Overview

overview

7

Static

static

7

f249879449...18.exe

windows7-x64

7

f249879449...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f249879449ff4f6dff7d047dae2805ab_JaffaCakes118

  • Size

    21KB

  • Sample

    240416-ayxqgscf53

  • MD5

    f249879449ff4f6dff7d047dae2805ab

  • SHA1

    4f44bcc6c49339c4f0eab65c3741311a7b3c3311

  • SHA256

    bbc6274f10390fbdf686d182ca323e9a59d6621cd27e381b8bbef254ef297255

  • SHA512

    244e5216090433c7e5cf6295f6d123f08e67f4d61a5d86d8b3acd80dd259f4f5080831d19321bf6fd57066397d21232e9ae8955aae71eee94dd0c7e3b60365b9

  • SSDEEP

    384:aB1YGNFPo+sc/lJ68E2Gc9J/pGmOJel7BQCVdjllF:s1YM/lke/yJKQYll

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      f249879449ff4f6dff7d047dae2805ab_JaffaCakes118

    • Size

      21KB

    • MD5

      f249879449ff4f6dff7d047dae2805ab

    • SHA1

      4f44bcc6c49339c4f0eab65c3741311a7b3c3311

    • SHA256

      bbc6274f10390fbdf686d182ca323e9a59d6621cd27e381b8bbef254ef297255

    • SHA512

      244e5216090433c7e5cf6295f6d123f08e67f4d61a5d86d8b3acd80dd259f4f5080831d19321bf6fd57066397d21232e9ae8955aae71eee94dd0c7e3b60365b9

    • SSDEEP

      384:aB1YGNFPo+sc/lJ68E2Gc9J/pGmOJel7BQCVdjllF:s1YM/lke/yJKQYll

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks