1e6f195db37e170c19462105601285c06ce62ea3db2cda97729c669b855f92bc | Triage

Sharing

General

Target

eeef13f8f5f0f7233ae243afe78fb3e2_JaffaCakes118
Size

231KB
Sample

240921-dasnea1hml
MD5

eeef13f8f5f0f7233ae243afe78fb3e2
SHA1

0dec5e367fdf7c9bcc8b2f9b74127c441f792197
SHA256

1e6f195db37e170c19462105601285c06ce62ea3db2cda97729c669b855f92bc
SHA512

c52e15f7b8b8e3b57c0065893dec6b464ac2f79318de2f9f5efb4d6a0fb1afbaca0246dfa6a8b86d25ee7d1029e28f4f5a7329daa15f315cae9f097cdfa4421b
SSDEEP

3072:jZzIQZk9fN8RjurfgV9Wnk27vPzR7K2PR6paVkOiv405m:jZkykQRjhV0n9dDKL5m

Score

10^/10

discovery evasion upx

Malware Config

Targets

- Target
  
  eeef13f8f5f0f7233ae243afe78fb3e2_JaffaCakes118
- Size
  
  231KB
- MD5
  
  eeef13f8f5f0f7233ae243afe78fb3e2
- SHA1
  
  0dec5e367fdf7c9bcc8b2f9b74127c441f792197
- SHA256
  
  1e6f195db37e170c19462105601285c06ce62ea3db2cda97729c669b855f92bc
- SHA512
  
  c52e15f7b8b8e3b57c0065893dec6b464ac2f79318de2f9f5efb4d6a0fb1afbaca0246dfa6a8b86d25ee7d1029e28f4f5a7329daa15f315cae9f097cdfa4421b
- SSDEEP
  
  3072:jZzIQZk9fN8RjurfgV9Wnk27vPzR7K2PR6paVkOiv405m:jZkykQRjhV0n9dDKL5m
Score

10^/10

discovery upx evasion
- Modifies firewall policy service
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionupx