e8e6cc04db055d298e0c25ef3cfe8658bd1247e4412b0d9e919fc4e3a19fb53d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47b2e931cbdeadbd9df6f326cc229a9f_JaffaCakes118
Size

260KB
Sample

240715-b5x59svdkh
MD5

47b2e931cbdeadbd9df6f326cc229a9f
SHA1

a2b44e42f99447a8c882b65440604fc667c0ed1f
SHA256

e8e6cc04db055d298e0c25ef3cfe8658bd1247e4412b0d9e919fc4e3a19fb53d
SHA512

0ce262adf0030744044469f6f21c31cd1fb2c65f8ba39ff64960df3314346429b08596261d975c7d81c35025c27a5474fca3abe08bf88ccc5e5c1a0d40755436
SSDEEP

6144:sOKI5KpFM6LKCcyu6Hnw7gcT4oz5avbKjGflC58q6raQi:sOKIAFM2Kqw7rT4oUbOGfo5oW

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  
  47b2e931cbdeadbd9df6f326cc229a9f_JaffaCakes118
- Size
  
  260KB
- MD5
  
  47b2e931cbdeadbd9df6f326cc229a9f
- SHA1
  
  a2b44e42f99447a8c882b65440604fc667c0ed1f
- SHA256
  
  e8e6cc04db055d298e0c25ef3cfe8658bd1247e4412b0d9e919fc4e3a19fb53d
- SHA512
  
  0ce262adf0030744044469f6f21c31cd1fb2c65f8ba39ff64960df3314346429b08596261d975c7d81c35025c27a5474fca3abe08bf88ccc5e5c1a0d40755436
- SSDEEP
  
  6144:sOKI5KpFM6LKCcyu6Hnw7gcT4oz5avbKjGflC58q6raQi:sOKIAFM2Kqw7rT4oUbOGfo5oW
Score

7^/10

persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2