a5636ae3eb3448ee2e162928b3610681218bcf613fe98d200bdb87f8fc505735 | Triage

Submit
Reports

Overview

overview

Static

static

3

9189af4cdc...18.exe

windows7-x64

7

9189af4cdc...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

9189af4cdc404cbfbab07ea470cb89e5_JaffaCakes118
Size

40KB
Sample

240603-m4wftscb6v
MD5

9189af4cdc404cbfbab07ea470cb89e5
SHA1

1480e5fa3cc3718ee9d926531b2392a9aad80e85
SHA256

a5636ae3eb3448ee2e162928b3610681218bcf613fe98d200bdb87f8fc505735
SHA512

4af74694646ed0758836ca438b4947a7ff98b32470860ae7d9498dc1616a74dc73ecd2f75673c22b823875548b4be940bc74b19e3d1be509a49ab9b4bda63307
SSDEEP

768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtH/:aqk/Zdic/qjh8w19JDH/

Score

10^/10

google microsoft persistence phishing product:outlook upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

9189af4cdc404cbfbab07ea470cb89e5_JaffaCakes118.exe

Resource

win7-20240221-en

persistence upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

9189af4cdc404cbfbab07ea470cb89e5_JaffaCakes118.exe

Resource

win10v2004-20240508-en

google microsoft persistence phishing product:outlook upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  9189af4cdc404cbfbab07ea470cb89e5_JaffaCakes118
- Size
  
  40KB
- MD5
  
  9189af4cdc404cbfbab07ea470cb89e5
- SHA1
  
  1480e5fa3cc3718ee9d926531b2392a9aad80e85
- SHA256
  
  a5636ae3eb3448ee2e162928b3610681218bcf613fe98d200bdb87f8fc505735
- SHA512
  
  4af74694646ed0758836ca438b4947a7ff98b32470860ae7d9498dc1616a74dc73ecd2f75673c22b823875548b4be940bc74b19e3d1be509a49ab9b4bda63307
- SSDEEP
  
  768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtH/:aqk/Zdic/qjh8w19JDH/
Score

10^/10

persistence upx google microsoft phishing product:outlook
- Detected google phishing page
  phishing google
- Detected microsoft outlook phishing page
  phishing microsoft product:outlook
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

googlemicrosoftpersistencephishingproduct:outlookupx

© 2018-2025

Terms | Privacy