cebe763c049b97222dc59b7091ebee1706620a14adee1c8fe2e494accbf51ba0 | Triage

Sharing

General

Target

dcc6a7fb39744dce799b0da0911d26a5_JaffaCakes118
Size

22KB
Sample

240912-wrw19sxbqg
MD5

dcc6a7fb39744dce799b0da0911d26a5
SHA1

b78abf3a6718f0fe0ff164c1d9158765a4fbcae6
SHA256

cebe763c049b97222dc59b7091ebee1706620a14adee1c8fe2e494accbf51ba0
SHA512

3f8f35753fd94c0689f8c5e1bd87c4e940003c666abc3d0db26f0b1b5611ec818835d862a2605076965cc1dc5aaed8100ab13284a6d53e6b2b3b15f03fe80d32
SSDEEP

384:6LWCpCJ6x3H747WWnuyb6ldYPVhE11uiioMqz9bYK7n7Ey6hglwo:AzZhH7ab63YPVhXiiP2BXcy6hu

Score

8^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  dcc6a7fb39744dce799b0da0911d26a5_JaffaCakes118
- Size
  
  22KB
- MD5
  
  dcc6a7fb39744dce799b0da0911d26a5
- SHA1
  
  b78abf3a6718f0fe0ff164c1d9158765a4fbcae6
- SHA256
  
  cebe763c049b97222dc59b7091ebee1706620a14adee1c8fe2e494accbf51ba0
- SHA512
  
  3f8f35753fd94c0689f8c5e1bd87c4e940003c666abc3d0db26f0b1b5611ec818835d862a2605076965cc1dc5aaed8100ab13284a6d53e6b2b3b15f03fe80d32
- SSDEEP
  
  384:6LWCpCJ6x3H747WWnuyb6ldYPVhE11uiioMqz9bYK7n7Ey6hglwo:AzZhH7ab63YPVhXiiP2BXcy6hu
Score

8^/10

discovery evasion execution upx
- Stops running service(s)
  evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx