593e32fa5513774112134759df27086af60f8596270556d24deaa6f7692de25d | Triage

Sharing

General

Target

ef05f92011b73f22c28f58ad87c95c52_JaffaCakes118
Size

45KB
Sample

240921-egynnstgjr
MD5

ef05f92011b73f22c28f58ad87c95c52
SHA1

7cda1ce6283f9031eab039b8fa5af5c508239e90
SHA256

593e32fa5513774112134759df27086af60f8596270556d24deaa6f7692de25d
SHA512

662dfa375781fd72c758ca959561bfe647ea2fcc29e046d1b06565b1e7e7decfe647cb6cd5d3947ef84086b9758fc99d12c31b77e186c9d42ee30d39d7db9bf2
SSDEEP

768:cWMOb+NmcRxOeVJtvqEo5LMUQJmRc6MYOZsy:v6qeVJotLMUQJmSBZsy

Score

10^/10

discovery evasion upx

Malware Config

Targets

- Target
  
  ef05f92011b73f22c28f58ad87c95c52_JaffaCakes118
- Size
  
  45KB
- MD5
  
  ef05f92011b73f22c28f58ad87c95c52
- SHA1
  
  7cda1ce6283f9031eab039b8fa5af5c508239e90
- SHA256
  
  593e32fa5513774112134759df27086af60f8596270556d24deaa6f7692de25d
- SHA512
  
  662dfa375781fd72c758ca959561bfe647ea2fcc29e046d1b06565b1e7e7decfe647cb6cd5d3947ef84086b9758fc99d12c31b77e186c9d42ee30d39d7db9bf2
- SSDEEP
  
  768:cWMOb+NmcRxOeVJtvqEo5LMUQJmRc6MYOZsy:v6qeVJotLMUQJmSBZsy
Score

10^/10

discovery evasion upx
- Modifies firewall policy service
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionupx

behavioral2