755bd412f93da31cf4c6eb267eb9e2b4d02daa18e6b7c255dbe527dc5f83b0fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33742ec7d61d314fa59a887636f904d1_JaffaCakes118
Size

21KB
Sample

240710-f2z8ns1cph
MD5

33742ec7d61d314fa59a887636f904d1
SHA1

7f108819addc0a61650d7e574192214cebc9292b
SHA256

755bd412f93da31cf4c6eb267eb9e2b4d02daa18e6b7c255dbe527dc5f83b0fd
SHA512

0d6dd82e72213c0de031099730e0c98adc9dff200e455d9e0312f33c72804d1a0dd0e0560c54665f221eff7fe99e3eae99b98c6543421142d3d491591cb36562
SSDEEP

384:aLWCpCJ6x37z8MxLvLW9GhOEv+fmuhx+VqC0eWPpnwDL9ADemjx5uo:gzZhFxLDW9Gc9fmuhxKqCCyL93mP

Score

8^/10

evasion execution upx

Malware Config

Targets

- Target
  
  33742ec7d61d314fa59a887636f904d1_JaffaCakes118
- Size
  
  21KB
- MD5
  
  33742ec7d61d314fa59a887636f904d1
- SHA1
  
  7f108819addc0a61650d7e574192214cebc9292b
- SHA256
  
  755bd412f93da31cf4c6eb267eb9e2b4d02daa18e6b7c255dbe527dc5f83b0fd
- SHA512
  
  0d6dd82e72213c0de031099730e0c98adc9dff200e455d9e0312f33c72804d1a0dd0e0560c54665f221eff7fe99e3eae99b98c6543421142d3d491591cb36562
- SSDEEP
  
  384:aLWCpCJ6x37z8MxLvLW9GhOEv+fmuhx+VqC0eWPpnwDL9ADemjx5uo:gzZhFxLDW9Gc9fmuhxKqCCyL93mP
Score

8^/10

evasion execution upx
- Stops running service(s)
  evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

evasionexecutionupx

behavioral2

evasionexecutionupx