9b97372959aea36bc303cfc568f6d33b34cf505f0364ac4ff385c1d7c45f4a48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

075af5ccf37036756e02fc466683e577_JaffaCakes118
Size

26KB
Sample

240620-s2lfqsyhkl
MD5

075af5ccf37036756e02fc466683e577
SHA1

2fd8583c01351b22054d469c2f2dc27ae79eb4c1
SHA256

9b97372959aea36bc303cfc568f6d33b34cf505f0364ac4ff385c1d7c45f4a48
SHA512

5b10d712559807053ff6a385f663726610eaac9ca5cbc688136aee6b929956af934b5a50ecf936d1891da68703df6dc718091761d9d1bbf6c5534a560ec24c8e
SSDEEP

384:JHfT6e2Ms460HK0FVqC5Qly54/XoF4hym836K40iPXE8nK/mFeklzp+nWlWYC:9fT6e2MJ9RFNQg4/oF41PE8nK4lzc+

Score

8^/10

evasion execution upx

Malware Config

Targets

- Target
  
  075af5ccf37036756e02fc466683e577_JaffaCakes118
- Size
  
  26KB
- MD5
  
  075af5ccf37036756e02fc466683e577
- SHA1
  
  2fd8583c01351b22054d469c2f2dc27ae79eb4c1
- SHA256
  
  9b97372959aea36bc303cfc568f6d33b34cf505f0364ac4ff385c1d7c45f4a48
- SHA512
  
  5b10d712559807053ff6a385f663726610eaac9ca5cbc688136aee6b929956af934b5a50ecf936d1891da68703df6dc718091761d9d1bbf6c5534a560ec24c8e
- SSDEEP
  
  384:JHfT6e2Ms460HK0FVqC5Qly54/XoF4hym836K40iPXE8nK/mFeklzp+nWlWYC:9fT6e2MJ9RFNQg4/oF41PE8nK4lzc+
Score

8^/10

evasion execution upx
- Stops running service(s)
  evasion execution
- Deletes itself
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecutionupx

behavioral2

evasionexecutionupx