dd949d0a2bc937d1f93372b360da4ed7226bcfa9b20cfc710b4488f541a7179a | Triage

Sharing

General

Target

09ad52ea39f86a47bd8d2e260c5955e0_JaffaCakes118
Size

126KB
Sample

240624-t9xpeawarp
MD5

09ad52ea39f86a47bd8d2e260c5955e0
SHA1

e4ef158f4463a1825f6978654b7ac43d3821c78e
SHA256

dd949d0a2bc937d1f93372b360da4ed7226bcfa9b20cfc710b4488f541a7179a
SHA512

1964609d01db1b4d0a038e1ee9c71b57a3f50c5330a39a841df706568baf1d31644eed1f88a4a32d6646997277460d2bf412a4db0a0b8fdd49fba079a01b179b
SSDEEP

3072:nBq1MIAxVR4YwsvquRGT29deW/tqxJ8+YuUZEW2K:nBsMIAPRtlqusqUxJVUZEW

Score

10^/10

evasion persistence upx

Malware Config

Targets

- Target
  
  09ad52ea39f86a47bd8d2e260c5955e0_JaffaCakes118
- Size
  
  126KB
- MD5
  
  09ad52ea39f86a47bd8d2e260c5955e0
- SHA1
  
  e4ef158f4463a1825f6978654b7ac43d3821c78e
- SHA256
  
  dd949d0a2bc937d1f93372b360da4ed7226bcfa9b20cfc710b4488f541a7179a
- SHA512
  
  1964609d01db1b4d0a038e1ee9c71b57a3f50c5330a39a841df706568baf1d31644eed1f88a4a32d6646997277460d2bf412a4db0a0b8fdd49fba079a01b179b
- SSDEEP
  
  3072:nBq1MIAxVR4YwsvquRGT29deW/tqxJ8+YuUZEW2K:nBsMIAPRtlqusqUxJVUZEW
Score

10^/10

evasion persistence upx
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2