908b86e127b7d0987a770b808e4cfbe601a81020ad17a6a3a8d58b658b863861 | Triage

Sharing

General

Target

a72a385a24080ef0a7f94cd9dd24accd_JaffaCakes118
Size

180KB
Sample

240818-sqq7vasfql
MD5

a72a385a24080ef0a7f94cd9dd24accd
SHA1

0e848605ca97982739be1627f23162c659d5ded8
SHA256

908b86e127b7d0987a770b808e4cfbe601a81020ad17a6a3a8d58b658b863861
SHA512

e7823183cf281f97b1fbfe4d3a68a2c0eb0198feae3e927bd8001198910f78753b9c3de6e3274b11a3dbf3677a1e31a1f591d03f5e5b417c4d62f680e359825f
SSDEEP

3072:BYdeAnbcn5N5IIwj79c7Zc2ybOavAUyguulE5NeR3ecQnVS0X54esC6M3vrvm:BYUUbcn5N5f0OZzTavAJXRp9J4esCv37

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  a72a385a24080ef0a7f94cd9dd24accd_JaffaCakes118
- Size
  
  180KB
- MD5
  
  a72a385a24080ef0a7f94cd9dd24accd
- SHA1
  
  0e848605ca97982739be1627f23162c659d5ded8
- SHA256
  
  908b86e127b7d0987a770b808e4cfbe601a81020ad17a6a3a8d58b658b863861
- SHA512
  
  e7823183cf281f97b1fbfe4d3a68a2c0eb0198feae3e927bd8001198910f78753b9c3de6e3274b11a3dbf3677a1e31a1f591d03f5e5b417c4d62f680e359825f
- SSDEEP
  
  3072:BYdeAnbcn5N5IIwj79c7Zc2ybOavAUyguulE5NeR3ecQnVS0X54esC6M3vrvm:BYUUbcn5N5f0OZzTavAJXRp9J4esCv37
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx