Overview

overview

7

Static

static

7

0ebfd28036...18.exe

windows7-x64

7

0ebfd28036...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ebfd28036cd25aad0d6f55fa8434db2_JaffaCakes118

  • Size

    50KB

  • Sample

    240625-tydgdstbrm

  • MD5

    0ebfd28036cd25aad0d6f55fa8434db2

  • SHA1

    abc74b95f9e9f2743f7d8358928e00ca635dead5

  • SHA256

    e6c665812df0c147fb61eef59cccf0b04f9ccb590f2f13cedb59e8d1c6b3e490

  • SHA512

    732c5cdf44995db257e85eed656c3a93e6e9fb919d765a11bbab518879645487b7f03309dea98c8c8c13d7f73eb8df8b0511022068d4fca347d08f1153bc4267

  • SSDEEP

    1536:VmIMHYK1ynxq30+0PUJVjKd4ajRR/19xV8:Vl83N0PU3j94/1u

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      0ebfd28036cd25aad0d6f55fa8434db2_JaffaCakes118

    • Size

      50KB

    • MD5

      0ebfd28036cd25aad0d6f55fa8434db2

    • SHA1

      abc74b95f9e9f2743f7d8358928e00ca635dead5

    • SHA256

      e6c665812df0c147fb61eef59cccf0b04f9ccb590f2f13cedb59e8d1c6b3e490

    • SHA512

      732c5cdf44995db257e85eed656c3a93e6e9fb919d765a11bbab518879645487b7f03309dea98c8c8c13d7f73eb8df8b0511022068d4fca347d08f1153bc4267

    • SSDEEP

      1536:VmIMHYK1ynxq30+0PUJVjKd4ajRR/19xV8:Vl83N0PU3j94/1u

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks