15660cccc2594e1043ccdd7742db12a05a8d49edcd59ceedcaa71418de6b0aa6 | Triage

Sharing

General

Target

be45aef94d632822d6a1125553101fc1_JaffaCakes118
Size

7KB
Sample

241203-t3q82sypgl
MD5

be45aef94d632822d6a1125553101fc1
SHA1

d00524936a3ab450b4747fa34c25f1c644a8ebbd
SHA256

15660cccc2594e1043ccdd7742db12a05a8d49edcd59ceedcaa71418de6b0aa6
SHA512

12023780e722b8fc750028824c402d8bfe57ac42d155804a600158bfa00833806846e1edd13b9999ab0d694ff1e9f014a4012af1d785ecdd6a31c81e2e7a753f
SSDEEP

192:j3rP+/JBAej2Ou4hGUKDaFoYl7Obb0bIa3pAM86k6Roh3:jj+BBdbuM7eSCbda3pVFk6GV

Score

8^/10

discovery evasion persistence privilege_escalation upx

Malware Config

Targets

- Target
  
  be45aef94d632822d6a1125553101fc1_JaffaCakes118
- Size
  
  7KB
- MD5
  
  be45aef94d632822d6a1125553101fc1
- SHA1
  
  d00524936a3ab450b4747fa34c25f1c644a8ebbd
- SHA256
  
  15660cccc2594e1043ccdd7742db12a05a8d49edcd59ceedcaa71418de6b0aa6
- SHA512
  
  12023780e722b8fc750028824c402d8bfe57ac42d155804a600158bfa00833806846e1edd13b9999ab0d694ff1e9f014a4012af1d785ecdd6a31c81e2e7a753f
- SSDEEP
  
  192:j3rP+/JBAej2Ou4hGUKDaFoYl7Obb0bIa3pAM86k6Roh3:jj+BBdbuM7eSCbda3pVFk6GV
Score

8^/10

discovery evasion persistence privilege_escalation upx
- Disables Task Manager via registry modification
  evasion
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationupx

behavioral2

discoveryevasionpersistenceprivilege_escalationupx