Overview

overview

8

Static

static

7

fcf4049dfb...18.exe

windows7-x64

8

fcf4049dfb...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fcf4049dfbfb103360ad5eec487b3c99_JaffaCakes118

  • Size

    19KB

  • Sample

    240420-rn53jsae33

  • MD5

    fcf4049dfbfb103360ad5eec487b3c99

  • SHA1

    3bc4a7fa24f047b1e16f2d5e5b45ff8a930254f0

  • SHA256

    787cdbcb463833e02494188b4fc6481bc33b28dd665addb0ea8f453188b9d8f6

  • SHA512

    8f76b4e4778922b9206293265e34480c23998846335f45a8579e8f66d4fa5f98768e57f672b21f00efcbb91cedb6ea59d0cdcda5775efdc73f567934359bcaf5

  • SSDEEP

    384:kfnHFIvVItJkImk4tHVjddMgs6m4fyKH7VE0oGm:YSdOIXW6A2EK

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      fcf4049dfbfb103360ad5eec487b3c99_JaffaCakes118

    • Size

      19KB

    • MD5

      fcf4049dfbfb103360ad5eec487b3c99

    • SHA1

      3bc4a7fa24f047b1e16f2d5e5b45ff8a930254f0

    • SHA256

      787cdbcb463833e02494188b4fc6481bc33b28dd665addb0ea8f453188b9d8f6

    • SHA512

      8f76b4e4778922b9206293265e34480c23998846335f45a8579e8f66d4fa5f98768e57f672b21f00efcbb91cedb6ea59d0cdcda5775efdc73f567934359bcaf5

    • SSDEEP

      384:kfnHFIvVItJkImk4tHVjddMgs6m4fyKH7VE0oGm:YSdOIXW6A2EK

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks