3635eda15ed00987e8d653fbcc2f9feb52556fb414fb0555464cd8601cc742bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6506e7ee00f56492b96b6c6a55291e76_JaffaCakes118
Size

95KB
Sample

240722-1986rssckq
MD5

6506e7ee00f56492b96b6c6a55291e76
SHA1

93eb2e5d150f9286a8ce8900be4ce15ce01ecc13
SHA256

3635eda15ed00987e8d653fbcc2f9feb52556fb414fb0555464cd8601cc742bb
SHA512

0c2b139158230891a0684f2ef1993c3261457ec644a3c795378dc910d079bf2f94706d8311f056a427cb427d6a737b18ca6478671ef6b9ef3468abef13fe3941
SSDEEP

1536:EuM08IPteBvzchGyDMZqbZ09YhFOhIOOWXls+XQr1QnoJWfbCPHqTlO7r:V8I0NPgIqNSA0aOxboJWfG/qJ0r

Score

8^/10

persistence upx

Malware Config

Targets

- Target
  
  6506e7ee00f56492b96b6c6a55291e76_JaffaCakes118
- Size
  
  95KB
- MD5
  
  6506e7ee00f56492b96b6c6a55291e76
- SHA1
  
  93eb2e5d150f9286a8ce8900be4ce15ce01ecc13
- SHA256
  
  3635eda15ed00987e8d653fbcc2f9feb52556fb414fb0555464cd8601cc742bb
- SHA512
  
  0c2b139158230891a0684f2ef1993c3261457ec644a3c795378dc910d079bf2f94706d8311f056a427cb427d6a737b18ca6478671ef6b9ef3468abef13fe3941
- SSDEEP
  
  1536:EuM08IPteBvzchGyDMZqbZ09YhFOhIOOWXls+XQr1QnoJWfbCPHqTlO7r:V8I0NPgIqNSA0aOxboJWfG/qJ0r
Score

8^/10

persistence upx
- Server Software Component: Terminal Services DLL
  persistence
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Server Software Component

Terminal Services DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2