f760e5bc04a7d2b7410b28b8b7e2c6d9835a3df0ba512ab2eaff66fe6a7310a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dfbbd6e6872023dbc3afe2859baa021_JaffaCakes118
Size

6KB
Sample

240716-mv3tjs1gkd
MD5

4dfbbd6e6872023dbc3afe2859baa021
SHA1

29e9fdb0fdff743e1d4616af88f385abe3b9ec65
SHA256

f760e5bc04a7d2b7410b28b8b7e2c6d9835a3df0ba512ab2eaff66fe6a7310a6
SHA512

e514e0fd5e37176637e938d2633439e60ea3998228a948afb2e9c6879a0b8044454785f7c480ab7f80e5eda2ef71150a038fb77155a7c1b11e3b024235ffa180
SSDEEP

192:bF2R2Iss06177bcvo/0ByQqqESUjoBP8UNyon4:bERx17cK0Jq/5iFB4

Score

8^/10

evasion persistence privilege_escalation upx

Malware Config

Targets

- Target
  
  4dfbbd6e6872023dbc3afe2859baa021_JaffaCakes118
- Size
  
  6KB
- MD5
  
  4dfbbd6e6872023dbc3afe2859baa021
- SHA1
  
  29e9fdb0fdff743e1d4616af88f385abe3b9ec65
- SHA256
  
  f760e5bc04a7d2b7410b28b8b7e2c6d9835a3df0ba512ab2eaff66fe6a7310a6
- SHA512
  
  e514e0fd5e37176637e938d2633439e60ea3998228a948afb2e9c6879a0b8044454785f7c480ab7f80e5eda2ef71150a038fb77155a7c1b11e3b024235ffa180
- SSDEEP
  
  192:bF2R2Iss06177bcvo/0ByQqqESUjoBP8UNyon4:bERx17cK0Jq/5iFB4
Score

8^/10

evasion persistence privilege_escalation upx
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceprivilege_escalationupx

behavioral2

evasionpersistenceprivilege_escalationupx