Overview

overview

10

Static

static

3

68eeb7b0af...18.exe

windows7-x64

7

68eeb7b0af...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68eeb7b0afcf4a2bb811420919b4fd1a_JaffaCakes118

  • Size

    40KB

  • Sample

    240522-2yzcvscc7w

  • MD5

    68eeb7b0afcf4a2bb811420919b4fd1a

  • SHA1

    1de0bf4c1855d63155b3612889afdc486a97b38e

  • SHA256

    97f5bc6472abf92e2541c910f4d3d494a512dde4b753a910dae62fb2bebaf0e4

  • SHA512

    390d92337dfc76dc1acc0de1139be4b2e026d67b086182d472e198ab37f3249eb556c63a9ec9bd7f3119f690b065ee1ca24b98f789a470251520a8027a2972a2

  • SSDEEP

    768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtH/OV:aqk/Zdic/qjh8w19JDH/Y

Score
10/10
googlepersistencephishingupx

Malware Config

Targets

    • Target

      68eeb7b0afcf4a2bb811420919b4fd1a_JaffaCakes118

    • Size

      40KB

    • MD5

      68eeb7b0afcf4a2bb811420919b4fd1a

    • SHA1

      1de0bf4c1855d63155b3612889afdc486a97b38e

    • SHA256

      97f5bc6472abf92e2541c910f4d3d494a512dde4b753a910dae62fb2bebaf0e4

    • SHA512

      390d92337dfc76dc1acc0de1139be4b2e026d67b086182d472e198ab37f3249eb556c63a9ec9bd7f3119f690b065ee1ca24b98f789a470251520a8027a2972a2

    • SSDEEP

      768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtH/OV:aqk/Zdic/qjh8w19JDH/Y

    Score
    10/10
    persistenceupxgooglephishing

    • Detected google phishing page

      phishinggoogle

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks