Overview

overview

7

Static

static

7

68d450033d...18.exe

windows7-x64

7

68d450033d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68d450033d1cc49aec4c2365e9f10114_JaffaCakes118

  • Size

    680KB

  • Sample

    240522-18hbnabb26

  • MD5

    68d450033d1cc49aec4c2365e9f10114

  • SHA1

    d55658bc33cb42f3a38f460459c8048d034b24e6

  • SHA256

    2069b29ba21b11fc7133645d16a8532e88b806cac67069a23a221ef12f6fa5fc

  • SHA512

    e633f7a4192d9d45c381620b64c9cf42943736d3facc2c80329c65a909bb1ae8e628a3581b3f197c47ce7736abb4a52523264dd9bd59f1ed7d1d834d6f4aaadb

  • SSDEEP

    12288:TRO2Q8Iu71MZvr2ymO6l4S+obhFIVgFmO/oG3G+zQmS+Lrv7KXpQB9EzDk8BAZ0d:Fm88Kjh4SnbMKFmO/osPTS8v7KXpQBqF

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      68d450033d1cc49aec4c2365e9f10114_JaffaCakes118

    • Size

      680KB

    • MD5

      68d450033d1cc49aec4c2365e9f10114

    • SHA1

      d55658bc33cb42f3a38f460459c8048d034b24e6

    • SHA256

      2069b29ba21b11fc7133645d16a8532e88b806cac67069a23a221ef12f6fa5fc

    • SHA512

      e633f7a4192d9d45c381620b64c9cf42943736d3facc2c80329c65a909bb1ae8e628a3581b3f197c47ce7736abb4a52523264dd9bd59f1ed7d1d834d6f4aaadb

    • SSDEEP

      12288:TRO2Q8Iu71MZvr2ymO6l4S+obhFIVgFmO/oG3G+zQmS+Lrv7KXpQB9EzDk8BAZ0d:Fm88Kjh4SnbMKFmO/osPTS8v7KXpQBqF

    Score
    7/10
    discoveryupx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks