Overview

overview

7

Static

static

3

f3dcf20045...18.exe

windows7-x64

7

f3dcf20045...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3dcf200458d63d6acc59de71b1250d7_JaffaCakes118

  • Size

    100KB

  • Sample

    240416-txx5eagd2z

  • MD5

    f3dcf200458d63d6acc59de71b1250d7

  • SHA1

    f40c6b67bc7a7fe721a0f6f98a0e17d7aed0fcb4

  • SHA256

    6ed3bff99de3e4de8e0646a967dafbfd45a2ba774aa01549843c02f4b7ebfc47

  • SHA512

    40f1c18089c36b57ced94feb8b3339f1adf16792a133e604bbd8880c39cd1c8f9d52094ada226ec106d706f5012bdf1fdca8d96e0e021253db929630f15f61fa

  • SSDEEP

    1536:V72Jeptu/CkzaGXsBXgQ5DCZYurqalWzqgAK62stRJ971Zr+vzC1KQ:V2e+ggQ5DiYu+I2stF11+vzL

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      f3dcf200458d63d6acc59de71b1250d7_JaffaCakes118

    • Size

      100KB

    • MD5

      f3dcf200458d63d6acc59de71b1250d7

    • SHA1

      f40c6b67bc7a7fe721a0f6f98a0e17d7aed0fcb4

    • SHA256

      6ed3bff99de3e4de8e0646a967dafbfd45a2ba774aa01549843c02f4b7ebfc47

    • SHA512

      40f1c18089c36b57ced94feb8b3339f1adf16792a133e604bbd8880c39cd1c8f9d52094ada226ec106d706f5012bdf1fdca8d96e0e021253db929630f15f61fa

    • SSDEEP

      1536:V72Jeptu/CkzaGXsBXgQ5DCZYurqalWzqgAK62stRJ971Zr+vzC1KQ:V2e+ggQ5DiYu+I2stF11+vzL

    Score
    7/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks