Overview

overview

7

Static

static

7

0083d7db33...18.exe

windows7-x64

7

0083d7db33...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0083d7db33439e4f5dd108519d4b3d79_JaffaCakes118

  • Size

    252KB

  • Sample

    240619-z16tls1hmc

  • MD5

    0083d7db33439e4f5dd108519d4b3d79

  • SHA1

    914e61639ce83a4b6340bcd02555a2e180f0913a

  • SHA256

    e179b90488ae191a49ee529219153ee8eb8e510a95de95e16a6c3d491d212d64

  • SHA512

    4fd56a3089c7e49e359d6c6d5c138de542e52bc7807b86cf5ee399b9949b976391ddb5b928175641cc2e0695c6f8a7d295c0730ef5387b25488b08fc322a2172

  • SSDEEP

    3072:ZmNam7su4ob36VdPPMKcsBXt2IdriU5V5Sa+XaZU9EOGDphjRcNQlEqOcPk9Ji:MNuo0csBXt2IdriU5V5OABDrbuqdPk9

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      0083d7db33439e4f5dd108519d4b3d79_JaffaCakes118

    • Size

      252KB

    • MD5

      0083d7db33439e4f5dd108519d4b3d79

    • SHA1

      914e61639ce83a4b6340bcd02555a2e180f0913a

    • SHA256

      e179b90488ae191a49ee529219153ee8eb8e510a95de95e16a6c3d491d212d64

    • SHA512

      4fd56a3089c7e49e359d6c6d5c138de542e52bc7807b86cf5ee399b9949b976391ddb5b928175641cc2e0695c6f8a7d295c0730ef5387b25488b08fc322a2172

    • SSDEEP

      3072:ZmNam7su4ob36VdPPMKcsBXt2IdriU5V5Sa+XaZU9EOGDphjRcNQlEqOcPk9Ji:MNuo0csBXt2IdriU5V5OABDrbuqdPk9

    Score
    7/10
    persistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks