bd59ad5f9e29c5bc17c9378deb36176cacbb48e785abf8c29acc94613777009c | Triage

Sharing

General

Target

b1fefed9113bfbcdf3413d5fc1bea380_JaffaCakes118
Size

311KB
Sample

240821-ec8m3ssdln
MD5

b1fefed9113bfbcdf3413d5fc1bea380
SHA1

dff69c52a318a1607ece4409e263c4095ec15753
SHA256

bd59ad5f9e29c5bc17c9378deb36176cacbb48e785abf8c29acc94613777009c
SHA512

016d0d65d488d00c0b8f5b88b07d69bb389fb4fef079ded533604504dd66889996917e77baa6b457e1bf02e0ec180c4c92eddca07029f855897999e748beadbb
SSDEEP

6144:NaaSwojK7IePuJHgBmhq4n3BLqVOof9W+bHXTcsg/tteUmmf5oWYUgme4uc/Adei:NavePuhpw43QA+Zjq/jeBaydJme4zAEy

Score

8^/10

discovery evasion persistence upx

Malware Config

Targets

- Target
  
  b1fefed9113bfbcdf3413d5fc1bea380_JaffaCakes118
- Size
  
  311KB
- MD5
  
  b1fefed9113bfbcdf3413d5fc1bea380
- SHA1
  
  dff69c52a318a1607ece4409e263c4095ec15753
- SHA256
  
  bd59ad5f9e29c5bc17c9378deb36176cacbb48e785abf8c29acc94613777009c
- SHA512
  
  016d0d65d488d00c0b8f5b88b07d69bb389fb4fef079ded533604504dd66889996917e77baa6b457e1bf02e0ec180c4c92eddca07029f855897999e748beadbb
- SSDEEP
  
  6144:NaaSwojK7IePuJHgBmhq4n3BLqVOof9W+bHXTcsg/tteUmmf5oWYUgme4uc/Adei:NavePuhpw43QA+Zjq/jeBaydJme4zAEy
Score

8^/10

discovery evasion persistence upx
- Disables Task Manager via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceupx

behavioral2