857fc1fdc803b38325f89a44acd8177f3adbc7c0bdde311d57b051b6a143ece4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

956ba922a1f50caed751ea273d3a247d_JaffaCakes118
Size

195KB
Sample

240814-kxrsysycjl
MD5

956ba922a1f50caed751ea273d3a247d
SHA1

8962367b00fbcea52cde4dc93359dec478ff32a9
SHA256

857fc1fdc803b38325f89a44acd8177f3adbc7c0bdde311d57b051b6a143ece4
SHA512

47a41a3ca45bab155e34a2c89e54bb76662b5638fe9f0ce3d407a40c49f3a277b59e96f939b427f3a395bf4f03bc93ab8714222d9a417d8df3736b4c4346f487
SSDEEP

6144:xA0GMdIh4SGBZCjpDDViowm4ag9u4JVTn6w:xgMdB+4owm4D9N

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  956ba922a1f50caed751ea273d3a247d_JaffaCakes118
- Size
  
  195KB
- MD5
  
  956ba922a1f50caed751ea273d3a247d
- SHA1
  
  8962367b00fbcea52cde4dc93359dec478ff32a9
- SHA256
  
  857fc1fdc803b38325f89a44acd8177f3adbc7c0bdde311d57b051b6a143ece4
- SHA512
  
  47a41a3ca45bab155e34a2c89e54bb76662b5638fe9f0ce3d407a40c49f3a277b59e96f939b427f3a395bf4f03bc93ab8714222d9a417d8df3736b4c4346f487
- SSDEEP
  
  6144:xA0GMdIh4SGBZCjpDDViowm4ag9u4JVTn6w:xgMdB+4owm4D9N
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx