0e515234fd1606243c80cbad4376192e0ed3c1334a6549740d82d1e387302e6d | Triage

Sharing

General

Target

403a27d883e93d61ffea75d0613ba10d_JaffaCakes118
Size

39KB
Sample

240713-e8gt8swcqp
MD5

403a27d883e93d61ffea75d0613ba10d
SHA1

cc2c8cc5f26fdfb73b3c28cfb4c91166b3d53593
SHA256

0e515234fd1606243c80cbad4376192e0ed3c1334a6549740d82d1e387302e6d
SHA512

232b2b19b160c66606b00063365e9de17f8dd40b2e1b0bbfc3b9219339f3a2dc861c5c77aefe22f1bd77364a86fdab76310bd8c9542e2a308d5c9791f66df16a
SSDEEP

768:6GFwGB35VIjknJ29ixX9KXXqjdTCXp89sx8/YW1v67oAJfFhWw:6GF2jeLxX4XadTMaCsYN7oAJdP

Score

10^/10

persistence upx

Malware Config

Targets

- Target
  
  403a27d883e93d61ffea75d0613ba10d_JaffaCakes118
- Size
  
  39KB
- MD5
  
  403a27d883e93d61ffea75d0613ba10d
- SHA1
  
  cc2c8cc5f26fdfb73b3c28cfb4c91166b3d53593
- SHA256
  
  0e515234fd1606243c80cbad4376192e0ed3c1334a6549740d82d1e387302e6d
- SHA512
  
  232b2b19b160c66606b00063365e9de17f8dd40b2e1b0bbfc3b9219339f3a2dc861c5c77aefe22f1bd77364a86fdab76310bd8c9542e2a308d5c9791f66df16a
- SSDEEP
  
  768:6GFwGB35VIjknJ29ixX9KXXqjdTCXp89sx8/YW1v67oAJfFhWw:6GF2jeLxX4XadTMaCsYN7oAJdP
Score

10^/10

persistence upx
- Modifies WinLogon for persistence
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2