ce8863eb87f777b12222c87efae3c61e8a9aaacb2954e374fbc59f4e44d9af06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b07eedbf3caef02fb0e1e118a9a0d25_JaffaCakes118
Size

349KB
Sample

240701-m2ys6s1bpp
MD5

1b07eedbf3caef02fb0e1e118a9a0d25
SHA1

9ca508097c608dacb03e1288c495b0c32bd72934
SHA256

ce8863eb87f777b12222c87efae3c61e8a9aaacb2954e374fbc59f4e44d9af06
SHA512

da017eb2a96d12cc046fe31becd568a14050a4444208141cf804da24915364c3f4f8e3ee6315d4216b5ca8b5d0a960e5c444e693d9be1ad8b21c294e63d26499
SSDEEP

3072:KxSJlwjDupyErfX/lm+qbNyellxBqUgdRac3FzTDTHlYdHtL+iyCGDgFxqv8RfyZ:7Xdm+qkzzHkR8vvw3qmM5F4v74ylLf+j

Score

10^/10

persistence upx

Malware Config

Targets

- Target
  
  1b07eedbf3caef02fb0e1e118a9a0d25_JaffaCakes118
- Size
  
  349KB
- MD5
  
  1b07eedbf3caef02fb0e1e118a9a0d25
- SHA1
  
  9ca508097c608dacb03e1288c495b0c32bd72934
- SHA256
  
  ce8863eb87f777b12222c87efae3c61e8a9aaacb2954e374fbc59f4e44d9af06
- SHA512
  
  da017eb2a96d12cc046fe31becd568a14050a4444208141cf804da24915364c3f4f8e3ee6315d4216b5ca8b5d0a960e5c444e693d9be1ad8b21c294e63d26499
- SSDEEP
  
  3072:KxSJlwjDupyErfX/lm+qbNyellxBqUgdRac3FzTDTHlYdHtL+iyCGDgFxqv8RfyZ:7Xdm+qkzzHkR8vvw3qmM5F4v74ylLf+j
Score

10^/10

persistence upx
- Modifies WinLogon for persistence
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2