Overview

overview

7

Static

static

7

b04f226cea...18.exe

windows7-x64

7

b04f226cea...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b04f226cea731fd44a3e1277529eeea4_JaffaCakes118

  • Size

    4.7MB

  • Sample

    240615-1xkmmswdne

  • MD5

    b04f226cea731fd44a3e1277529eeea4

  • SHA1

    e06dc5013bc9e7fc16b3850162b8fc7c1658a479

  • SHA256

    070f41277add275d1a6e3082ff249f9b88fd1588245662624c69d0d7f671d248

  • SHA512

    b48f3e08f6ad81d52ecac29937495fe1e3701dbda0aae47b884f140f73730d21b8f3c6b91fa2835f9b8a9c97ae2f7ccdcc17c004b6f2872eca457e52dd13b023

  • SSDEEP

    98304:Ae4d8iEityhkhqloaxeq7jhIXUvPBnnom2LSqLyY:nCnyhkhBaxem1tPBn2uqd

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      b04f226cea731fd44a3e1277529eeea4_JaffaCakes118

    • Size

      4.7MB

    • MD5

      b04f226cea731fd44a3e1277529eeea4

    • SHA1

      e06dc5013bc9e7fc16b3850162b8fc7c1658a479

    • SHA256

      070f41277add275d1a6e3082ff249f9b88fd1588245662624c69d0d7f671d248

    • SHA512

      b48f3e08f6ad81d52ecac29937495fe1e3701dbda0aae47b884f140f73730d21b8f3c6b91fa2835f9b8a9c97ae2f7ccdcc17c004b6f2872eca457e52dd13b023

    • SSDEEP

      98304:Ae4d8iEityhkhqloaxeq7jhIXUvPBnnom2LSqLyY:nCnyhkhBaxem1tPBn2uqd

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks