ad646fd863ac36bba5a7b404d9e19a23a45300b8c881434ec118f658961abb3a | Triage

Sharing

General

Target

bf25180b8ed06fe66cf08f4fbe2fd9dc_JaffaCakes118
Size

14KB
Sample

240824-wfmnfstfnm
MD5

bf25180b8ed06fe66cf08f4fbe2fd9dc
SHA1

8184532015386b547cd622565e2560611a5edb40
SHA256

ad646fd863ac36bba5a7b404d9e19a23a45300b8c881434ec118f658961abb3a
SHA512

175d8f59d0444953bb355f9376fd88d479b953c4f5c2491e98b7d672b9761379d697af8dc9f0c59024623311397fb606835f8738a94725eb77374ee18c47552f
SSDEEP

192:n0swIPBiCWY8vJpT7/FksuK7HbWKzwxzwQhr2g/RARtcvs3eBeY7l2fI1Iz++BVm:aIf8D7d6gWKzw3D5ARtosyeUvi+iVm

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  bf25180b8ed06fe66cf08f4fbe2fd9dc_JaffaCakes118
- Size
  
  14KB
- MD5
  
  bf25180b8ed06fe66cf08f4fbe2fd9dc
- SHA1
  
  8184532015386b547cd622565e2560611a5edb40
- SHA256
  
  ad646fd863ac36bba5a7b404d9e19a23a45300b8c881434ec118f658961abb3a
- SHA512
  
  175d8f59d0444953bb355f9376fd88d479b953c4f5c2491e98b7d672b9761379d697af8dc9f0c59024623311397fb606835f8738a94725eb77374ee18c47552f
- SSDEEP
  
  192:n0swIPBiCWY8vJpT7/FksuK7HbWKzwxzwQhr2g/RARtcvs3eBeY7l2fI1Iz++BVm:aIf8D7d6gWKzw3D5ARtosyeUvi+iVm
Score

7^/10

persistence upx discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceupx