Overview

overview

7

Static

static

3

17da39c880...18.exe

windows7-x64

7

17da39c880...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    17da39c880b01cdc3a5eaad626d7e768_JaffaCakes118

  • Size

    416KB

  • Sample

    240627-2ydfdswgkb

  • MD5

    17da39c880b01cdc3a5eaad626d7e768

  • SHA1

    8660ff6686a406fd54b98bc908e21a0aca5464a1

  • SHA256

    c9d3cc1d785d9e30e9bc15591bab03090fd88b1ed357b24ae9be4f122826da65

  • SHA512

    a60ae4536ce3f921f513055e8430d585c46d326bacae4697223b1b2a831f8e571ab7f4d520513462753b13452171e0286c56e6296b632bdef47df3bc95313026

  • SSDEEP

    12288:MZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:MZ6glQlCn0X6X3WoNf

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      17da39c880b01cdc3a5eaad626d7e768_JaffaCakes118

    • Size

      416KB

    • MD5

      17da39c880b01cdc3a5eaad626d7e768

    • SHA1

      8660ff6686a406fd54b98bc908e21a0aca5464a1

    • SHA256

      c9d3cc1d785d9e30e9bc15591bab03090fd88b1ed357b24ae9be4f122826da65

    • SHA512

      a60ae4536ce3f921f513055e8430d585c46d326bacae4697223b1b2a831f8e571ab7f4d520513462753b13452171e0286c56e6296b632bdef47df3bc95313026

    • SSDEEP

      12288:MZ6TIoft2yugll2jnAaeX6mXM3W4/Plf:MZ6glQlCn0X6X3WoNf

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks