8cd1b8dbc81743bdb16ccf836273f582bcc93f8183494b3cabefe18fd340e0da | Triage

Submit
Reports

Overview

overview

Static

static

7

0474165119...18.exe

windows7-x64

0474165119...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

Target

0474165119c989c50e9508659a9f8363_JaffaCakes118
Size

184KB
Sample

240620-kpkdxasgmn
MD5

0474165119c989c50e9508659a9f8363
SHA1

b43a1847cb7d780115573cc78555ccc17a23c780
SHA256

8cd1b8dbc81743bdb16ccf836273f582bcc93f8183494b3cabefe18fd340e0da
SHA512

7045c51b47935824714dbd31faffad8635a8bc35d49b6c0adef5a49f56ffbf82177c0204ae3a8b3c7328f2a15defcb3e1569efe0773004854df4cf704ae75c45
SSDEEP

3072:qzXbgj5jPFlRbOhIVa5IF49EFTcNH8Yf/BBEt6ymy+aeC7q:UXbwzFlRaOFw7NcYnBO6xt4

Score

10^/10

evasion persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

0474165119c989c50e9508659a9f8363_JaffaCakes118.exe

Resource

win7-20240221-en

evasion persistence upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

0474165119c989c50e9508659a9f8363_JaffaCakes118.exe

Resource

win10v2004-20240508-en

persistence upx

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  0474165119c989c50e9508659a9f8363_JaffaCakes118
- Size
  
  184KB
- MD5
  
  0474165119c989c50e9508659a9f8363
- SHA1
  
  b43a1847cb7d780115573cc78555ccc17a23c780
- SHA256
  
  8cd1b8dbc81743bdb16ccf836273f582bcc93f8183494b3cabefe18fd340e0da
- SHA512
  
  7045c51b47935824714dbd31faffad8635a8bc35d49b6c0adef5a49f56ffbf82177c0204ae3a8b3c7328f2a15defcb3e1569efe0773004854df4cf704ae75c45
- SSDEEP
  
  3072:qzXbgj5jPFlRbOhIVa5IF49EFTcNH8Yf/BBEt6ymy+aeC7q:UXbwzFlRaOFw7NcYnBO6xt4
Score

10^/10

evasion persistence upx
- Modifies firewall policy service
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistenceupx

behavioral2

© 2018-2025

Terms | Privacy