99fca176ecd8441d6ef7bedc3d030492f577c0788e22efa1a41a913cd73d8ae5 | Triage

Sharing

General

Target

eac950a1c99f5f968175e65d3b0c73f8_JaffaCakes118
Size

21KB
Sample

240919-hjrvpawcmq
MD5

eac950a1c99f5f968175e65d3b0c73f8
SHA1

ff09853d834f9a640f67b55d9fc0cb7c494a2d8e
SHA256

99fca176ecd8441d6ef7bedc3d030492f577c0788e22efa1a41a913cd73d8ae5
SHA512

e690dce2d4052cc4a6af6b1b4b3121008004024a9e8550fd30d8318e45e31a9b1d2604619664f7a5a7126e2128830e0cf79956a38c23cf2b58ab12eae126d96d
SSDEEP

384:QMLWCpCJ6xhD8+kg7QpFls56uDo4WEpF5Z1BRIqd8jXU3bj2OTo:TzZj8+d7QpFHuDoTOFPfL3bj7

Score

8^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  eac950a1c99f5f968175e65d3b0c73f8_JaffaCakes118
- Size
  
  21KB
- MD5
  
  eac950a1c99f5f968175e65d3b0c73f8
- SHA1
  
  ff09853d834f9a640f67b55d9fc0cb7c494a2d8e
- SHA256
  
  99fca176ecd8441d6ef7bedc3d030492f577c0788e22efa1a41a913cd73d8ae5
- SHA512
  
  e690dce2d4052cc4a6af6b1b4b3121008004024a9e8550fd30d8318e45e31a9b1d2604619664f7a5a7126e2128830e0cf79956a38c23cf2b58ab12eae126d96d
- SSDEEP
  
  384:QMLWCpCJ6xhD8+kg7QpFls56uDo4WEpF5Z1BRIqd8jXU3bj2OTo:TzZj8+d7QpFHuDoTOFPfL3bj7
Score

8^/10

discovery evasion execution upx
- Stops running service(s)
  evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx