6ef994a3fb70d939828f829981329fc09169a88b025997b25be6f691a0b4bd26 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02b3b4e68442d192f3ffd18c35e4433d_JaffaCakes118
Size

223KB
Sample

240620-eryresyakb
MD5

02b3b4e68442d192f3ffd18c35e4433d
SHA1

5e24552a5ec34c8e8fbee38d85914708c05c3b5b
SHA256

6ef994a3fb70d939828f829981329fc09169a88b025997b25be6f691a0b4bd26
SHA512

00a3740252e4bc60bff69f3099e14aec93fa06b624812db0a0cdf7853d0a2a7a2d051f0d2813309da3ffb18c113c076630a9326a8432bda4cd38aee81697b840
SSDEEP

6144:fbt/EKDT+F1rrpujIRxOCGOuwBuaUxuydYroRJt0fUoS:jt/EKDGrokQOuwBuaqu8euRoS

Score

10^/10

evasion upx

Malware Config

Targets

- Target
  
  02b3b4e68442d192f3ffd18c35e4433d_JaffaCakes118
- Size
  
  223KB
- MD5
  
  02b3b4e68442d192f3ffd18c35e4433d
- SHA1
  
  5e24552a5ec34c8e8fbee38d85914708c05c3b5b
- SHA256
  
  6ef994a3fb70d939828f829981329fc09169a88b025997b25be6f691a0b4bd26
- SHA512
  
  00a3740252e4bc60bff69f3099e14aec93fa06b624812db0a0cdf7853d0a2a7a2d051f0d2813309da3ffb18c113c076630a9326a8432bda4cd38aee81697b840
- SSDEEP
  
  6144:fbt/EKDT+F1rrpujIRxOCGOuwBuaUxuydYroRJt0fUoS:jt/EKDGrokQOuwBuaqu8euRoS
Score

10^/10

evasion upx
- Modifies security service
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2