57e2d2be0c063fc561d2352e00657f16c8ee137b5608e0f0b258a1ea60a754c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

944090d01fcafb42580a5039406c4358_JaffaCakes118
Size

33KB
Sample

240813-w6m2xazclc
MD5

944090d01fcafb42580a5039406c4358
SHA1

37f5bcacf4a71703e5ad80593c954acc5d443325
SHA256

57e2d2be0c063fc561d2352e00657f16c8ee137b5608e0f0b258a1ea60a754c8
SHA512

737b0a84a78fba8bf09ce2928581865904fa3086d878c44eba2ac5b42a0fabfcf5463acaecd21001cc30449720fd9dfba76d03a3f83d5195600d72f5e64a903d
SSDEEP

768:5TahKjEjYq33CoWhV8tL4Ed0OY0TTp4kxnYRce05z:52hKAH38EtZY0ykx6c35z

Score

10^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  944090d01fcafb42580a5039406c4358_JaffaCakes118
- Size
  
  33KB
- MD5
  
  944090d01fcafb42580a5039406c4358
- SHA1
  
  37f5bcacf4a71703e5ad80593c954acc5d443325
- SHA256
  
  57e2d2be0c063fc561d2352e00657f16c8ee137b5608e0f0b258a1ea60a754c8
- SHA512
  
  737b0a84a78fba8bf09ce2928581865904fa3086d878c44eba2ac5b42a0fabfcf5463acaecd21001cc30449720fd9dfba76d03a3f83d5195600d72f5e64a903d
- SSDEEP
  
  768:5TahKjEjYq33CoWhV8tL4Ed0OY0TTp4kxnYRce05z:52hKAH38EtZY0ykx6c35z
Score

10^/10

discovery evasion execution upx
- Disables service(s)
  evasion execution
- Stops running service(s)
  evasion execution
- Deletes itself
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx