5a9e21f98ae2aa23c4d257a309df8bdf13f01bbe2d53f40666b6d41e829023d9 | Triage

Sharing

General

Target

a4eec13fcb037c902fe83d255423b49d_JaffaCakes118
Size

59KB
Sample

240818-cbc4nsyglb
MD5

a4eec13fcb037c902fe83d255423b49d
SHA1

6e025a8137557b648d0be46148c975bcb1830088
SHA256

5a9e21f98ae2aa23c4d257a309df8bdf13f01bbe2d53f40666b6d41e829023d9
SHA512

99f6c50806992af88a942024a1bef101b2518715410f1eeca61445e3aec47af28686c35ecae21b410c3a6e5e627fae0feddee1f766288ea87de483e3b2e7439a
SSDEEP

1536:CMp7CBgvXwYxt5x0tRp22hfpr9zGzlCjFNa9VcD5yilH3OJWFq:CMp73vx/0tRp22hBxNFNaLlqeJWFq

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  a4eec13fcb037c902fe83d255423b49d_JaffaCakes118
- Size
  
  59KB
- MD5
  
  a4eec13fcb037c902fe83d255423b49d
- SHA1
  
  6e025a8137557b648d0be46148c975bcb1830088
- SHA256
  
  5a9e21f98ae2aa23c4d257a309df8bdf13f01bbe2d53f40666b6d41e829023d9
- SHA512
  
  99f6c50806992af88a942024a1bef101b2518715410f1eeca61445e3aec47af28686c35ecae21b410c3a6e5e627fae0feddee1f766288ea87de483e3b2e7439a
- SSDEEP
  
  1536:CMp7CBgvXwYxt5x0tRp22hfpr9zGzlCjFNa9VcD5yilH3OJWFq:CMp73vx/0tRp22hBxNFNaLlqeJWFq
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx