dc1e77dd355174e7169354715e8fd835331bc89ac6e8d04c6069cce6a63908c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17ada381ba3f9585f41f23dbbfe1f36c_JaffaCakes118
Size

169KB
Sample

240627-1vyfqatanc
MD5

17ada381ba3f9585f41f23dbbfe1f36c
SHA1

52ca380a19fdca98d035b07bfc87916f0589cf65
SHA256

dc1e77dd355174e7169354715e8fd835331bc89ac6e8d04c6069cce6a63908c8
SHA512

a54251ff4e6d3f949ba3165ddc16550d16dd45659bdc9ccba26d8fa26f11650614753cd9825534fbc66c9d5b11a41a824e7bb4e05d3af3345782d8a65275ee6c
SSDEEP

1536:KEZRuWrgQfLdD+IlLR9gWqbqtw0afmKJD2a6PHiv0CPhSZNt7AucP7Sa11:KEFrgQTdRlLLgW1t9ep0Cv0CPhUBGTb

Score

10^/10

evasion upx

Malware Config

Targets

- Target
  
  17ada381ba3f9585f41f23dbbfe1f36c_JaffaCakes118
- Size
  
  169KB
- MD5
  
  17ada381ba3f9585f41f23dbbfe1f36c
- SHA1
  
  52ca380a19fdca98d035b07bfc87916f0589cf65
- SHA256
  
  dc1e77dd355174e7169354715e8fd835331bc89ac6e8d04c6069cce6a63908c8
- SHA512
  
  a54251ff4e6d3f949ba3165ddc16550d16dd45659bdc9ccba26d8fa26f11650614753cd9825534fbc66c9d5b11a41a824e7bb4e05d3af3345782d8a65275ee6c
- SSDEEP
  
  1536:KEZRuWrgQfLdD+IlLR9gWqbqtw0afmKJD2a6PHiv0CPhSZNt7AucP7Sa11:KEFrgQTdRlLLgW1t9ep0Cv0CPhUBGTb
Score

10^/10

upx evasion
- Modifies firewall policy service
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2