dd98488a21724f89b6854d493e6129663b88fd555f12511d2d3b2fbc5e709873 | Triage

Submit
Reports

Overview

overview

6

Static

static

5

be3e75c354...18.exe

windows7-x64

6

be3e75c354...18.exe

windows10-2004-x64

6

Sharing

General

Target

be3e75c354e70659a00bc153d2eca9fb_JaffaCakes118
Size

226KB
Sample

241203-tyepfsynbp
MD5

be3e75c354e70659a00bc153d2eca9fb
SHA1

342bc36f7314df72d26d4ff3baf4342bad4752ee
SHA256

dd98488a21724f89b6854d493e6129663b88fd555f12511d2d3b2fbc5e709873
SHA512

b7d79b76b318b6d8abde715aef25cb5ecb1e5d073c2dc40f052addb6d76fed371c4b9f8df12f8ccf140cf4492abd471d39e65b6400d66cd757f7319c5bf41429
SSDEEP

3072:OYQMwnLzCSgXCHzypVSwfmX8PiLrjRO7pC8wOmWS+wC/NXk+hNOt0SRKbOIr6bqK:OYknngMy3SwfmwBwSSvC3Gt5Kab7

Score

6^/10

discovery evasion trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

be3e75c354e70659a00bc153d2eca9fb_JaffaCakes118.exe

Resource

win7-20240729-en

discovery evasion trojan upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

be3e75c354e70659a00bc153d2eca9fb_JaffaCakes118.exe

Resource

win10v2004-20241007-en

discovery evasion trojan upx

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  be3e75c354e70659a00bc153d2eca9fb_JaffaCakes118
- Size
  
  226KB
- MD5
  
  be3e75c354e70659a00bc153d2eca9fb
- SHA1
  
  342bc36f7314df72d26d4ff3baf4342bad4752ee
- SHA256
  
  dd98488a21724f89b6854d493e6129663b88fd555f12511d2d3b2fbc5e709873
- SHA512
  
  b7d79b76b318b6d8abde715aef25cb5ecb1e5d073c2dc40f052addb6d76fed371c4b9f8df12f8ccf140cf4492abd471d39e65b6400d66cd757f7319c5bf41429
- SSDEEP
  
  3072:OYQMwnLzCSgXCHzypVSwfmX8PiLrjRO7pC8wOmWS+wC/NXk+hNOt0SRKbOIr6bqK:OYknngMy3SwfmwBwSSvC3Gt5Kab7
Score

6^/10

discovery evasion trojan upx
- Checks whether UAC is enabled
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojanupx

behavioral2

discoveryevasiontrojanupx

© 2018-2024

Terms | Privacy