475501e39abfcb3c2c6ee4236ae95d8376a07da97b874a52432f514dc88e81b5 | Triage

Sharing

General

Target

71452a4962ca4a5932694d61c4074858_JaffaCakes118
Size

88KB
Sample

240725-z437wsybmd
MD5

71452a4962ca4a5932694d61c4074858
SHA1

7115472ae5510b718621a2b7dfd53cb80c0d8efe
SHA256

475501e39abfcb3c2c6ee4236ae95d8376a07da97b874a52432f514dc88e81b5
SHA512

7dc50109844cf64fbd635958c081b58e37e10010f98d11c80c8319aba3c07d0a8dff1603f7d0bd856f657cdd0d9c9c2a1828272bb7769cbcd6db4012dd3a51b6
SSDEEP

1536:CGC3/IZDlYZedlywtuYMD8WZCyOmBqNgMuXlPcIXpu3jsve7GNkPHgYS66lyp9H:LsIxlhFuY64NNmlEIX1ve7GNkPgYGl81

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  71452a4962ca4a5932694d61c4074858_JaffaCakes118
- Size
  
  88KB
- MD5
  
  71452a4962ca4a5932694d61c4074858
- SHA1
  
  7115472ae5510b718621a2b7dfd53cb80c0d8efe
- SHA256
  
  475501e39abfcb3c2c6ee4236ae95d8376a07da97b874a52432f514dc88e81b5
- SHA512
  
  7dc50109844cf64fbd635958c081b58e37e10010f98d11c80c8319aba3c07d0a8dff1603f7d0bd856f657cdd0d9c9c2a1828272bb7769cbcd6db4012dd3a51b6
- SSDEEP
  
  1536:CGC3/IZDlYZedlywtuYMD8WZCyOmBqNgMuXlPcIXpu3jsve7GNkPHgYS66lyp9H:LsIxlhFuY64NNmlEIX1ve7GNkPgYGl81
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx