1ab540a123dfdaea8444e33d297375caafb3c272c494492dcb93d1f2e6d909f0 | Triage

Sharing

General

Target

82780652973529f2e958bebc80e9c4b0_JaffaCakes118
Size

7KB
Sample

241031-kec7vawnal
MD5

82780652973529f2e958bebc80e9c4b0
SHA1

b5185958adce4a7ffcb17084b883c6c8ea31a585
SHA256

1ab540a123dfdaea8444e33d297375caafb3c272c494492dcb93d1f2e6d909f0
SHA512

ff0708cfb93180ba5a58a999e251d673fa85ce51a2298c090cca3f93171727fd6b58aa2f6fcff528798cddfe92ff1af106b2ff73cbe9b7ad6d0b6a21ca88d366
SSDEEP

96:B7paruGEnnQ1TVJ8JV39/Q6kAvUAvzbxGx/0KGg5sZiU/D5wlwB/NV:B7pDGAT9/Q+rbMKZiWAwBlV

Score

8^/10

discovery evasion persistence privilege_escalation upx

Malware Config

Targets

- Target
  
  82780652973529f2e958bebc80e9c4b0_JaffaCakes118
- Size
  
  7KB
- MD5
  
  82780652973529f2e958bebc80e9c4b0
- SHA1
  
  b5185958adce4a7ffcb17084b883c6c8ea31a585
- SHA256
  
  1ab540a123dfdaea8444e33d297375caafb3c272c494492dcb93d1f2e6d909f0
- SHA512
  
  ff0708cfb93180ba5a58a999e251d673fa85ce51a2298c090cca3f93171727fd6b58aa2f6fcff528798cddfe92ff1af106b2ff73cbe9b7ad6d0b6a21ca88d366
- SSDEEP
  
  96:B7paruGEnnQ1TVJ8JV39/Q6kAvUAvzbxGx/0KGg5sZiU/D5wlwB/NV:B7pDGAT9/Q+rbMKZiWAwBlV
Score

8^/10

discovery evasion persistence privilege_escalation upx
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationupx

behavioral2

discoveryevasionpersistenceprivilege_escalationupx