68099477681d350b04b238f3baa53bcc13a35729f9c2b34d7b622ca83d34585d | Triage

Sharing

General

Target

bab0a74b9a483d6e72dd7f2d15d3e764_JaffaCakes118
Size

43KB
Sample

240823-g5ayma1hrj
MD5

bab0a74b9a483d6e72dd7f2d15d3e764
SHA1

946b4808a243ac33eb48766539331a7c2988f36a
SHA256

68099477681d350b04b238f3baa53bcc13a35729f9c2b34d7b622ca83d34585d
SHA512

0b69da433b9af66814b0544226958882c2ecf6d319ffbdc11836a6366c3e079590b483ea2966d8e5e20da859cfeed379673db53cb1188162d6b4839680e99704
SSDEEP

768:GgatO9LyKwtPXnoJXN/E8VbgQyhBBemjGJxaTrREHr6HOe+Drpmm0u5+30:wUyKoP3KXRHVkQyDBemj+GrRE2erpsuE

Score

10^/10

discovery evasion persistence upx

Malware Config

Targets

- Target
  
  bab0a74b9a483d6e72dd7f2d15d3e764_JaffaCakes118
- Size
  
  43KB
- MD5
  
  bab0a74b9a483d6e72dd7f2d15d3e764
- SHA1
  
  946b4808a243ac33eb48766539331a7c2988f36a
- SHA256
  
  68099477681d350b04b238f3baa53bcc13a35729f9c2b34d7b622ca83d34585d
- SHA512
  
  0b69da433b9af66814b0544226958882c2ecf6d319ffbdc11836a6366c3e079590b483ea2966d8e5e20da859cfeed379673db53cb1188162d6b4839680e99704
- SSDEEP
  
  768:GgatO9LyKwtPXnoJXN/E8VbgQyhBBemjGJxaTrREHr6HOe+Drpmm0u5+30:wUyKoP3KXRHVkQyDBemj+GrRE2erpsuE
Score

10^/10

discovery evasion persistence upx
- Modifies firewall policy service
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceupx

behavioral2

discoveryevasionpersistenceupx