9710ad227e464e5e28b6cbe41eadbd45198357e7077b507eeffa6984308b556e | Triage

Sharing

General

Target

bd94bdd7dfb93e8d08d043456f1a7ddd_JaffaCakes118
Size

137KB
Sample

240823-3pvtratfnb
MD5

bd94bdd7dfb93e8d08d043456f1a7ddd
SHA1

c56d60e74efbfd914073c2f6add0a554270fa024
SHA256

9710ad227e464e5e28b6cbe41eadbd45198357e7077b507eeffa6984308b556e
SHA512

4e2b426d77e8ffd3e08d12346959d3160ecd85fe9fee0bacadbd94dbbdcdf4496c34323b9d0a92b97d0fbca6e41feb6a9703726322f13fca05052feeb265a437
SSDEEP

1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53W2:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  bd94bdd7dfb93e8d08d043456f1a7ddd_JaffaCakes118
- Size
  
  137KB
- MD5
  
  bd94bdd7dfb93e8d08d043456f1a7ddd
- SHA1
  
  c56d60e74efbfd914073c2f6add0a554270fa024
- SHA256
  
  9710ad227e464e5e28b6cbe41eadbd45198357e7077b507eeffa6984308b556e
- SHA512
  
  4e2b426d77e8ffd3e08d12346959d3160ecd85fe9fee0bacadbd94dbbdcdf4496c34323b9d0a92b97d0fbca6e41feb6a9703726322f13fca05052feeb265a437
- SSDEEP
  
  1536:J4nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HSlJNprKR9lpJtHL53W2:ye8jMCjM/keGyMYaKW6IXrORRJtrlBR
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx