dd94c070be1d27039d0bf8b12283a3e01fb3f051c769df9628b0e555b73cca86 | Triage

Sharing

General

Target

a7294aadae23c3d7ff85ff8850a51569_JaffaCakes118
Size

730KB
Sample

240818-sp6k5szcnd
MD5

a7294aadae23c3d7ff85ff8850a51569
SHA1

af32d1edd6bc966059db84caf96084d3a384ee20
SHA256

dd94c070be1d27039d0bf8b12283a3e01fb3f051c769df9628b0e555b73cca86
SHA512

00463bf1ff9c120007da95a66bd3a97bf41ecd00c6f544db28433d93a9ab1675829338702b56164423d5d123b9415137c93c67acbc78d9b35f5d6b27a4102032
SSDEEP

12288:7ZjUedriTo7Cop3FgFvIOvksapyJn9L+DSN+jsJFOKGRdVLxsubmwKLn4DTzqnrh:NAedNT+vIOvkI3SDLjiFOKGRLiubmwK0

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  a7294aadae23c3d7ff85ff8850a51569_JaffaCakes118
- Size
  
  730KB
- MD5
  
  a7294aadae23c3d7ff85ff8850a51569
- SHA1
  
  af32d1edd6bc966059db84caf96084d3a384ee20
- SHA256
  
  dd94c070be1d27039d0bf8b12283a3e01fb3f051c769df9628b0e555b73cca86
- SHA512
  
  00463bf1ff9c120007da95a66bd3a97bf41ecd00c6f544db28433d93a9ab1675829338702b56164423d5d123b9415137c93c67acbc78d9b35f5d6b27a4102032
- SSDEEP
  
  12288:7ZjUedriTo7Cop3FgFvIOvksapyJn9L+DSN+jsJFOKGRdVLxsubmwKLn4DTzqnrh:NAedNT+vIOvkI3SDLjiFOKGRLiubmwK0
Score

7^/10

discovery persistence upx
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx