9fcc3df66029190af08c07d9f6ee6a3707bb84c8d727579f402b9fdce791e808 | Triage

Sharing

General

Target

366538a418a4c36e9f6a4d2193fa4bc7_JaffaCakes118
Size

145KB
Sample

240710-zz8xkszfml
MD5

366538a418a4c36e9f6a4d2193fa4bc7
SHA1

87a4ab452f3fe3b1815bbaaa44538cc375b32a31
SHA256

9fcc3df66029190af08c07d9f6ee6a3707bb84c8d727579f402b9fdce791e808
SHA512

5848ceb8240ae3ad34c797fa0f6f591104c0a043393e8287a2c184b2695acbb863d8ba4c1306878f652571f6378514e4d305bfc11b2c3b78901991a90fdfcbce
SSDEEP

3072:UOxtKfasWVDVrlGlEkfjLk1SebGQQeKNYydadMMDd/HbqoutHB77777J77c77c7s:UOzKLMVr8LfjWbG+ZMgdeoSHB77777Jw

Score

10^/10

evasion trojan upx

Malware Config

Targets

- Target
  
  366538a418a4c36e9f6a4d2193fa4bc7_JaffaCakes118
- Size
  
  145KB
- MD5
  
  366538a418a4c36e9f6a4d2193fa4bc7
- SHA1
  
  87a4ab452f3fe3b1815bbaaa44538cc375b32a31
- SHA256
  
  9fcc3df66029190af08c07d9f6ee6a3707bb84c8d727579f402b9fdce791e808
- SHA512
  
  5848ceb8240ae3ad34c797fa0f6f591104c0a043393e8287a2c184b2695acbb863d8ba4c1306878f652571f6378514e4d305bfc11b2c3b78901991a90fdfcbce
- SSDEEP
  
  3072:UOxtKfasWVDVrlGlEkfjLk1SebGQQeKNYydadMMDd/HbqoutHB77777J77c77c7s:UOzKLMVr8LfjWbG+ZMgdeoSHB77777Jw
Score

10^/10

evasion trojan upx
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasiontrojanupx

behavioral2

evasiontrojanupx