25ca4f144b1452e1cc5b057b0601278fac08dba57d3c62fb622bf9da8fae0be0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebff2e4372a1160ee1a63f36da9bbf7b_JaffaCakes118
Size

22KB
Sample

240919-xpl9qaveja
MD5

ebff2e4372a1160ee1a63f36da9bbf7b
SHA1

799dd268d38feeead7165bc6fff9c2e8415d799a
SHA256

25ca4f144b1452e1cc5b057b0601278fac08dba57d3c62fb622bf9da8fae0be0
SHA512

d1af2f53524a4e96b420c73072fcc816662039556d923681fef3f0bbff401bc97bcdd4f4212f6e86ce913b95660fbab8157337aef2c21ceb6f81f97d643f14e8
SSDEEP

384:jbCEXMMADQIrUeNFwx9E5xtT6fkCMst8AdxIiv4dK8y8KG8szTO4Am7UnwtzwG1T:P1NAUsbxtT6sFst/3IrdlLUwBnbcuyDv

Score

10^/10

discovery evasion execution persistence privilege_escalation upx

Malware Config

Targets

- Target
  
  ebff2e4372a1160ee1a63f36da9bbf7b_JaffaCakes118
- Size
  
  22KB
- MD5
  
  ebff2e4372a1160ee1a63f36da9bbf7b
- SHA1
  
  799dd268d38feeead7165bc6fff9c2e8415d799a
- SHA256
  
  25ca4f144b1452e1cc5b057b0601278fac08dba57d3c62fb622bf9da8fae0be0
- SHA512
  
  d1af2f53524a4e96b420c73072fcc816662039556d923681fef3f0bbff401bc97bcdd4f4212f6e86ce913b95660fbab8157337aef2c21ceb6f81f97d643f14e8
- SSDEEP
  
  384:jbCEXMMADQIrUeNFwx9E5xtT6fkCMst8AdxIiv4dK8y8KG8szTO4Am7UnwtzwG1T:P1NAUsbxtT6sFst/3IrdlLUwBnbcuyDv
Score

10^/10

discovery evasion execution persistence privilege_escalation upx
- Disables service(s)
  evasion execution
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Network Share Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionpersistenceprivilege_escalationupx

behavioral2

discoveryevasionexecutionpersistenceprivilege_escalationupx