Overview

overview

7

Static

static

7

0fcf785cc0...18.exe

windows7-x64

7

0fcf785cc0...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fcf785cc0f05184afae7f969c95f779_JaffaCakes118

  • Size

    6.1MB

  • Sample

    240503-gjx62agf6w

  • MD5

    0fcf785cc0f05184afae7f969c95f779

  • SHA1

    3ab5fda1b28067ab7e67e1bfe983ec5ad3b53e1e

  • SHA256

    d720a9f0e035c22497aa12ace99a16064ebe2372319a277ab57614929bec3e54

  • SHA512

    f5d5694f9c9f39922f670fc03d0449c150296124829cbd2b89e277b1dec09e1ded12f642c16c0881d75bd79d0f6ae1f269fca9031427e7767822c06fc3e26c65

  • SSDEEP

    98304:nAwzZHd5CU4G9KwYAOujNkIIp/jNhvFd0kCbEgiGzZJlaoCr6hzj/rT:BZh4GkrAOuqnpQkCbXiGtJly61r/

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      0fcf785cc0f05184afae7f969c95f779_JaffaCakes118

    • Size

      6.1MB

    • MD5

      0fcf785cc0f05184afae7f969c95f779

    • SHA1

      3ab5fda1b28067ab7e67e1bfe983ec5ad3b53e1e

    • SHA256

      d720a9f0e035c22497aa12ace99a16064ebe2372319a277ab57614929bec3e54

    • SHA512

      f5d5694f9c9f39922f670fc03d0449c150296124829cbd2b89e277b1dec09e1ded12f642c16c0881d75bd79d0f6ae1f269fca9031427e7767822c06fc3e26c65

    • SSDEEP

      98304:nAwzZHd5CU4G9KwYAOujNkIIp/jNhvFd0kCbEgiGzZJlaoCr6hzj/rT:BZh4GkrAOuqnpQkCbXiGtJly61r/

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks