0ce36021731a718190f970769d0bc51e74268f7bc907c1a7251c0cb05336cf66 | Triage

Sharing

General

Target

dbf56ee3e6aac2e967ca25d1265063cb_JaffaCakes118
Size

35KB
Sample

240912-gxy1gsverl
MD5

dbf56ee3e6aac2e967ca25d1265063cb
SHA1

4656ac7c7244de9fe8ad95e2aa40a3aae6a70775
SHA256

0ce36021731a718190f970769d0bc51e74268f7bc907c1a7251c0cb05336cf66
SHA512

7ba76f35ec12394f08987c2a7897d3f0d64fc0d8f05edaca21cffe28768863e03809526159bc5aef9ce2004fad618c4b8f7adbad7b6910b6e527b34423f4e652
SSDEEP

768:1yZaKiQO/wls1dzo7T9DRWPx8p2SivRLAfzb8ZCT:c/O/wl6kRRSJpLALgZc

Score

10^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  dbf56ee3e6aac2e967ca25d1265063cb_JaffaCakes118
- Size
  
  35KB
- MD5
  
  dbf56ee3e6aac2e967ca25d1265063cb
- SHA1
  
  4656ac7c7244de9fe8ad95e2aa40a3aae6a70775
- SHA256
  
  0ce36021731a718190f970769d0bc51e74268f7bc907c1a7251c0cb05336cf66
- SHA512
  
  7ba76f35ec12394f08987c2a7897d3f0d64fc0d8f05edaca21cffe28768863e03809526159bc5aef9ce2004fad618c4b8f7adbad7b6910b6e527b34423f4e652
- SSDEEP
  
  768:1yZaKiQO/wls1dzo7T9DRWPx8p2SivRLAfzb8ZCT:c/O/wl6kRRSJpLALgZc
Score

10^/10

discovery evasion execution upx
- Disables service(s)
  evasion execution
- Stops running service(s)
  evasion execution
- Deletes itself
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx