0002e69005cc174bd43afffe3b1a06e604765d5b1a1c277a8c333d3331c0bae9 | Triage

Submit
Reports

Overview

overview

Static

static

7

1ba49df189...18.exe

windows7-x64

7

1ba49df189...18.exe

windows10-2004-x64

Sharing

General

Target

1ba49df189232267d14fca552a3f9852_JaffaCakes118
Size

28KB
Sample

240701-rsbz9swfpb
MD5

1ba49df189232267d14fca552a3f9852
SHA1

7dee9329f8d1b349949316459bd86a5e79c65082
SHA256

0002e69005cc174bd43afffe3b1a06e604765d5b1a1c277a8c333d3331c0bae9
SHA512

6054fe41f523538c32e71f2c51ae987b18e8ea93e3ae2a69d51c9c7173e11c02c96f4733e0e67cc1fd62f0cdf972d91b42fd0ea05156642d613d2a128c93561d
SSDEEP

384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN2FYaB:Dv8IRRdsxq1DjJcqfFFYw

Score

10^/10

microsoft persistence phishing product:outlook upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

1ba49df189232267d14fca552a3f9852_JaffaCakes118.exe

Resource

win7-20240508-en

persistence upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

1ba49df189232267d14fca552a3f9852_JaffaCakes118.exe

Resource

win10v2004-20240611-en

microsoft persistence phishing product:outlook upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  1ba49df189232267d14fca552a3f9852_JaffaCakes118
- Size
  
  28KB
- MD5
  
  1ba49df189232267d14fca552a3f9852
- SHA1
  
  7dee9329f8d1b349949316459bd86a5e79c65082
- SHA256
  
  0002e69005cc174bd43afffe3b1a06e604765d5b1a1c277a8c333d3331c0bae9
- SHA512
  
  6054fe41f523538c32e71f2c51ae987b18e8ea93e3ae2a69d51c9c7173e11c02c96f4733e0e67cc1fd62f0cdf972d91b42fd0ea05156642d613d2a128c93561d
- SSDEEP
  
  384:1vxBbK26lj5Id8SpHx9jLhsznnVxA1WmP5w7GGCJlqqwMyN2FYaB:Dv8IRRdsxq1DjJcqfFFYw
Score

10^/10

persistence upx microsoft phishing product:outlook
- Detected microsoft outlook phishing page
  phishing microsoft product:outlook
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishingproduct:outlookupx

© 2018-2024

Terms | Privacy