dfc549e80b0610dd6f21bb1110b20f00942c3f7d12a0bae36a3a446cb567ab12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26921cff7efb83b4d26d91f43336102d_JaffaCakes118
Size

59KB
Sample

241008-2newgayfje
MD5

26921cff7efb83b4d26d91f43336102d
SHA1

7bea3cefbf6403720625b5c1d31e5265e224d4fc
SHA256

dfc549e80b0610dd6f21bb1110b20f00942c3f7d12a0bae36a3a446cb567ab12
SHA512

9f74423b9fa7a3ed518e000b2bb517f02dceab4ecaae7e822ba0420650c8e6684a8f9cf81f774eca8c6d5d53813e16d40832a4e92a0e8e29c5a01684a4beb4ed
SSDEEP

768:spflw15MxkpUI5V6cLLhljYF/ZxxHNdRtktwGkwS+idW6SgVZe3d+c8:spa1GICcLLDOZNtVGkUEDSgS3d+c8

Score

10^/10

discovery evasion trojan upx

Malware Config

Targets

- Target
  
  26921cff7efb83b4d26d91f43336102d_JaffaCakes118
- Size
  
  59KB
- MD5
  
  26921cff7efb83b4d26d91f43336102d
- SHA1
  
  7bea3cefbf6403720625b5c1d31e5265e224d4fc
- SHA256
  
  dfc549e80b0610dd6f21bb1110b20f00942c3f7d12a0bae36a3a446cb567ab12
- SHA512
  
  9f74423b9fa7a3ed518e000b2bb517f02dceab4ecaae7e822ba0420650c8e6684a8f9cf81f774eca8c6d5d53813e16d40832a4e92a0e8e29c5a01684a4beb4ed
- SSDEEP
  
  768:spflw15MxkpUI5V6cLLhljYF/ZxxHNdRtktwGkwS+idW6SgVZe3d+c8:spa1GICcLLDOZNtVGkUEDSgS3d+c8
Score

10^/10

evasion trojan upx discovery
- Modifies firewall policy service
  evasion
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasiontrojanupx

behavioral2

discoveryevasiontrojanupx