d98c60dfa060fc12ae6ea9ed141ae3b38d95f4c36c2b2fa8a0c69ed6152d8b8d | Triage

Submit
Reports

Overview

overview

Static

static

7

1abe04ee02...18.exe

windows7-x64

7

1abe04ee02...18.exe

windows10-2004-x64

Sharing

General

Target

1abe04ee02c3bdb6143dd066f7e41269_JaffaCakes118
Size

28KB
Sample

240701-k98l8stbng
MD5

1abe04ee02c3bdb6143dd066f7e41269
SHA1

353bd03f03c85da563729835837a2455d0420c36
SHA256

d98c60dfa060fc12ae6ea9ed141ae3b38d95f4c36c2b2fa8a0c69ed6152d8b8d
SHA512

08696fca560d00fb9b5cd2d596ea776dc7549440c11832e4c54cc229e6a80fe283a7d2196226e9958d3a27ab7bf8a70bebd6b1974b1129acbdf1c2da7b5fc00c
SSDEEP

384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNVVmi:Dv8IRRdsxq1DjJcqfg

Score

10^/10

microsoft persistence phishing product:outlook upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

1abe04ee02c3bdb6143dd066f7e41269_JaffaCakes118.exe

Resource

win7-20240611-en

persistence upx

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

1abe04ee02c3bdb6143dd066f7e41269_JaffaCakes118.exe

Resource

win10v2004-20240611-en

microsoft persistence phishing product:outlook upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  1abe04ee02c3bdb6143dd066f7e41269_JaffaCakes118
- Size
  
  28KB
- MD5
  
  1abe04ee02c3bdb6143dd066f7e41269
- SHA1
  
  353bd03f03c85da563729835837a2455d0420c36
- SHA256
  
  d98c60dfa060fc12ae6ea9ed141ae3b38d95f4c36c2b2fa8a0c69ed6152d8b8d
- SHA512
  
  08696fca560d00fb9b5cd2d596ea776dc7549440c11832e4c54cc229e6a80fe283a7d2196226e9958d3a27ab7bf8a70bebd6b1974b1129acbdf1c2da7b5fc00c
- SSDEEP
  
  384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyNVVmi:Dv8IRRdsxq1DjJcqfg
Score

10^/10

persistence upx microsoft phishing product:outlook
- Detected microsoft outlook phishing page
  phishing microsoft product:outlook
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishingproduct:outlookupx

© 2018-2024

Terms | Privacy