b6993142e2bf04bf788a1c18b5e
- SHA512
  
  8effe6f7f09b1f556bc48541863a2d52e066521efc711506798b4c7e6ef5ab5888834a26853c4923bfbbed2130baa255e32c00fc7df4280ddf3f4c073802eaae
- SSDEEP
  
  98304:4Bj4EjN3rcakcibiqhMbMgOn7n0bcakcibiqhG/JewlX9HGnrcakcibiqhMbMgO1:sjVBbdlirybMgOnkdlirhwlXhGnrdlix
Score

7^/10

upx
- Deletes itself
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2