b396e362c1d32d61fb654c2766025fcb8a86bc26776ad1f478ffb43a4bfc8878 | Triage

Sharing

General

Target

8605a1a556926842a95ab84eda97af74_JaffaCakes118
Size

48KB
Sample

240810-pgaxqayfjr
MD5

8605a1a556926842a95ab84eda97af74
SHA1

670b9eeac6080b26541ede974941fc7032e13c6d
SHA256

b396e362c1d32d61fb654c2766025fcb8a86bc26776ad1f478ffb43a4bfc8878
SHA512

50b9f2fd804465bcc149174d45c81bdede5a2f7cf98b99cda88b6f1110710acb8a21a01f5f1d7c6e7c4db4e4679a9a2afef6dd2ad52538eee246de49a47f11fb
SSDEEP

768:jVhHmMth6A4Uq6y+KkIP8c5+L/xa7JABVS06lyuoNDCktKXjlyoqpkXf:jzHmMthuUq9+Kk48C+QJAuoNgXjlyo6k

Score

10^/10

discovery evasion persistence trojan upx

Malware Config

Targets

- Target
  
  8605a1a556926842a95ab84eda97af74_JaffaCakes118
- Size
  
  48KB
- MD5
  
  8605a1a556926842a95ab84eda97af74
- SHA1
  
  670b9eeac6080b26541ede974941fc7032e13c6d
- SHA256
  
  b396e362c1d32d61fb654c2766025fcb8a86bc26776ad1f478ffb43a4bfc8878
- SHA512
  
  50b9f2fd804465bcc149174d45c81bdede5a2f7cf98b99cda88b6f1110710acb8a21a01f5f1d7c6e7c4db4e4679a9a2afef6dd2ad52538eee246de49a47f11fb
- SSDEEP
  
  768:jVhHmMth6A4Uq6y+KkIP8c5+L/xa7JABVS06lyuoNDCktKXjlyoqpkXf:jzHmMthuUq9+Kk48C+QJAuoNgXjlyo6k
Score

10^/10

discovery evasion persistence trojan upx
- UAC bypass
  evasion trojan
- Deletes itself
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojanupx

behavioral2

discoveryevasionpersistencetrojanupx