Overview

overview

8

Static

static

3

0e79cc8e26...18.exe

windows7-x64

3

0e79cc8e26...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e79cc8e26fddb7cfc2da1a750fb1262_JaffaCakes118

  • Size

    53KB

  • Sample

    240625-r9gxvawenh

  • MD5

    0e79cc8e26fddb7cfc2da1a750fb1262

  • SHA1

    c0cb79014b89cdec2d03a18ce81da7d1f6106614

  • SHA256

    ceaa2e93303eb2388e0326c53269221119add2821cdbb20f6ab829be26435841

  • SHA512

    a26da2e1aa932a17f4e0d694a49d27237f80225886a2134fc4fc08af8497ecdb27f850c9368a11c67b6e499a5d3966fd5fb0fdd6a2421f296da029ddd6d02df2

  • SSDEEP

    768:wDgcBMBxq/RfdSeWHkoTwfIJG4MS9iojJ7mXDE1WULozbuoyiY6DFDlpn:w9AxWRkJG4/ool71bQ6opL9

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      0e79cc8e26fddb7cfc2da1a750fb1262_JaffaCakes118

    • Size

      53KB

    • MD5

      0e79cc8e26fddb7cfc2da1a750fb1262

    • SHA1

      c0cb79014b89cdec2d03a18ce81da7d1f6106614

    • SHA256

      ceaa2e93303eb2388e0326c53269221119add2821cdbb20f6ab829be26435841

    • SHA512

      a26da2e1aa932a17f4e0d694a49d27237f80225886a2134fc4fc08af8497ecdb27f850c9368a11c67b6e499a5d3966fd5fb0fdd6a2421f296da029ddd6d02df2

    • SSDEEP

      768:wDgcBMBxq/RfdSeWHkoTwfIJG4MS9iojJ7mXDE1WULozbuoyiY6DFDlpn:w9AxWRkJG4/ool71bQ6opL9

    Score
    8/10
    persistenceupx

    • Blocklisted process makes network request

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks