9598cc995eef951a4732458b73e00c09550ffb83a482c27e0d1305678db09d98 | Triage

Sharing

General

Target

36903fa8aa7e59572afbfe6c42db7516_JaffaCakes118
Size

139KB
Sample

240710-1wxktasdkj
MD5

36903fa8aa7e59572afbfe6c42db7516
SHA1

a9f24ce73b6e068ea81d632c9a4c3ba03da76ab7
SHA256

9598cc995eef951a4732458b73e00c09550ffb83a482c27e0d1305678db09d98
SHA512

70b5708cdcf50ece710fac759820ae6b6d8a1fccf1cc4505155d06b25fa19ef638d5519a746c24a612a650e15225a81792468d4924635aab8782280896849112
SSDEEP

3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  36903fa8aa7e59572afbfe6c42db7516_JaffaCakes118
- Size
  
  139KB
- MD5
  
  36903fa8aa7e59572afbfe6c42db7516
- SHA1
  
  a9f24ce73b6e068ea81d632c9a4c3ba03da76ab7
- SHA256
  
  9598cc995eef951a4732458b73e00c09550ffb83a482c27e0d1305678db09d98
- SHA512
  
  70b5708cdcf50ece710fac759820ae6b6d8a1fccf1cc4505155d06b25fa19ef638d5519a746c24a612a650e15225a81792468d4924635aab8782280896849112
- SSDEEP
  
  3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Score

7^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2