2709fc5e0451446ce564186d70345f39166204d5e57cf924188ace7946b9ec30 | Triage

Sharing

General

Target

feb71981c9ce9929684c0d1372487e82_JaffaCakes118
Size

21KB
Sample

240929-rrjcys1dph
MD5

feb71981c9ce9929684c0d1372487e82
SHA1

2a9875d3241434714264b85879aa68ee7983a102
SHA256

2709fc5e0451446ce564186d70345f39166204d5e57cf924188ace7946b9ec30
SHA512

be2c2b3effda6e7fb2a892a2eea331111108d01a2dd50b052a5d13fc5591402a19281c9cfed0681f02ef16b4c0e4237ea41040bd226b078afd611c5ed942dbcd
SSDEEP

384:hVMLWCpCJ6xhD8+kg7QpFls56uDo4WEpF5Z1BRIqd8jXU3bj2OTo:hEzZj8+d7QpFHuDoTOFPfL3bj7

Score

8^/10

discovery evasion execution upx

Malware Config

Targets

- Target
  
  feb71981c9ce9929684c0d1372487e82_JaffaCakes118
- Size
  
  21KB
- MD5
  
  feb71981c9ce9929684c0d1372487e82
- SHA1
  
  2a9875d3241434714264b85879aa68ee7983a102
- SHA256
  
  2709fc5e0451446ce564186d70345f39166204d5e57cf924188ace7946b9ec30
- SHA512
  
  be2c2b3effda6e7fb2a892a2eea331111108d01a2dd50b052a5d13fc5591402a19281c9cfed0681f02ef16b4c0e4237ea41040bd226b078afd611c5ed942dbcd
- SSDEEP
  
  384:hVMLWCpCJ6xhD8+kg7QpFls56uDo4WEpF5Z1BRIqd8jXU3bj2OTo:hEzZj8+d7QpFHuDoTOFPfL3bj7
Score

8^/10

discovery evasion execution upx
- Stops running service(s)
  evasion execution
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionupx

behavioral2

discoveryevasionexecutionupx