d40cd384070b0972ece63d5d7ca0bf40499ba4c883b74dec522dec49e5d2af86 | Triage

Sharing

General

Target

11d5a0f847381c1908a983746d85abbe_JaffaCakes118
Size

26KB
Sample

241004-e336aaycqb
MD5

11d5a0f847381c1908a983746d85abbe
SHA1

a501d5dd791a25868aeaf831d9a556a4c1d95f0e
SHA256

d40cd384070b0972ece63d5d7ca0bf40499ba4c883b74dec522dec49e5d2af86
SHA512

13b2a5018856f8cc40545e93ab8d31922ff1271f2cdd58cee79b10bbdca3199db79cc15458080ac87eb0dcdf2e905cefba771f7559dba12de0434678e1cb25b2
SSDEEP

384:otY/shYtBBblC1VRWPyOxtz41XLnQpKsKhPM7aG3oAVNUtLL:ewsitBd81VRWqOxcLn7NS6YNcL

Score

6^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  11d5a0f847381c1908a983746d85abbe_JaffaCakes118
- Size
  
  26KB
- MD5
  
  11d5a0f847381c1908a983746d85abbe
- SHA1
  
  a501d5dd791a25868aeaf831d9a556a4c1d95f0e
- SHA256
  
  d40cd384070b0972ece63d5d7ca0bf40499ba4c883b74dec522dec49e5d2af86
- SHA512
  
  13b2a5018856f8cc40545e93ab8d31922ff1271f2cdd58cee79b10bbdca3199db79cc15458080ac87eb0dcdf2e905cefba771f7559dba12de0434678e1cb25b2
- SSDEEP
  
  384:otY/shYtBBblC1VRWPyOxtz41XLnQpKsKhPM7aG3oAVNUtLL:ewsitBd81VRWqOxcLn7NS6YNcL
Score

6^/10

discovery persistence upx
- Modifies WinLogon
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx