Overview

overview

8

Static

static

7

100a21ab5b...18.exe

windows7-x64

8

100a21ab5b...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    100a21ab5bb488a9126c1b582b7962d0_JaffaCakes118

  • Size

    11KB

  • Sample

    240626-af2aysscma

  • MD5

    100a21ab5bb488a9126c1b582b7962d0

  • SHA1

    6d81dfb46864109e0d9f1867900151cd8bd393d7

  • SHA256

    5ecb5502a4ab98421441372264d7581c9f9bf1462f5308a30c151ae392192275

  • SHA512

    b11cd46e7dbf54a45e7630243e2ee627a349c8e8b0bd799cef6c7896caa19d50ddad976f3ca08dd7460f1d3613426bdade36b8abd23ca42e0354bf75b791a11b

  • SSDEEP

    192:TfwwELhAiY2N5xwqr7bdWZ/0Y1IUZn5tw1kClIKkAmQi9r3MeVMAOfomq2xeQg:rwwExL5xwqRCMo5tTQ/nggdL5g

Score
8/10
persistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      100a21ab5bb488a9126c1b582b7962d0_JaffaCakes118

    • Size

      11KB

    • MD5

      100a21ab5bb488a9126c1b582b7962d0

    • SHA1

      6d81dfb46864109e0d9f1867900151cd8bd393d7

    • SHA256

      5ecb5502a4ab98421441372264d7581c9f9bf1462f5308a30c151ae392192275

    • SHA512

      b11cd46e7dbf54a45e7630243e2ee627a349c8e8b0bd799cef6c7896caa19d50ddad976f3ca08dd7460f1d3613426bdade36b8abd23ca42e0354bf75b791a11b

    • SSDEEP

      192:TfwwELhAiY2N5xwqr7bdWZ/0Y1IUZn5tw1kClIKkAmQi9r3MeVMAOfomq2xeQg:rwwExL5xwqRCMo5tTQ/nggdL5g

    Score
    8/10
    persistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks