cd7c4bf57929bee623c368cf83d5974998ec3f859ff062b259cbc9b2fbbcb9e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf46f02574b046025681210707c1bdf0_JaffaCakes118
Size

152KB
Sample

240906-lyny5azglh
MD5

cf46f02574b046025681210707c1bdf0
SHA1

a32c42f2aab1380bf5c7e1dcb7d15d2f8ba44c58
SHA256

cd7c4bf57929bee623c368cf83d5974998ec3f859ff062b259cbc9b2fbbcb9e0
SHA512

2c72c28ddc8af2413c358eb7c5795cba22218a01776366ef43b78d41e3ce30d79fbfb8087c2ee4827979d750d59fe958ade06c37eb86d161384df87a6794a103
SSDEEP

3072:uT9UCT5oOcNarpDX1eIbMPghOhr1/ooJZ5q/WuU+T0EZzt104:ueC5DX1+b1/hZo/RU+4EFY4

Score

10^/10

discovery evasion trojan upx

Malware Config

Targets

- Target
  
  cf46f02574b046025681210707c1bdf0_JaffaCakes118
- Size
  
  152KB
- MD5
  
  cf46f02574b046025681210707c1bdf0
- SHA1
  
  a32c42f2aab1380bf5c7e1dcb7d15d2f8ba44c58
- SHA256
  
  cd7c4bf57929bee623c368cf83d5974998ec3f859ff062b259cbc9b2fbbcb9e0
- SHA512
  
  2c72c28ddc8af2413c358eb7c5795cba22218a01776366ef43b78d41e3ce30d79fbfb8087c2ee4827979d750d59fe958ade06c37eb86d161384df87a6794a103
- SSDEEP
  
  3072:uT9UCT5oOcNarpDX1eIbMPghOhr1/ooJZ5q/WuU+T0EZzt104:ueC5DX1+b1/hZo/RU+4EFY4
Score

10^/10

discovery evasion trojan upx
- UAC bypass
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasiontrojanupx