f64a787928c9a1bb3523cdcf2f144137d133d02d2c748c013e49cc1875fed5c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

943f44f05dbafa74f0fdac335aa051ae_JaffaCakes118
Size

33KB
Sample

240813-w5he2athrr
MD5

943f44f05dbafa74f0fdac335aa051ae
SHA1

4bfc2c356465fc6dae8fe21748c7ce8fd8e59f58
SHA256

f64a787928c9a1bb3523cdcf2f144137d133d02d2c748c013e49cc1875fed5c3
SHA512

bd477abe8bb92edab845a9b76d6601ddfa24d469c4bfb90af7d1009e35cde38514bdc06ebc61c652f8fd2ca9e48b5a7e580b5071e870f11570c039c91e062cee
SSDEEP

768:q+b6GCOvFgxj2pQs97O0sEA+JGY65eoGP+iDh0MWLSn:qdGCwAj2yWO0G7heoGP+Evn

Score

10^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  943f44f05dbafa74f0fdac335aa051ae_JaffaCakes118
- Size
  
  33KB
- MD5
  
  943f44f05dbafa74f0fdac335aa051ae
- SHA1
  
  4bfc2c356465fc6dae8fe21748c7ce8fd8e59f58
- SHA256
  
  f64a787928c9a1bb3523cdcf2f144137d133d02d2c748c013e49cc1875fed5c3
- SHA512
  
  bd477abe8bb92edab845a9b76d6601ddfa24d469c4bfb90af7d1009e35cde38514bdc06ebc61c652f8fd2ca9e48b5a7e580b5071e870f11570c039c91e062cee
- SSDEEP
  
  768:q+b6GCOvFgxj2pQs97O0sEA+JGY65eoGP+iDh0MWLSn:qdGCwAj2yWO0G7heoGP+Evn
Score

10^/10

discovery evasion execution upx
- Disables service(s)
  evasion execution
- Stops running service(s)
  evasion execution
- Deletes itself
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx