0fabfaa89e6b6abc3c02a01c3305533163ab5c5ae4b7d58db64c351c4b96fc78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0afbc2f89871a5fcd567b0b3619c9a7_JaffaCakes118
Size

15KB
Sample

240907-aaej1avcmd
MD5

d0afbc2f89871a5fcd567b0b3619c9a7
SHA1

5301e1e956bcf8d7420e71e331f990dfe1216453
SHA256

0fabfaa89e6b6abc3c02a01c3305533163ab5c5ae4b7d58db64c351c4b96fc78
SHA512

5dca91e25121a68ecde8205c843bdea273fb3bd6973d78369f25b275c611e7a60f6d05b651fcf4972130f4db7e6ff3b614d1692e6042b11cb6bf5199777ab146
SSDEEP

192:irnwzizJhZq1SvBFgQrB7NA8J5Hv6Yf+0BjUEbSvI+T4N/eLwCRCXSguR:Zz+JPfRrB7O8PP6yBjUsY3LNRCSguR

Score

10^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  d0afbc2f89871a5fcd567b0b3619c9a7_JaffaCakes118
- Size
  
  15KB
- MD5
  
  d0afbc2f89871a5fcd567b0b3619c9a7
- SHA1
  
  5301e1e956bcf8d7420e71e331f990dfe1216453
- SHA256
  
  0fabfaa89e6b6abc3c02a01c3305533163ab5c5ae4b7d58db64c351c4b96fc78
- SHA512
  
  5dca91e25121a68ecde8205c843bdea273fb3bd6973d78369f25b275c611e7a60f6d05b651fcf4972130f4db7e6ff3b614d1692e6042b11cb6bf5199777ab146
- SSDEEP
  
  192:irnwzizJhZq1SvBFgQrB7NA8J5Hv6Yf+0BjUEbSvI+T4N/eLwCRCXSguR:Zz+JPfRrB7O8PP6yBjUsY3LNRCSguR
Score

10^/10

discovery evasion execution upx
- Disables service(s)
  evasion execution
- Stops running service(s)
  evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx