c08bbf63d26f66da4b44ccf09a15abb896a904fb120e64bf6002854698053168 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a99a30497bfe09b5ce0790e616e0338f_JaffaCakes118
Size

180KB
Sample

240819-e63c6avanc
MD5

a99a30497bfe09b5ce0790e616e0338f
SHA1

b98dcaa100a01aa605e8840b47718b7588e5de43
SHA256

c08bbf63d26f66da4b44ccf09a15abb896a904fb120e64bf6002854698053168
SHA512

fae5ff8d52d572045b2087120fdd790b60167649fd957f59ec467c975e0b6f5cbe2f5eddef08faf4e67a3484685a99f0e0678af1ed34f3ef996f3692ed6ccd6f
SSDEEP

3072:AYdeAnqcn5RJq/3LoqkVM+VMqCdymtn7WRuS90Ws6TBhbprWWAimhQ1NRNCoee:AYUUqcn5Rc8PMqCdypRuSs6XbpNz1NR4

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  a99a30497bfe09b5ce0790e616e0338f_JaffaCakes118
- Size
  
  180KB
- MD5
  
  a99a30497bfe09b5ce0790e616e0338f
- SHA1
  
  b98dcaa100a01aa605e8840b47718b7588e5de43
- SHA256
  
  c08bbf63d26f66da4b44ccf09a15abb896a904fb120e64bf6002854698053168
- SHA512
  
  fae5ff8d52d572045b2087120fdd790b60167649fd957f59ec467c975e0b6f5cbe2f5eddef08faf4e67a3484685a99f0e0678af1ed34f3ef996f3692ed6ccd6f
- SSDEEP
  
  3072:AYdeAnqcn5RJq/3LoqkVM+VMqCdymtn7WRuS90Ws6TBhbprWWAimhQ1NRNCoee:AYUUqcn5Rc8PMqCdypRuSs6XbpNz1NR4
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx