0103d896fe0f7dcf97433510ab3b2a030ba17abc66929e4670ae8662c7da2041 | Triage

Sharing

General

Target

JaffaCakes118_981f2bf026b53bd8d2a826a254edd2a8
Size

613KB
Sample

250204-znf3estkfn
MD5

981f2bf026b53bd8d2a826a254edd2a8
SHA1

c4a263e84d68fc31140882ef6e3bbda98538e8db
SHA256

0103d896fe0f7dcf97433510ab3b2a030ba17abc66929e4670ae8662c7da2041
SHA512

960d50b6af124d61c1cc2633c5f9ce69208d08956e16102f9306dd396fca80d7ec2605128d56976010873074ee5166ee27e6c41af8a238f722c356e10ad7378f
SSDEEP

12288:O7rKeNx1+IN2BXkO5g1uzt1PtLagJPXEEMHvfKNavXC0qw:O7rKbFkO61Gt1PtXfEEMPIcXgw

Score

10^/10

discovery persistence upx

Malware Config

Targets

- Target
  
  JaffaCakes118_981f2bf026b53bd8d2a826a254edd2a8
- Size
  
  613KB
- MD5
  
  981f2bf026b53bd8d2a826a254edd2a8
- SHA1
  
  c4a263e84d68fc31140882ef6e3bbda98538e8db
- SHA256
  
  0103d896fe0f7dcf97433510ab3b2a030ba17abc66929e4670ae8662c7da2041
- SHA512
  
  960d50b6af124d61c1cc2633c5f9ce69208d08956e16102f9306dd396fca80d7ec2605128d56976010873074ee5166ee27e6c41af8a238f722c356e10ad7378f
- SSDEEP
  
  12288:O7rKeNx1+IN2BXkO5g1uzt1PtLagJPXEEMHvfKNavXC0qw:O7rKbFkO61Gt1PtXfEEMPIcXgw
Score

10^/10

discovery persistence upx
- Modifies WinLogon for persistence
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx