6e26dfaba6ee6b6aabfdeba157db2eab734c7d9aa7546dd97e4c7ed6dab2f7bf | Triage

Sharing

General

Target

eaa8ca1826168a6e992b85dc2d84c636_JaffaCakes118
Size

147KB
Sample

240919-f1dnaasfjh
MD5

eaa8ca1826168a6e992b85dc2d84c636
SHA1

e6fa6b3631c0eca8d6f44862c382ff05efad8aee
SHA256

6e26dfaba6ee6b6aabfdeba157db2eab734c7d9aa7546dd97e4c7ed6dab2f7bf
SHA512

9f6a034a100508ecd2e5a5bfcee56135f253b055f5abb5a183a36bcca97f9ea660535cbf922803d230662988a4fbe4efc16007a78173af9dcc6b795b17fb3bb9
SSDEEP

3072:Gc1kYmqnhIHyVjBWV9aykONTPhSC7TP54bVCiK8/4uPbjUh7KxoutSB77777J77I:GQ+HyVwipONsC3P54xlKI3z4AxoSSB7y

Score

10^/10

discovery evasion persistence trojan upx

Malware Config

Targets

- Target
  
  eaa8ca1826168a6e992b85dc2d84c636_JaffaCakes118
- Size
  
  147KB
- MD5
  
  eaa8ca1826168a6e992b85dc2d84c636
- SHA1
  
  e6fa6b3631c0eca8d6f44862c382ff05efad8aee
- SHA256
  
  6e26dfaba6ee6b6aabfdeba157db2eab734c7d9aa7546dd97e4c7ed6dab2f7bf
- SHA512
  
  9f6a034a100508ecd2e5a5bfcee56135f253b055f5abb5a183a36bcca97f9ea660535cbf922803d230662988a4fbe4efc16007a78173af9dcc6b795b17fb3bb9
- SSDEEP
  
  3072:Gc1kYmqnhIHyVjBWV9aykONTPhSC7TP54bVCiK8/4uPbjUh7KxoutSB77777J77I:GQ+HyVwipONsC3P54xlKI3z4AxoSSB7y
Score

10^/10

discovery evasion persistence trojan upx
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojanupx

behavioral2

discoveryevasionpersistencetrojanupx