Overview

overview

8

Static

static

3

68c55a043e...18.exe

windows7-x64

8

68c55a043e...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68c55a043e67dae6915202e3ba28596f_JaffaCakes118

  • Size

    118KB

  • Sample

    240522-1vbxqaac9w

  • MD5

    68c55a043e67dae6915202e3ba28596f

  • SHA1

    1afe43b2dd8bc89a0c8ca8294c292ca9b26227de

  • SHA256

    468d3498884ae64ff8451703f2d49ace9f087d3b1cf508f8ac1da798e3acb094

  • SHA512

    6096da692775be1bcc6649be50312e3ea1813aa17e66377c159bb6760b27aef6424f65d704af3cf9a05e99a90cdfd9183130583b0d66de1ae7e72d0dd5299852

  • SSDEEP

    3072:cps+oOVLXdH6f6RhvN5YcrjfnV31ndEQmcxI:GCgdH26Pjrjvldddmcx

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      68c55a043e67dae6915202e3ba28596f_JaffaCakes118

    • Size

      118KB

    • MD5

      68c55a043e67dae6915202e3ba28596f

    • SHA1

      1afe43b2dd8bc89a0c8ca8294c292ca9b26227de

    • SHA256

      468d3498884ae64ff8451703f2d49ace9f087d3b1cf508f8ac1da798e3acb094

    • SHA512

      6096da692775be1bcc6649be50312e3ea1813aa17e66377c159bb6760b27aef6424f65d704af3cf9a05e99a90cdfd9183130583b0d66de1ae7e72d0dd5299852

    • SSDEEP

      3072:cps+oOVLXdH6f6RhvN5YcrjfnV31ndEQmcxI:GCgdH26Pjrjvldddmcx

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks