7444b61abc7befaac98aa26ad622740d4169e1aa3b712f061f3c207e97f2e581 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73b4c2d03a0d9321825028225ab3d965_JaffaCakes118
Size

12KB
Sample

240726-mqp2wssdqr
MD5

73b4c2d03a0d9321825028225ab3d965
SHA1

1f9ed11682173101b0a24b690b465f8658316bbb
SHA256

7444b61abc7befaac98aa26ad622740d4169e1aa3b712f061f3c207e97f2e581
SHA512

4dec5e01ca00147682c6a9af3ca5a5122369b2e3368290299dee603ee16a1b630870946e385491e747967207edace87ceeea97d27bc21794213d60826e7bf7f3
SSDEEP

384:YP4FWD1O+AQ21zqy7Gkh+LizlTtXKegsHuYF64R5I3rYl:YPZmVJtY25hXKegsHuYUOGb8

Score

10^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  73b4c2d03a0d9321825028225ab3d965_JaffaCakes118
- Size
  
  12KB
- MD5
  
  73b4c2d03a0d9321825028225ab3d965
- SHA1
  
  1f9ed11682173101b0a24b690b465f8658316bbb
- SHA256
  
  7444b61abc7befaac98aa26ad622740d4169e1aa3b712f061f3c207e97f2e581
- SHA512
  
  4dec5e01ca00147682c6a9af3ca5a5122369b2e3368290299dee603ee16a1b630870946e385491e747967207edace87ceeea97d27bc21794213d60826e7bf7f3
- SSDEEP
  
  384:YP4FWD1O+AQ21zqy7Gkh+LizlTtXKegsHuYF64R5I3rYl:YPZmVJtY25hXKegsHuYUOGb8
Score

10^/10

discovery evasion execution upx
- Disables service(s)
  evasion execution
- Stops running service(s)
  evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx