ef1ae65b91c44b6f21b5008f8e2d10021e92e1cc1f6aea31636d1438ded0684a | Triage

Sharing

General

Target

21bfd3c7575915a1475b76ed3fbc32d6_JaffaCakes118
Size

140KB
Sample

240703-kn3tvsygpl
MD5

21bfd3c7575915a1475b76ed3fbc32d6
SHA1

99a4d8bf34ed0845403db40ea99a6ea95894b418
SHA256

ef1ae65b91c44b6f21b5008f8e2d10021e92e1cc1f6aea31636d1438ded0684a
SHA512

b94cf19c8f970d777593676743d5d6d7e0cf4e8b05cba5c33cd7c4872fd9c7fe7ecce55a84d1178adc1892f0bea3230876db2611ecbe3117794af1cde8cdc30c
SSDEEP

3072:rZzIQZk9fN8RjurfgV9LWxfa77FsUyhxD/:rZkykQRjhVJW+6

Score

10^/10

evasion upx

Malware Config

Targets

- Target
  
  21bfd3c7575915a1475b76ed3fbc32d6_JaffaCakes118
- Size
  
  140KB
- MD5
  
  21bfd3c7575915a1475b76ed3fbc32d6
- SHA1
  
  99a4d8bf34ed0845403db40ea99a6ea95894b418
- SHA256
  
  ef1ae65b91c44b6f21b5008f8e2d10021e92e1cc1f6aea31636d1438ded0684a
- SHA512
  
  b94cf19c8f970d777593676743d5d6d7e0cf4e8b05cba5c33cd7c4872fd9c7fe7ecce55a84d1178adc1892f0bea3230876db2611ecbe3117794af1cde8cdc30c
- SSDEEP
  
  3072:rZzIQZk9fN8RjurfgV9LWxfa77FsUyhxD/:rZkykQRjhVJW+6
Score

10^/10

upx evasion
- Modifies firewall policy service
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2