441572ff6f9caf3598d2b63c9560ab5015a23aa22ef0ed136cde64dfb5a142db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69edf15eaffd34c9a97f25b7f0985c46_JaffaCakes118
Size

21KB
Sample

240724-c1drhawfmd
MD5

69edf15eaffd34c9a97f25b7f0985c46
SHA1

487bbac44e9c63eff34a2be3654fbabafa280e44
SHA256

441572ff6f9caf3598d2b63c9560ab5015a23aa22ef0ed136cde64dfb5a142db
SHA512

65485639ab3bee4aa88e0e4a5755fddfddd6f45dcb26e89f6ef74a58fb0abfa0f0f6722fb5f95b0b01edfe738d9ce907fcf70933df7bb357027f387e642258f0
SSDEEP

384:xLWCpCJ6x37z8MxLvLW9GhOEv+fmuhx+VqC0eWPpnwDL9ADemjx5uo:dzZhFxLDW9Gc9fmuhxKqCCyL93mP

Score

8^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  69edf15eaffd34c9a97f25b7f0985c46_JaffaCakes118
- Size
  
  21KB
- MD5
  
  69edf15eaffd34c9a97f25b7f0985c46
- SHA1
  
  487bbac44e9c63eff34a2be3654fbabafa280e44
- SHA256
  
  441572ff6f9caf3598d2b63c9560ab5015a23aa22ef0ed136cde64dfb5a142db
- SHA512
  
  65485639ab3bee4aa88e0e4a5755fddfddd6f45dcb26e89f6ef74a58fb0abfa0f0f6722fb5f95b0b01edfe738d9ce907fcf70933df7bb357027f387e642258f0
- SSDEEP
  
  384:xLWCpCJ6x37z8MxLvLW9GhOEv+fmuhx+VqC0eWPpnwDL9ADemjx5uo:dzZhFxLDW9Gc9fmuhxKqCCyL93mP
Score

8^/10

discovery evasion execution upx
- Stops running service(s)
  evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx