b0364ce68dd1fa33fcc1c663777205de8962fff0892d83ecb945be4ae3ab39fb | Triage

Sharing

General

Target

ba7d2f2e2a7ea6d1bbc09cdbd50e984d_JaffaCakes118
Size

45KB
Sample

240823-fxz24sxapg
MD5

ba7d2f2e2a7ea6d1bbc09cdbd50e984d
SHA1

39b580b77d6720ddf68a6d25ce245b710a9b752d
SHA256

b0364ce68dd1fa33fcc1c663777205de8962fff0892d83ecb945be4ae3ab39fb
SHA512

427562c2a757ca775713d2f761dd5d98734b52d9d3fa4424f0234b7201f606ef765672670a80c3e1d693ced0d6f51a11c8d31fffc8250a91c3466515eeb3c3c1
SSDEEP

768:xO7zPrAhzQ3AYEyblPco6nSacSrm//fhm+K5Y0zDr35POtayvefHyIPDvyNZs5VM:QnQH/nSDZm+K5NTwvvefSIPCqVNuF

Score

10^/10

discovery evasion trojan upx

Malware Config

Targets

- Target
  
  ba7d2f2e2a7ea6d1bbc09cdbd50e984d_JaffaCakes118
- Size
  
  45KB
- MD5
  
  ba7d2f2e2a7ea6d1bbc09cdbd50e984d
- SHA1
  
  39b580b77d6720ddf68a6d25ce245b710a9b752d
- SHA256
  
  b0364ce68dd1fa33fcc1c663777205de8962fff0892d83ecb945be4ae3ab39fb
- SHA512
  
  427562c2a757ca775713d2f761dd5d98734b52d9d3fa4424f0234b7201f606ef765672670a80c3e1d693ced0d6f51a11c8d31fffc8250a91c3466515eeb3c3c1
- SSDEEP
  
  768:xO7zPrAhzQ3AYEyblPco6nSacSrm//fhm+K5Y0zDr35POtayvefHyIPDvyNZs5VM:QnQH/nSDZm+K5NTwvvefSIPCqVNuF
Score

10^/10

evasion trojan upx discovery
- UAC bypass
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasiontrojanupx

behavioral2

discoveryevasiontrojanupx