e28f549541d8ccc28d91f83a365f230b411590168ecb84b7939afe877cd3da3b | Triage

Sharing

General

Target

eac3454e270d54890344fb234af7f110_JaffaCakes118
Size

145KB
Sample

240919-g9jfkavgrm
MD5

eac3454e270d54890344fb234af7f110
SHA1

e6bac4c7cfebe9d846246f8cd6b53860ef446af3
SHA256

e28f549541d8ccc28d91f83a365f230b411590168ecb84b7939afe877cd3da3b
SHA512

6632ea33ce40bd8aac62d3050c27c5862d0f5f9f8f93193d5cabbea780f54b0556207188e3346e512163bc24a4cd0c04da0c4a666e882cae72dd7f06934757b3
SSDEEP

3072:FwsYE9PK3YcebVS/dZFXwV3Qrkm7ggFTQH4A6WZrN+gout:F7FBiY5Etua7jFcYFgoS

Score

10^/10

discovery evasion trojan upx

Malware Config

Targets

- Target
  
  eac3454e270d54890344fb234af7f110_JaffaCakes118
- Size
  
  145KB
- MD5
  
  eac3454e270d54890344fb234af7f110
- SHA1
  
  e6bac4c7cfebe9d846246f8cd6b53860ef446af3
- SHA256
  
  e28f549541d8ccc28d91f83a365f230b411590168ecb84b7939afe877cd3da3b
- SHA512
  
  6632ea33ce40bd8aac62d3050c27c5862d0f5f9f8f93193d5cabbea780f54b0556207188e3346e512163bc24a4cd0c04da0c4a666e882cae72dd7f06934757b3
- SSDEEP
  
  3072:FwsYE9PK3YcebVS/dZFXwV3Qrkm7ggFTQH4A6WZrN+gout:F7FBiY5Etua7jFcYFgoS
Score

10^/10

discovery evasion trojan upx
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojanupx

behavioral2

discoveryevasiontrojanupx