9f9c723f70673656a68ba5f47778757d7a27bfe6f21bc78005107e19e737ab5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

766928cfde67f943fc4498d48a9c84ea_JaffaCakes118
Size

188KB
Sample

240727-a2aecsvgnl
MD5

766928cfde67f943fc4498d48a9c84ea
SHA1

4184c5ccb07b22d5afd2d332afa16e91db5ce7b1
SHA256

9f9c723f70673656a68ba5f47778757d7a27bfe6f21bc78005107e19e737ab5e
SHA512

3db413a956d81a495ad25aad9405cd1227e7429568e1628a8e500289b601ef077b90ba1624a6f0ed52326f0d13bcbe2f1abc252b91d6181941b096a87f94541d
SSDEEP

3072:OaObYrSD4kjua2DH4xWT5GWp1icKAArDZz4N9GhbkrNEk/NLAh8vnEDRX9eBT:OaKMSD4Yuaelp0yN90QE79e

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  766928cfde67f943fc4498d48a9c84ea_JaffaCakes118
- Size
  
  188KB
- MD5
  
  766928cfde67f943fc4498d48a9c84ea
- SHA1
  
  4184c5ccb07b22d5afd2d332afa16e91db5ce7b1
- SHA256
  
  9f9c723f70673656a68ba5f47778757d7a27bfe6f21bc78005107e19e737ab5e
- SHA512
  
  3db413a956d81a495ad25aad9405cd1227e7429568e1628a8e500289b601ef077b90ba1624a6f0ed52326f0d13bcbe2f1abc252b91d6181941b096a87f94541d
- SSDEEP
  
  3072:OaObYrSD4kjua2DH4xWT5GWp1icKAArDZz4N9GhbkrNEk/NLAh8vnEDRX9eBT:OaKMSD4Yuaelp0yN90QE79e
Score

7^/10

persistence upx discovery
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceupx