Overview

overview

8

Static

static

7

fde6955a0b...18.exe

windows7-x64

8

fde6955a0b...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fde6955a0bbf77b064f7f5ca6b52428d_JaffaCakes118

  • Size

    11KB

  • Sample

    240420-3gkntadc6t

  • MD5

    fde6955a0bbf77b064f7f5ca6b52428d

  • SHA1

    90c022dc80af334afce9535bb8ef7695f91792c7

  • SHA256

    f9dc17511d40a6ef0df77b7db7c8952e8bb15b0b5c5fe9e846d69fea5f4857ca

  • SHA512

    214eee3d7e474c74f219a0eb5cac6e49b6a6b71849596d1ca9307b5c7b24420266cb4c52b17b44a72f24d7c2875598b74330e1bd9421aad58fa2e4a1a3d10818

  • SSDEEP

    192:m3Ev9pLdhauwLWGpZPD1ssKoxjHtoyF4hs5WeOScrLTCHi568:mQ9pLcLl19KQ3F4hkOX6m

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      fde6955a0bbf77b064f7f5ca6b52428d_JaffaCakes118

    • Size

      11KB

    • MD5

      fde6955a0bbf77b064f7f5ca6b52428d

    • SHA1

      90c022dc80af334afce9535bb8ef7695f91792c7

    • SHA256

      f9dc17511d40a6ef0df77b7db7c8952e8bb15b0b5c5fe9e846d69fea5f4857ca

    • SHA512

      214eee3d7e474c74f219a0eb5cac6e49b6a6b71849596d1ca9307b5c7b24420266cb4c52b17b44a72f24d7c2875598b74330e1bd9421aad58fa2e4a1a3d10818

    • SSDEEP

      192:m3Ev9pLdhauwLWGpZPD1ssKoxjHtoyF4hs5WeOScrLTCHi568:mQ9pLcLl19KQ3F4hkOX6m

    Score
    8/10
    persistenceupx

    • Modifies AppInit DLL entries

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks