0f67ca41170604d1d3ad8f1908d2dc74abfb692db1c0f648fa44ac7e81670db4 | Triage

Sharing

General

Target

950e2160d4dc979bce4b69887e043b6d_JaffaCakes118
Size

34KB
Sample

240814-hpbqnaydlb
MD5

950e2160d4dc979bce4b69887e043b6d
SHA1

4fcbc247f6e0324ff53fd79f4551b08857448a66
SHA256

0f67ca41170604d1d3ad8f1908d2dc74abfb692db1c0f648fa44ac7e81670db4
SHA512

0d7a21baa62ff99e72c6f201fabfcbb82596b7481f73f474e59e3253ef77993cf620a4f4b1ba6c1009138565144412cc5c7043d919b802295515b982967d48f7
SSDEEP

768:rQMDMIAN+8bMRK870PlRCdC23gnUyXGIj8arq6HLorC3G:kM/AN+8kK87gRkN3gnUy2Ijc6Hn3G

Score

8^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  950e2160d4dc979bce4b69887e043b6d_JaffaCakes118
- Size
  
  34KB
- MD5
  
  950e2160d4dc979bce4b69887e043b6d
- SHA1
  
  4fcbc247f6e0324ff53fd79f4551b08857448a66
- SHA256
  
  0f67ca41170604d1d3ad8f1908d2dc74abfb692db1c0f648fa44ac7e81670db4
- SHA512
  
  0d7a21baa62ff99e72c6f201fabfcbb82596b7481f73f474e59e3253ef77993cf620a4f4b1ba6c1009138565144412cc5c7043d919b802295515b982967d48f7
- SSDEEP
  
  768:rQMDMIAN+8bMRK870PlRCdC23gnUyXGIj8arq6HLorC3G:kM/AN+8kK87gRkN3gnUy2Ijc6Hn3G
Score

8^/10

discovery persistence upx
- Adds policy Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx