7ea8c232bf7a53a93ef16dbf240d2698f53d8683522349892a319215edb78641 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dd91080b8d8945fcdd2a5d8bca31c29_JaffaCakes118
Size

49KB
Sample

240812-janmca1cnp
MD5

8dd91080b8d8945fcdd2a5d8bca31c29
SHA1

059c00a008eea1e952236d8e85b48ddfe44d6e7f
SHA256

7ea8c232bf7a53a93ef16dbf240d2698f53d8683522349892a319215edb78641
SHA512

f8aa1c563e3e4bebe7e5ec89926cf3d8f9a12e19bbc75461a0d483bcd067767f7e84c6d3e09354e03d6a9df5c12c3a7a65b5488c9c70b6e0f626c1869bb02eba
SSDEEP

1536:MgmQT0RdF+ucMrHu5sO4xYQk9oAYld5y+:uQed4iIoTP

Score

8^/10

discovery evasion persistence privilege_escalation upx

Malware Config

Targets

- Target
  
  8dd91080b8d8945fcdd2a5d8bca31c29_JaffaCakes118
- Size
  
  49KB
- MD5
  
  8dd91080b8d8945fcdd2a5d8bca31c29
- SHA1
  
  059c00a008eea1e952236d8e85b48ddfe44d6e7f
- SHA256
  
  7ea8c232bf7a53a93ef16dbf240d2698f53d8683522349892a319215edb78641
- SHA512
  
  f8aa1c563e3e4bebe7e5ec89926cf3d8f9a12e19bbc75461a0d483bcd067767f7e84c6d3e09354e03d6a9df5c12c3a7a65b5488c9c70b6e0f626c1869bb02eba
- SSDEEP
  
  1536:MgmQT0RdF+ucMrHu5sO4xYQk9oAYld5y+:uQed4iIoTP
Score

8^/10

discovery upx evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionpersistenceprivilege_escalationupx