d2f2abb5b24bb9bfe4fb1f9fd3514b59903e41595a303161db90dc69a052a28a | Triage

Sharing

General

Target

ebc52c8a7b8c71d79b0a1e31335b1538_JaffaCakes118
Size

139KB
Sample

240919-vbdz3szcpp
MD5

ebc52c8a7b8c71d79b0a1e31335b1538
SHA1

e58dbde90af1b217c96dbbe2eba47088f54cd03e
SHA256

d2f2abb5b24bb9bfe4fb1f9fd3514b59903e41595a303161db90dc69a052a28a
SHA512

4ef08b20bbe76f6bdc61464160c69f5e8d860625b750a51fdf1f4e588180f99967f140357c8d5ee63a5d0226566466cdb5ab7ffff357f4f23506a8a06fd5a2de
SSDEEP

3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt

Score

7^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  ebc52c8a7b8c71d79b0a1e31335b1538_JaffaCakes118
- Size
  
  139KB
- MD5
  
  ebc52c8a7b8c71d79b0a1e31335b1538
- SHA1
  
  e58dbde90af1b217c96dbbe2eba47088f54cd03e
- SHA256
  
  d2f2abb5b24bb9bfe4fb1f9fd3514b59903e41595a303161db90dc69a052a28a
- SHA512
  
  4ef08b20bbe76f6bdc61464160c69f5e8d860625b750a51fdf1f4e588180f99967f140357c8d5ee63a5d0226566466cdb5ab7ffff357f4f23506a8a06fd5a2de
- SSDEEP
  
  3072:Ye8jMCjM/keGyMYaKW6Y307R116ouVecMdlT0/m:YftIPaN33GP16oBxt
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx