2ef8ba758d2231ed3dbae90b1251c0bb01683763f55923d6964cb7736b4be689 | Triage

Sharing

General

Target

a7ea25ed62232ca7bc27dd89c17601f6_JaffaCakes118
Size

32KB
Sample

240818-x5lm5azere
MD5

a7ea25ed62232ca7bc27dd89c17601f6
SHA1

e8662b986418b4f046a319f0958fc6ccbc3ab744
SHA256

2ef8ba758d2231ed3dbae90b1251c0bb01683763f55923d6964cb7736b4be689
SHA512

21f4c5286db954d085dbd5b2e8a07434203a40d81bef543d81ec160794902a662447a9f705e86e1778d6f985f2f2ad8c14d6f3129d164ae65cd563f2a184c14a
SSDEEP

768:NEl6Ovnxd1HN1SZnpDoR89WIB825ykUPLfUMXW1F5X2WB:NEkWB1SZ6RcB82chPAX1Gk

Score

10^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  a7ea25ed62232ca7bc27dd89c17601f6_JaffaCakes118
- Size
  
  32KB
- MD5
  
  a7ea25ed62232ca7bc27dd89c17601f6
- SHA1
  
  e8662b986418b4f046a319f0958fc6ccbc3ab744
- SHA256
  
  2ef8ba758d2231ed3dbae90b1251c0bb01683763f55923d6964cb7736b4be689
- SHA512
  
  21f4c5286db954d085dbd5b2e8a07434203a40d81bef543d81ec160794902a662447a9f705e86e1778d6f985f2f2ad8c14d6f3129d164ae65cd563f2a184c14a
- SSDEEP
  
  768:NEl6Ovnxd1HN1SZnpDoR89WIB825ykUPLfUMXW1F5X2WB:NEkWB1SZ6RcB82chPAX1Gk
Score

10^/10

discovery evasion execution upx
- Disables service(s)
  evasion execution
- Stops running service(s)
  evasion execution
- Deletes itself
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx