47d6364b3d3631c46be03abfa20de59d724e8a13c9b8187c7dec3f2f30ef149c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e9c2e870e9e6fdcc614923ab8b48018_JaffaCakes118
Size

32KB
Sample

240812-nvx4qszblm
MD5

8e9c2e870e9e6fdcc614923ab8b48018
SHA1

97f0bc7a3d5a3d1e971fc4c68cd101841a64df68
SHA256

47d6364b3d3631c46be03abfa20de59d724e8a13c9b8187c7dec3f2f30ef149c
SHA512

70195fcb34f40e22de15694fff101b6377080288970becf36af8295123de4bd38d97ca3153391651a0c9ae5ec9424456eb4ca310fb70e06b2fe0df479ef6939b
SSDEEP

768:pIS76XqDzgi/cdh/s1ehMli4sfe3MJtt61EltDY+dREO:pLSqDzyh/wlEtt6ktcOREO

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  8e9c2e870e9e6fdcc614923ab8b48018_JaffaCakes118
- Size
  
  32KB
- MD5
  
  8e9c2e870e9e6fdcc614923ab8b48018
- SHA1
  
  97f0bc7a3d5a3d1e971fc4c68cd101841a64df68
- SHA256
  
  47d6364b3d3631c46be03abfa20de59d724e8a13c9b8187c7dec3f2f30ef149c
- SHA512
  
  70195fcb34f40e22de15694fff101b6377080288970becf36af8295123de4bd38d97ca3153391651a0c9ae5ec9424456eb4ca310fb70e06b2fe0df479ef6939b
- SSDEEP
  
  768:pIS76XqDzgi/cdh/s1ehMli4sfe3MJtt61EltDY+dREO:pLSqDzyh/wlEtt6ktcOREO
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx