c115399f8ac76c689dd5524dde9d5853ae9ad760849d4b5bd2ac9397e5082ff0 | Triage

Sharing

General

Target

a7bdad45f0f393b80c32d591da0d6800_JaffaCakes118
Size

34KB
Sample

240818-w3qzdsxdme
MD5

a7bdad45f0f393b80c32d591da0d6800
SHA1

f70c25a8d9cc0446b9c5f5280c86f2cd66584a73
SHA256

c115399f8ac76c689dd5524dde9d5853ae9ad760849d4b5bd2ac9397e5082ff0
SHA512

b8fe1f7f017ce76201f230e766b61b4c748960963d57a60595eb05b56b72f530ea7c0c15db098d1623a0f4952e954192fed7d11557c5b0d47cc018a73dbfed8e
SSDEEP

768:mE7NZkRsPPDzqhsNw6iib40n/JESORdM7PEB0i2+Jf:mEBZkRZhKLvb40hxOMr+0iNJf

Score

10^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  a7bdad45f0f393b80c32d591da0d6800_JaffaCakes118
- Size
  
  34KB
- MD5
  
  a7bdad45f0f393b80c32d591da0d6800
- SHA1
  
  f70c25a8d9cc0446b9c5f5280c86f2cd66584a73
- SHA256
  
  c115399f8ac76c689dd5524dde9d5853ae9ad760849d4b5bd2ac9397e5082ff0
- SHA512
  
  b8fe1f7f017ce76201f230e766b61b4c748960963d57a60595eb05b56b72f530ea7c0c15db098d1623a0f4952e954192fed7d11557c5b0d47cc018a73dbfed8e
- SSDEEP
  
  768:mE7NZkRsPPDzqhsNw6iib40n/JESORdM7PEB0i2+Jf:mEBZkRZhKLvb40hxOMr+0iNJf
Score

10^/10

discovery evasion execution upx
- Disables service(s)
  evasion execution
- Stops running service(s)
  evasion execution
- Deletes itself
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx