Overview

overview

7

Static

static

3

ec3b59f895...18.exe

windows7-x64

7

ec3b59f895...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec3b59f895054b46715e325080fea10d_JaffaCakes118

  • Size

    303KB

  • Sample

    240410-3m7ersed92

  • MD5

    ec3b59f895054b46715e325080fea10d

  • SHA1

    fe6fd80760d29db7aebdb4930943f0096fb8553d

  • SHA256

    837fff34bbe462693c7b0232c365b23d97fb2c273e5e11b61e94ce41bb83de02

  • SHA512

    3e1e36b4043d0818b2e88e18516b0e3ba51aa09fd986b3c84d6de283f8528c8f61969282e5d1f0345bbaf6bb9597f5febba906a88fcf8db57a0b70067d84781a

  • SSDEEP

    6144:mGlOf3vF/mTzG9bj9DoktMF0DWBkzosodavMj2JCydxsZerH:j6vFenG9bZS0aizfCaEj2ndxO+

Score
7/10
persistenceupxvmprotect

Malware Config

Targets

    • Target

      ec3b59f895054b46715e325080fea10d_JaffaCakes118

    • Size

      303KB

    • MD5

      ec3b59f895054b46715e325080fea10d

    • SHA1

      fe6fd80760d29db7aebdb4930943f0096fb8553d

    • SHA256

      837fff34bbe462693c7b0232c365b23d97fb2c273e5e11b61e94ce41bb83de02

    • SHA512

      3e1e36b4043d0818b2e88e18516b0e3ba51aa09fd986b3c84d6de283f8528c8f61969282e5d1f0345bbaf6bb9597f5febba906a88fcf8db57a0b70067d84781a

    • SSDEEP

      6144:mGlOf3vF/mTzG9bj9DoktMF0DWBkzosodavMj2JCydxsZerH:j6vFenG9bZS0aizfCaEj2ndxO+

    Score
    7/10
    persistenceupxvmprotect

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks