b979871933d75859b8d0ab05e27b083930fb3b005bd51244419d7151f6d25f7e | Triage

Sharing

General

Target

09bfc22b80cc5322a5f029c1b6330a5a_JaffaCakes118
Size

219KB
Sample

241002-kaj5lazepf
MD5

09bfc22b80cc5322a5f029c1b6330a5a
SHA1

06e541c7cb4fb3f34ee483ebef0aaa891bf2cf5c
SHA256

b979871933d75859b8d0ab05e27b083930fb3b005bd51244419d7151f6d25f7e
SHA512

790cda033ec02003e74e991dac16fc8571a3363840d4fd1d4be430663c68cf2d7b4476e378b42fb334f35f51e8fcceac6626fc8f4190b80887f01b0546625093
SSDEEP

6144:xsehzRFIRZgjX+WzdpUT5sdusBG0UwGayjkwB:xrSmjX+Qdpc5nn0UayR

Score

8^/10

discovery evasion execution persistence upx

Malware Config

Targets

- Target
  
  09bfc22b80cc5322a5f029c1b6330a5a_JaffaCakes118
- Size
  
  219KB
- MD5
  
  09bfc22b80cc5322a5f029c1b6330a5a
- SHA1
  
  06e541c7cb4fb3f34ee483ebef0aaa891bf2cf5c
- SHA256
  
  b979871933d75859b8d0ab05e27b083930fb3b005bd51244419d7151f6d25f7e
- SHA512
  
  790cda033ec02003e74e991dac16fc8571a3363840d4fd1d4be430663c68cf2d7b4476e378b42fb334f35f51e8fcceac6626fc8f4190b80887f01b0546625093
- SSDEEP
  
  6144:xsehzRFIRZgjX+WzdpUT5sdusBG0UwGayjkwB:xrSmjX+Qdpc5nn0UayR
Score

8^/10

discovery evasion execution persistence upx
- Stops running service(s)
  evasion execution
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionpersistenceupx

behavioral2

discoveryevasionexecutionpersistenceupx