Overview

overview

10

Static

static

3

eb54f091b0...18.exe

windows7-x64

10

eb54f091b0...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb54f091b05a95511601e2f9f9771bae_JaffaCakes118

  • Size

    76KB

  • Sample

    240410-scg21sfb6w

  • MD5

    eb54f091b05a95511601e2f9f9771bae

  • SHA1

    86d73a0e44c60283b2a791caadcfea091f104ddf

  • SHA256

    aeb6e9ad0fde49c4217d2869443a0cf64079b8fa23073e69209329fbe6f749bd

  • SHA512

    baa09e5a9a491092bc12ed7f13decadf0c9becff21e46a31d5c06b71342a1cc388d6cc3c8c24b54bd099d7abc0b84319e1155a081f415992ad31a1feed1683a3

  • SSDEEP

    1536:hsoNutBF/WkrxeGDYyxTYV5SIw+XPVxUARLDD:3NuvF/zr8lSKcIw+XpL

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      eb54f091b05a95511601e2f9f9771bae_JaffaCakes118

    • Size

      76KB

    • MD5

      eb54f091b05a95511601e2f9f9771bae

    • SHA1

      86d73a0e44c60283b2a791caadcfea091f104ddf

    • SHA256

      aeb6e9ad0fde49c4217d2869443a0cf64079b8fa23073e69209329fbe6f749bd

    • SHA512

      baa09e5a9a491092bc12ed7f13decadf0c9becff21e46a31d5c06b71342a1cc388d6cc3c8c24b54bd099d7abc0b84319e1155a081f415992ad31a1feed1683a3

    • SSDEEP

      1536:hsoNutBF/WkrxeGDYyxTYV5SIw+XPVxUARLDD:3NuvF/zr8lSKcIw+XpL

    Score
    10/10
    evasionupx

    • Modifies firewall policy service

      evasion

    • Nirsoft

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks