dec60926fa09dfc5178eb31cf5a9ec381e9e533b74a154addea9fd1635ff9ad6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ada269aa4c559788db4ae10c5dabe16_JaffaCakes118
Size

137KB
Sample

240711-1rsq3awark
MD5

3ada269aa4c559788db4ae10c5dabe16
SHA1

2085e679a9af4d47ad99a39a7b2379d2b8028d4e
SHA256

dec60926fa09dfc5178eb31cf5a9ec381e9e533b74a154addea9fd1635ff9ad6
SHA512

099ed9e22d6905a5d38326306a159e83f21110cf252a869443d2a154a10100b4508ebee78f1f358f27bfab45800e87aa8a762da1203273be4da24d862a87e198
SSDEEP

1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53WB:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  3ada269aa4c559788db4ae10c5dabe16_JaffaCakes118
- Size
  
  137KB
- MD5
  
  3ada269aa4c559788db4ae10c5dabe16
- SHA1
  
  2085e679a9af4d47ad99a39a7b2379d2b8028d4e
- SHA256
  
  dec60926fa09dfc5178eb31cf5a9ec381e9e533b74a154addea9fd1635ff9ad6
- SHA512
  
  099ed9e22d6905a5d38326306a159e83f21110cf252a869443d2a154a10100b4508ebee78f1f358f27bfab45800e87aa8a762da1203273be4da24d862a87e198
- SSDEEP
  
  1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53WB:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Score

7^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2