ffa9c5cccec7fc60a987156fdfe2de0fecd67483c6993bdb1a461f5b7427d0c0 | Triage

Sharing

General

Target

aacc57208fd7b9b87603a235723f4b54_JaffaCakes118
Size

7KB
Sample

240819-neb7bs1cqg
MD5

aacc57208fd7b9b87603a235723f4b54
SHA1

309c371ec4a27b311b489da64f20ea1459cac01b
SHA256

ffa9c5cccec7fc60a987156fdfe2de0fecd67483c6993bdb1a461f5b7427d0c0
SHA512

6f824b4c5db5994ed983132115056e87a6d001aaf397f4ff7884a711ebca7c4d3ebe05adbf0ae2b48fee60a09abdc37aeb0f7a7054cdadbb4d1372a306ff964c
SSDEEP

192:fEFqdt+ulpCYOVOXxkE8EBFY/v5oQaEDV41dMzp:cFqdt+ulZsqgEB6/v5oQa0K1de

Score

8^/10

discovery evasion persistence privilege_escalation upx

Malware Config

Targets

- Target
  
  aacc57208fd7b9b87603a235723f4b54_JaffaCakes118
- Size
  
  7KB
- MD5
  
  aacc57208fd7b9b87603a235723f4b54
- SHA1
  
  309c371ec4a27b311b489da64f20ea1459cac01b
- SHA256
  
  ffa9c5cccec7fc60a987156fdfe2de0fecd67483c6993bdb1a461f5b7427d0c0
- SHA512
  
  6f824b4c5db5994ed983132115056e87a6d001aaf397f4ff7884a711ebca7c4d3ebe05adbf0ae2b48fee60a09abdc37aeb0f7a7054cdadbb4d1372a306ff964c
- SSDEEP
  
  192:fEFqdt+ulpCYOVOXxkE8EBFY/v5oQaEDV41dMzp:cFqdt+ulZsqgEB6/v5oQa0K1de
Score

8^/10

discovery evasion persistence privilege_escalation upx
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationupx

behavioral2

discoveryevasionpersistenceprivilege_escalationupx