13fb8498b1d12801994d997ad8bec2b523a24ddfa4e71109097f31a8688142ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b102f1424799183a897c5ea19c3a4412_JaffaCakes118
Size

137KB
Sample

240820-1ygmdavhqe
MD5

b102f1424799183a897c5ea19c3a4412
SHA1

453a563694f27a47e863e50c8b3f4ff821ea0d72
SHA256

13fb8498b1d12801994d997ad8bec2b523a24ddfa4e71109097f31a8688142ad
SHA512

df466c06295defa814709cc4b853783158b605c03bc9621f6fe138eaeb669c20e6fe04227c1ca121051d71193c5be13ac5d03fc37818f5d3640d32155400f79c
SSDEEP

1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53W8:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  b102f1424799183a897c5ea19c3a4412_JaffaCakes118
- Size
  
  137KB
- MD5
  
  b102f1424799183a897c5ea19c3a4412
- SHA1
  
  453a563694f27a47e863e50c8b3f4ff821ea0d72
- SHA256
  
  13fb8498b1d12801994d997ad8bec2b523a24ddfa4e71109097f31a8688142ad
- SHA512
  
  df466c06295defa814709cc4b853783158b605c03bc9621f6fe138eaeb669c20e6fe04227c1ca121051d71193c5be13ac5d03fc37818f5d3640d32155400f79c
- SSDEEP
  
  1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53W8:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx