6d6e57b28c39eeca2785ff40e8bc4f970f47f19a1fb71fd90e0c09c4d5dcbcac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c966205614e4a1b5bc8faa09e8e1c01d_JaffaCakes118
Size

451KB
Sample

240829-xbebysvhne
MD5

c966205614e4a1b5bc8faa09e8e1c01d
SHA1

5deea53d15db280cf613fa5ccfbe1130dc0cdf65
SHA256

6d6e57b28c39eeca2785ff40e8bc4f970f47f19a1fb71fd90e0c09c4d5dcbcac
SHA512

8edc37301c9765107ce201cd3ebf70418c84d0563afe4287a5952896fd81bb409d75bb7bd4b7983413414ca8e551b5f306153e9d50e42a2e6c6c2e0b84fbe353
SSDEEP

6144:m0FGuIH5LBHng5HakjpCvOVIuhJG+EzkB7RF6v6t:euIZNga+498JG+EzkB7RF6v6

Score

10^/10

discovery evasion upx

Malware Config

Targets

- Target
  
  c966205614e4a1b5bc8faa09e8e1c01d_JaffaCakes118
- Size
  
  451KB
- MD5
  
  c966205614e4a1b5bc8faa09e8e1c01d
- SHA1
  
  5deea53d15db280cf613fa5ccfbe1130dc0cdf65
- SHA256
  
  6d6e57b28c39eeca2785ff40e8bc4f970f47f19a1fb71fd90e0c09c4d5dcbcac
- SHA512
  
  8edc37301c9765107ce201cd3ebf70418c84d0563afe4287a5952896fd81bb409d75bb7bd4b7983413414ca8e551b5f306153e9d50e42a2e6c6c2e0b84fbe353
- SSDEEP
  
  6144:m0FGuIH5LBHng5HakjpCvOVIuhJG+EzkB7RF6v6t:euIZNga+498JG+EzkB7RF6v6
Score

10^/10

discovery evasion upx
- Modifies firewall policy service
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionupx

behavioral2

discoveryevasionupx