5ede3c9d934508b44e347309e450a4e76b2ccb1f4c23d1ea9e045c2cc5e9f5ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e158974c1f8332b8949bfcfbac795c4a_JaffaCakes118
Size

26KB
Sample

240915-ats7hawbmc
MD5

e158974c1f8332b8949bfcfbac795c4a
SHA1

e374293cdc58a930cd35d763fe79dad1c34828fd
SHA256

5ede3c9d934508b44e347309e450a4e76b2ccb1f4c23d1ea9e045c2cc5e9f5ea
SHA512

ac5b714f449f384e7a661e5361cae6a56cbb7577212fc3532ccb1ec4e5171eb945a176a0c62e8fa8e27fe63336165e5f510253598a3c155db2e973507e107e17
SSDEEP

384:EjFWQSKKBGXKsO2eW1Ab8En0g6OVSQdNu55xao0yPnE8n6/mFeklzp+DWlWYS:E7SKKWw2eWdD7Ofi/PE8n64lzcK

Score

8^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  e158974c1f8332b8949bfcfbac795c4a_JaffaCakes118
- Size
  
  26KB
- MD5
  
  e158974c1f8332b8949bfcfbac795c4a
- SHA1
  
  e374293cdc58a930cd35d763fe79dad1c34828fd
- SHA256
  
  5ede3c9d934508b44e347309e450a4e76b2ccb1f4c23d1ea9e045c2cc5e9f5ea
- SHA512
  
  ac5b714f449f384e7a661e5361cae6a56cbb7577212fc3532ccb1ec4e5171eb945a176a0c62e8fa8e27fe63336165e5f510253598a3c155db2e973507e107e17
- SSDEEP
  
  384:EjFWQSKKBGXKsO2eW1Ab8En0g6OVSQdNu55xao0yPnE8n6/mFeklzp+DWlWYS:E7SKKWw2eWdD7Ofi/PE8n64lzcK
Score

8^/10

discovery evasion execution upx
- Stops running service(s)
  evasion execution
- Deletes itself
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Network Share Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx