234f3cac7cb3669930f52e57eab071abcf9de623cf3161b5836c65dee4f54195 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

276dc85da4a1eedd04d5d077fe0e4d36_JaffaCakes118
Size

5KB
Sample

241009-abnjas1dlm
MD5

276dc85da4a1eedd04d5d077fe0e4d36
SHA1

d2a1e59c9824d1c59b72be611b02b3d9ed2279ee
SHA256

234f3cac7cb3669930f52e57eab071abcf9de623cf3161b5836c65dee4f54195
SHA512

109dc6535d864d86701227ab152cdce71f3a6915fbf0eff7eab1b94abaf26670161f4a0e01c4cae63db8cfd7f00b2ccb4e52cf0a6127a27112dd03b42e4568e0
SSDEEP

96:xC61F5SpIGlvLzEX4kKeu+SLeYLgIRfVQKXnw:PF5QVvXEX6+SKYLgIsKXnw

Score

8^/10

discovery evasion persistence privilege_escalation upx

Malware Config

Targets

- Target
  
  276dc85da4a1eedd04d5d077fe0e4d36_JaffaCakes118
- Size
  
  5KB
- MD5
  
  276dc85da4a1eedd04d5d077fe0e4d36
- SHA1
  
  d2a1e59c9824d1c59b72be611b02b3d9ed2279ee
- SHA256
  
  234f3cac7cb3669930f52e57eab071abcf9de623cf3161b5836c65dee4f54195
- SHA512
  
  109dc6535d864d86701227ab152cdce71f3a6915fbf0eff7eab1b94abaf26670161f4a0e01c4cae63db8cfd7f00b2ccb4e52cf0a6127a27112dd03b42e4568e0
- SSDEEP
  
  96:xC61F5SpIGlvLzEX4kKeu+SLeYLgIRfVQKXnw:PF5QVvXEX6+SKYLgIsKXnw
Score

8^/10

discovery upx evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasionpersistenceprivilege_escalationupx