c6f30cb0c3ab7ab6d1459a5f030bef6f115f25b8085f3cb09da62fb207e54b22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27a078b56bdb807ad11f334f8ad76702_JaffaCakes118
Size

66KB
Sample

241009-ancmkasfjl
MD5

27a078b56bdb807ad11f334f8ad76702
SHA1

f5e9c8cd6e60267fa95f25c2daa5ae2e5869c3e7
SHA256

c6f30cb0c3ab7ab6d1459a5f030bef6f115f25b8085f3cb09da62fb207e54b22
SHA512

440fe9791ae363ad93c3d9a80e4bc53fa160a29de93428fa9a132db42a70a21a5939b9e8bf08a8878191834217392ed53a92e07eeee70e7fad8c04c20ed12cd0
SSDEEP

768:ly3XhHfmSgRNHB46T5iyq3WfinHm54n0V5FMJOqUDHSxkL8N6cfHihqeXU+4h:lyX0SIHB46EmfinHCdCU+xko/oTk+w

Score

6^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  27a078b56bdb807ad11f334f8ad76702_JaffaCakes118
- Size
  
  66KB
- MD5
  
  27a078b56bdb807ad11f334f8ad76702
- SHA1
  
  f5e9c8cd6e60267fa95f25c2daa5ae2e5869c3e7
- SHA256
  
  c6f30cb0c3ab7ab6d1459a5f030bef6f115f25b8085f3cb09da62fb207e54b22
- SHA512
  
  440fe9791ae363ad93c3d9a80e4bc53fa160a29de93428fa9a132db42a70a21a5939b9e8bf08a8878191834217392ed53a92e07eeee70e7fad8c04c20ed12cd0
- SSDEEP
  
  768:ly3XhHfmSgRNHB46T5iyq3WfinHm54n0V5FMJOqUDHSxkL8N6cfHihqeXU+4h:lyX0SIHB46EmfinHCdCU+xko/oTk+w
Score

6^/10

discovery persistence upx
- Modifies WinLogon
  persistence
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2