6dc8979d4c916708aa113468260822af3562c4bc84315830f0a8bb875dc6643f | Triage

Sharing

General

Target

890a0f2ac2f5a17f46ca31745852f5f3_JaffaCakes118
Size

7KB
Sample

240811-fcssaszcnf
MD5

890a0f2ac2f5a17f46ca31745852f5f3
SHA1

dc141cbd649c6cf39fbdd83d4ee898488dddba93
SHA256

6dc8979d4c916708aa113468260822af3562c4bc84315830f0a8bb875dc6643f
SHA512

d40c67f14c75e2ce249c32dd499151c938e09b64008845c98a1027db59fbe4b7c8747a7644777f1ee4fb9c3fd7b73e9b9aa0b6a119449a3851e40e47e9c12a03
SSDEEP

96:nPIYQF66jXZrqbwHQ4X6yqBAXz4pNC4hDJ7uoe86eKjP7aXINmwEmV8/C5w1JM/w:ngTE6rZ2krOAcDN3eVnsIly/Aw8mTD

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  890a0f2ac2f5a17f46ca31745852f5f3_JaffaCakes118
- Size
  
  7KB
- MD5
  
  890a0f2ac2f5a17f46ca31745852f5f3
- SHA1
  
  dc141cbd649c6cf39fbdd83d4ee898488dddba93
- SHA256
  
  6dc8979d4c916708aa113468260822af3562c4bc84315830f0a8bb875dc6643f
- SHA512
  
  d40c67f14c75e2ce249c32dd499151c938e09b64008845c98a1027db59fbe4b7c8747a7644777f1ee4fb9c3fd7b73e9b9aa0b6a119449a3851e40e47e9c12a03
- SSDEEP
  
  96:nPIYQF66jXZrqbwHQ4X6yqBAXz4pNC4hDJ7uoe86eKjP7aXINmwEmV8/C5w1JM/w:ngTE6rZ2krOAcDN3eVnsIly/Aw8mTD
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx