699d438eeb5b413e6fdedfbf21af37db1de92e4bf4afd7d1eb78492a2a57d52a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56421262396d6d7f38f68239b6ebbb5a_JaffaCakes118
Size

137KB
Sample

241018-jn39ysyajp
MD5

56421262396d6d7f38f68239b6ebbb5a
SHA1

1190082412e9d7442c0dde3cc7231318fc9918d9
SHA256

699d438eeb5b413e6fdedfbf21af37db1de92e4bf4afd7d1eb78492a2a57d52a
SHA512

a98d6c66058bf8b7708f969c398093f3b8d5ec4b864545b0c76c41c1de386d6732b0add745c156cc6f7a6b63f6774c4def4bb82a844085d79e86f68ba0064ea5
SSDEEP

1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53WF:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq

Score

6^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  56421262396d6d7f38f68239b6ebbb5a_JaffaCakes118
- Size
  
  137KB
- MD5
  
  56421262396d6d7f38f68239b6ebbb5a
- SHA1
  
  1190082412e9d7442c0dde3cc7231318fc9918d9
- SHA256
  
  699d438eeb5b413e6fdedfbf21af37db1de92e4bf4afd7d1eb78492a2a57d52a
- SHA512
  
  a98d6c66058bf8b7708f969c398093f3b8d5ec4b864545b0c76c41c1de386d6732b0add745c156cc6f7a6b63f6774c4def4bb82a844085d79e86f68ba0064ea5
- SSDEEP
  
  1536:u/nrqyjrPvRu/BCjnqy8B/lCew3h0Yb9hzuMYaHqW5g1HklJNprKR9lpJtHL53WF:Ye8jMCjM/keGyMYaKW6WXrORRJtrlq
Score

6^/10

discovery persistence upx
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx