281aab749b17ed5a0d4a35cec2f1e87a24bd8a4e455ac03d0bf2de89a5ee9776 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abe4360065057e5bbc4d409898b99a79_JaffaCakes118
Size

22KB
Sample

240819-vwgxgazgll
MD5

abe4360065057e5bbc4d409898b99a79
SHA1

a45ca180fc76f57b5dc35b1b0f8b6004c746ed9c
SHA256

281aab749b17ed5a0d4a35cec2f1e87a24bd8a4e455ac03d0bf2de89a5ee9776
SHA512

5f7e2a50575b8db3e0bc2b5b6986aff2619091c2f12b9a5f0269b8e0290a7ca44e041fc4a16b929f5e66f3ed048c4c9fabf9a7aeb1a05364ecddf097a5b9a399
SSDEEP

384:8suEaJKetkmlq9Rn3eRrWou7Cts0/VT54MnaDftTScFzTwJ3t8:92J1kmlqhE4MnaRTJTwJ3

Score

8^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  abe4360065057e5bbc4d409898b99a79_JaffaCakes118
- Size
  
  22KB
- MD5
  
  abe4360065057e5bbc4d409898b99a79
- SHA1
  
  a45ca180fc76f57b5dc35b1b0f8b6004c746ed9c
- SHA256
  
  281aab749b17ed5a0d4a35cec2f1e87a24bd8a4e455ac03d0bf2de89a5ee9776
- SHA512
  
  5f7e2a50575b8db3e0bc2b5b6986aff2619091c2f12b9a5f0269b8e0290a7ca44e041fc4a16b929f5e66f3ed048c4c9fabf9a7aeb1a05364ecddf097a5b9a399
- SSDEEP
  
  384:8suEaJKetkmlq9Rn3eRrWou7Cts0/VT54MnaDftTScFzTwJ3t8:92J1kmlqhE4MnaRTJTwJ3
Score

8^/10

discovery evasion execution upx
- Stops running service(s)
  evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx