79a0f7aaaeb3b9192b3b17ed80cb459fdec5f59146428807805d79bf1856cb0b | Triage

Sharing

General

Target

eef3539a7e4b9c4c80fcfe1db34ce192_JaffaCakes118
Size

28KB
Sample

240921-dhnz7asbpm
MD5

eef3539a7e4b9c4c80fcfe1db34ce192
SHA1

0e8de6d2f09aa09c34b1b1e252bf15c9c75663f9
SHA256

79a0f7aaaeb3b9192b3b17ed80cb459fdec5f59146428807805d79bf1856cb0b
SHA512

737f8c4eb382e346c12efacf050dbf3ae417ed7e7d9b91337a8068934b5ed37fa44ce6ad8273b1868534cb1f9cc1379103629f6905f65e6166d98e4cb8a38481
SSDEEP

768:j7J+XtI2ZjLPl943WV+czLMTPMLGy9EFEcp:p+9blC6j4TELGUEFEcp

Score

10^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  eef3539a7e4b9c4c80fcfe1db34ce192_JaffaCakes118
- Size
  
  28KB
- MD5
  
  eef3539a7e4b9c4c80fcfe1db34ce192
- SHA1
  
  0e8de6d2f09aa09c34b1b1e252bf15c9c75663f9
- SHA256
  
  79a0f7aaaeb3b9192b3b17ed80cb459fdec5f59146428807805d79bf1856cb0b
- SHA512
  
  737f8c4eb382e346c12efacf050dbf3ae417ed7e7d9b91337a8068934b5ed37fa44ce6ad8273b1868534cb1f9cc1379103629f6905f65e6166d98e4cb8a38481
- SSDEEP
  
  768:j7J+XtI2ZjLPl943WV+czLMTPMLGy9EFEcp:p+9blC6j4TELGUEFEcp
Score

10^/10

discovery persistence upx
- Modifies WinLogon for persistence
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2