9b06171fcf358057345a55f8f4bfe6a78230b7a52ecbe7c3541023a5c395e4f6 | Triage

Sharing

General

Target

fb5b8c3785c5af48a90213626ae65621_JaffaCakes118
Size

8KB
Sample

240928-da8dvswamd
MD5

fb5b8c3785c5af48a90213626ae65621
SHA1

027ebc2d506bee702af032d5dabc003b4381ece2
SHA256

9b06171fcf358057345a55f8f4bfe6a78230b7a52ecbe7c3541023a5c395e4f6
SHA512

6d965278c293e10a8fe2bc5e8a171176a776d32a5a7714b5160e5b3e5795a2c37aa801425dbb4edee1710843d2db79e24bbdac3ab6f1a3d4299c17610dffe79a
SSDEEP

192:4BH7yq7g9cq2C5BTGIFCoSfiW6lgy7TMtDv:qocq2CXa0AiWe7T

Score

8^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  fb5b8c3785c5af48a90213626ae65621_JaffaCakes118
- Size
  
  8KB
- MD5
  
  fb5b8c3785c5af48a90213626ae65621
- SHA1
  
  027ebc2d506bee702af032d5dabc003b4381ece2
- SHA256
  
  9b06171fcf358057345a55f8f4bfe6a78230b7a52ecbe7c3541023a5c395e4f6
- SHA512
  
  6d965278c293e10a8fe2bc5e8a171176a776d32a5a7714b5160e5b3e5795a2c37aa801425dbb4edee1710843d2db79e24bbdac3ab6f1a3d4299c17610dffe79a
- SSDEEP
  
  192:4BH7yq7g9cq2C5BTGIFCoSfiW6lgy7TMtDv:qocq2CXa0AiWe7T
Score

8^/10

discovery persistence upx
- Adds policy Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceupx