Overview

overview

7

Static

static

7

edef09b38a...18.exe

windows7-x64

7

edef09b38a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edef09b38a53dbe4ee5aa8027e06ea1b_JaffaCakes118

  • Size

    102KB

  • Sample

    240411-vqa7qsga85

  • MD5

    edef09b38a53dbe4ee5aa8027e06ea1b

  • SHA1

    95189eba1ea61e646d47d5b0ebebb71b7f02e0ea

  • SHA256

    135dafadba5656655491627cb044ed87e974b1c804635bb11a7219ce62d86cf6

  • SHA512

    96858a9dd3badee422f7ddf0a87637affed35ecdb8aa3adbfb42449c6c5d4f5965176709712e2fe7b2655e0ce4af15cdc26e23344f1e7607106613eb78916c1f

  • SSDEEP

    1536:TPFYgIzz2OQdfgB3KEkWAfN8pO2D1hjuWOmeVXQVVzLd:KZzIQZk9fN8RjurfgV9d

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      edef09b38a53dbe4ee5aa8027e06ea1b_JaffaCakes118

    • Size

      102KB

    • MD5

      edef09b38a53dbe4ee5aa8027e06ea1b

    • SHA1

      95189eba1ea61e646d47d5b0ebebb71b7f02e0ea

    • SHA256

      135dafadba5656655491627cb044ed87e974b1c804635bb11a7219ce62d86cf6

    • SHA512

      96858a9dd3badee422f7ddf0a87637affed35ecdb8aa3adbfb42449c6c5d4f5965176709712e2fe7b2655e0ce4af15cdc26e23344f1e7607106613eb78916c1f

    • SSDEEP

      1536:TPFYgIzz2OQdfgB3KEkWAfN8pO2D1hjuWOmeVXQVVzLd:KZzIQZk9fN8RjurfgV9d

    Score
    7/10
    persistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks