cf9e817be5e880438d725cf50851ea14dd4b3ef1679599377aecb3ceb8a4acf4 | Triage

Sharing

General

Target

78f51dc2278cd62782f8e82348090292_JaffaCakes118
Size

8KB
Sample

240727-v11kdatdpe
MD5

78f51dc2278cd62782f8e82348090292
SHA1

1daf179c8fb09b832b5109272a61ad44180a9297
SHA256

cf9e817be5e880438d725cf50851ea14dd4b3ef1679599377aecb3ceb8a4acf4
SHA512

055b0e1bc2d6781411004dfcc61bf0a6aab5f3d447d3af26f92664970a8547b585093d3a1067e676f41e76d9e7a17fbe1e8221c3a8688ff707cdff31ff5d9cfe
SSDEEP

192:4LHI9CXU/KBVh/I8N27DCgongxgtotMTy:Tm4KBVhTNwWn9tott

Score

8^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  78f51dc2278cd62782f8e82348090292_JaffaCakes118
- Size
  
  8KB
- MD5
  
  78f51dc2278cd62782f8e82348090292
- SHA1
  
  1daf179c8fb09b832b5109272a61ad44180a9297
- SHA256
  
  cf9e817be5e880438d725cf50851ea14dd4b3ef1679599377aecb3ceb8a4acf4
- SHA512
  
  055b0e1bc2d6781411004dfcc61bf0a6aab5f3d447d3af26f92664970a8547b585093d3a1067e676f41e76d9e7a17fbe1e8221c3a8688ff707cdff31ff5d9cfe
- SSDEEP
  
  192:4LHI9CXU/KBVh/I8N27DCgongxgtotMTy:Tm4KBVhTNwWn9tott
Score

8^/10

discovery persistence upx
- Adds policy Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceupx