f8ff40a03908232e021a61a8aeced35b233bd993824c0b81998fe6d6d45e5339 | Triage

Sharing

General

Target

a33e85b1a787c477295f0fc27cef5d24_JaffaCakes118
Size

153KB
Sample

240817-trwpdsxfkl
MD5

a33e85b1a787c477295f0fc27cef5d24
SHA1

febbf2d560f97c9d1e2a043d2415388f693d15cb
SHA256

f8ff40a03908232e021a61a8aeced35b233bd993824c0b81998fe6d6d45e5339
SHA512

178bd1bd5cc5ce75f52961993cbb6bc7e58325f1143d35c76240feb32830200da87bf7d31b95bebb7e06abd8b5c314b32f52fbcbef19c7b2cc0e22a02bcad593
SSDEEP

3072:mhuIl+ZWxFxsTU2+yKrTbkVErhFHzQmcoagy9YAaXSxx3pt0VMf3l7Gouh:mMknxevC3AVIzHVc7iAoUdpoS3koy

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  
  a33e85b1a787c477295f0fc27cef5d24_JaffaCakes118
- Size
  
  153KB
- MD5
  
  a33e85b1a787c477295f0fc27cef5d24
- SHA1
  
  febbf2d560f97c9d1e2a043d2415388f693d15cb
- SHA256
  
  f8ff40a03908232e021a61a8aeced35b233bd993824c0b81998fe6d6d45e5339
- SHA512
  
  178bd1bd5cc5ce75f52961993cbb6bc7e58325f1143d35c76240feb32830200da87bf7d31b95bebb7e06abd8b5c314b32f52fbcbef19c7b2cc0e22a02bcad593
- SSDEEP
  
  3072:mhuIl+ZWxFxsTU2+yKrTbkVErhFHzQmcoagy9YAaXSxx3pt0VMf3l7Gouh:mMknxevC3AVIzHVc7iAoUdpoS3koy
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2