1d17bd6b378f199c9f2fff71d4ed2bbba7ed6fa3873b609875a9aa1b28778d5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b232fa33677707ac87c1c46f0f3533e8_JaffaCakes118
Size

137KB
Sample

240821-frpzys1ekd
MD5

b232fa33677707ac87c1c46f0f3533e8
SHA1

a6e591b0a58385ef89cca45766a13a063c4245bc
SHA256

1d17bd6b378f199c9f2fff71d4ed2bbba7ed6fa3873b609875a9aa1b28778d5d
SHA512

0aeb4e99b084a67b269181c17ea7cecb62564af0fa165a8b4cfb7ffedeb298946df653ce1531871f1df4b09a170b29a392b937caf3a4503d103c1f8338f6d5a0
SSDEEP

1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53Wg:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  b232fa33677707ac87c1c46f0f3533e8_JaffaCakes118
- Size
  
  137KB
- MD5
  
  b232fa33677707ac87c1c46f0f3533e8
- SHA1
  
  a6e591b0a58385ef89cca45766a13a063c4245bc
- SHA256
  
  1d17bd6b378f199c9f2fff71d4ed2bbba7ed6fa3873b609875a9aa1b28778d5d
- SHA512
  
  0aeb4e99b084a67b269181c17ea7cecb62564af0fa165a8b4cfb7ffedeb298946df653ce1531871f1df4b09a170b29a392b937caf3a4503d103c1f8338f6d5a0
- SSDEEP
  
  1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53Wg:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx