Overview

overview

7

Static

static

7

5f7f6ac07d...18.exe

windows7-x64

7

5f7f6ac07d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f7f6ac07d494718c6d700ab5cdda44a_JaffaCakes118

  • Size

    3.8MB

  • Sample

    240520-rhn7vaea8v

  • MD5

    5f7f6ac07d494718c6d700ab5cdda44a

  • SHA1

    231fe874e3d3cf30a8389ab31f8cc431869291ff

  • SHA256

    15cb9f27d4cbf34813b20c981614a16f95b7df94d016b763d8c7e52f4fb5176f

  • SHA512

    6322e031d106bbd5c30ea330ab097f415a00040131f3241539fcebdfafb588814e41b3deaba92594a13d334878108b0fdbb4ea6e9e213a519a2f5f55099a9fdc

  • SSDEEP

    98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdf:uZHrzyG+2aDHGkS8Ch

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      5f7f6ac07d494718c6d700ab5cdda44a_JaffaCakes118

    • Size

      3.8MB

    • MD5

      5f7f6ac07d494718c6d700ab5cdda44a

    • SHA1

      231fe874e3d3cf30a8389ab31f8cc431869291ff

    • SHA256

      15cb9f27d4cbf34813b20c981614a16f95b7df94d016b763d8c7e52f4fb5176f

    • SHA512

      6322e031d106bbd5c30ea330ab097f415a00040131f3241539fcebdfafb588814e41b3deaba92594a13d334878108b0fdbb4ea6e9e213a519a2f5f55099a9fdc

    • SSDEEP

      98304:uZuarCtWyX0p+tUFHtrXCDHGkSn8b+vPdf:uZHrzyG+2aDHGkS8Ch

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks