e218b7a245de1853707f9f4a164e7b6f08de4e681a51075993cd1a4000210b38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73023e91dfb2e30b848fe984139c59df_JaffaCakes118
Size

491KB
Sample

240726-hn656sseqj
MD5

73023e91dfb2e30b848fe984139c59df
SHA1

930e590d1e4ddc193b42086cd41be2c0128c9d8a
SHA256

e218b7a245de1853707f9f4a164e7b6f08de4e681a51075993cd1a4000210b38
SHA512

48814a23b34fd5d94fa9a75cec6c6a9207e425489f82f835e3e1e5c823c46b1cac5d7e746094f6bc5903a3de83ef983a1e6103770781d69bc3e0d863a065c35d
SSDEEP

6144:osrd371+7pi0zmx+mHMh6+0zJh1JkNjja4Ayn2NThWNDd:oy674Q9hcWtgLa

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  73023e91dfb2e30b848fe984139c59df_JaffaCakes118
- Size
  
  491KB
- MD5
  
  73023e91dfb2e30b848fe984139c59df
- SHA1
  
  930e590d1e4ddc193b42086cd41be2c0128c9d8a
- SHA256
  
  e218b7a245de1853707f9f4a164e7b6f08de4e681a51075993cd1a4000210b38
- SHA512
  
  48814a23b34fd5d94fa9a75cec6c6a9207e425489f82f835e3e1e5c823c46b1cac5d7e746094f6bc5903a3de83ef983a1e6103770781d69bc3e0d863a065c35d
- SSDEEP
  
  6144:osrd371+7pi0zmx+mHMh6+0zJh1JkNjja4Ayn2NThWNDd:oy674Q9hcWtgLa
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx