bd39ea9e417966f63f0359733edea3d4969c321e774aa329943199cd27c7d141 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

305712e6c38ba93a019f64a0f7e80278_JaffaCakes118
Size

21KB
Sample

240709-pfsfdatejp
MD5

305712e6c38ba93a019f64a0f7e80278
SHA1

6a129713f11d645b673d7730f37d9ecb87e14455
SHA256

bd39ea9e417966f63f0359733edea3d4969c321e774aa329943199cd27c7d141
SHA512

1565be1ac59977770674d2f04d5f69ac6bf36fd7836627527ba62cad8121c60996250988a17c3946e98cc7bb2e7f2e645b9254b0149957f51826a2225f4651df
SSDEEP

384:ZLWCpCJ6x37z8MxLvLW9GhOEv+fmuhx+VqC0eWPpnwDL9ADemjx5uo:VzZhFxLDW9Gc9fmuhxKqCCyL93mP

Score

8^/10

evasion execution upx

Malware Config

Targets

- Target
  
  305712e6c38ba93a019f64a0f7e80278_JaffaCakes118
- Size
  
  21KB
- MD5
  
  305712e6c38ba93a019f64a0f7e80278
- SHA1
  
  6a129713f11d645b673d7730f37d9ecb87e14455
- SHA256
  
  bd39ea9e417966f63f0359733edea3d4969c321e774aa329943199cd27c7d141
- SHA512
  
  1565be1ac59977770674d2f04d5f69ac6bf36fd7836627527ba62cad8121c60996250988a17c3946e98cc7bb2e7f2e645b9254b0149957f51826a2225f4651df
- SSDEEP
  
  384:ZLWCpCJ6x37z8MxLvLW9GhOEv+fmuhx+VqC0eWPpnwDL9ADemjx5uo:VzZhFxLDW9Gc9fmuhxKqCCyL93mP
Score

8^/10

evasion execution upx
- Stops running service(s)
  evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecutionupx

behavioral2

evasionexecutionupx