01cb85ba38af54aee9111e2540fa7af384353a79e6ba0dd0279349ec2def2276 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd17086b08807f4981af4d6ec88a12ff_JaffaCakes118
Size

64KB
Sample

240912-1e1wxawcnn
MD5

dd17086b08807f4981af4d6ec88a12ff
SHA1

980d842a3f4db4d57081c942d8661a2dbd01c76d
SHA256

01cb85ba38af54aee9111e2540fa7af384353a79e6ba0dd0279349ec2def2276
SHA512

54a95c99d17f5f2647ea300e8280ede6dcfdbe4085815be457f4f3d3a79873615395719145999988134fd3b4632edecc8e594fedb3cdfadc3e9c10fb5e987620
SSDEEP

1536:m8w+Y/xpX6xV1gxqGFtkGCj3yZczdaUMW176FYJPBYaEpmoyl:m8w1y1gxNk73y2plMW176FYBBYpmoi

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  dd17086b08807f4981af4d6ec88a12ff_JaffaCakes118
- Size
  
  64KB
- MD5
  
  dd17086b08807f4981af4d6ec88a12ff
- SHA1
  
  980d842a3f4db4d57081c942d8661a2dbd01c76d
- SHA256
  
  01cb85ba38af54aee9111e2540fa7af384353a79e6ba0dd0279349ec2def2276
- SHA512
  
  54a95c99d17f5f2647ea300e8280ede6dcfdbe4085815be457f4f3d3a79873615395719145999988134fd3b4632edecc8e594fedb3cdfadc3e9c10fb5e987620
- SSDEEP
  
  1536:m8w+Y/xpX6xV1gxqGFtkGCj3yZczdaUMW176FYJPBYaEpmoyl:m8w1y1gxNk73y2plMW176FYBBYpmoi
Score

7^/10

discovery persistence upx
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2