36a90f85f5e89066e3cb7154e2a1dc6a465831446923846d7d0dca20b1976caa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8273b6288e73069163d1450fee22ae7c_JaffaCakes118
Size

16KB
Sample

240802-bg8l4a1emb
MD5

8273b6288e73069163d1450fee22ae7c
SHA1

c67bdf2aff3e485336305592aff00a12c8429b8d
SHA256

36a90f85f5e89066e3cb7154e2a1dc6a465831446923846d7d0dca20b1976caa
SHA512

41ec359c72063e3a0c316ee94ec2ae2dd18524b04c7d952c0e129715353e6470df2a30ac96cc273c6fe6434eecb1e38c3ec39b4c8bdc2747fd32667f9dfb31a5
SSDEEP

384:V3jIpTD7/QQZONaSdr0qsxBf0QU5lGNtU:V3s//QkAdMx50756tU

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  8273b6288e73069163d1450fee22ae7c_JaffaCakes118
- Size
  
  16KB
- MD5
  
  8273b6288e73069163d1450fee22ae7c
- SHA1
  
  c67bdf2aff3e485336305592aff00a12c8429b8d
- SHA256
  
  36a90f85f5e89066e3cb7154e2a1dc6a465831446923846d7d0dca20b1976caa
- SHA512
  
  41ec359c72063e3a0c316ee94ec2ae2dd18524b04c7d952c0e129715353e6470df2a30ac96cc273c6fe6434eecb1e38c3ec39b4c8bdc2747fd32667f9dfb31a5
- SSDEEP
  
  384:V3jIpTD7/QQZONaSdr0qsxBf0QU5lGNtU:V3s//QkAdMx50756tU
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx