e1f89fdd0193c44ecb6562424851fe9abad4178f40d9dd3964dbcb69f0a2e7ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

863b5d2c84f4ee7889191be12039c321_JaffaCakes118
Size

414KB
Sample

240810-qqd66svhqg
MD5

863b5d2c84f4ee7889191be12039c321
SHA1

20315e8c53e1ffcb950c74a671f5f3b35348f490
SHA256

e1f89fdd0193c44ecb6562424851fe9abad4178f40d9dd3964dbcb69f0a2e7ff
SHA512

4fb17aa932d48c5ca5b67baaff6e1bef53ca46263aee930a003eeaa89e49307eecf158820bba59de01406dc151cd6d4a832b50f4ed774416462ebe9f8a15c779
SSDEEP

3072:EmVW8iTX/3RflkXq1+0cxxsWEL02fXcIp08Moe9DESvC:VM7jJlLxYTHYZM1A

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  863b5d2c84f4ee7889191be12039c321_JaffaCakes118
- Size
  
  414KB
- MD5
  
  863b5d2c84f4ee7889191be12039c321
- SHA1
  
  20315e8c53e1ffcb950c74a671f5f3b35348f490
- SHA256
  
  e1f89fdd0193c44ecb6562424851fe9abad4178f40d9dd3964dbcb69f0a2e7ff
- SHA512
  
  4fb17aa932d48c5ca5b67baaff6e1bef53ca46263aee930a003eeaa89e49307eecf158820bba59de01406dc151cd6d4a832b50f4ed774416462ebe9f8a15c779
- SSDEEP
  
  3072:EmVW8iTX/3RflkXq1+0cxxsWEL02fXcIp08Moe9DESvC:VM7jJlLxYTHYZM1A
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx