Overview

overview

7

Static

static

3

14c5ea5950...18.exe

windows7-x64

7

14c5ea5950...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    14c5ea595046b0648f5fbf6aa764ce6f_JaffaCakes118

  • Size

    418KB

  • Sample

    240627-fq2blawenp

  • MD5

    14c5ea595046b0648f5fbf6aa764ce6f

  • SHA1

    950224dc58e0e404f5487d289d1f72e268fbda60

  • SHA256

    51f04e203aec2bdf5661c8667f9ea2218ea0165b5f27f610acd386f2f78eb15f

  • SHA512

    53a3b5667b845b35c5ca4504be5bb6e8bf63d7b9eca5037133779055d4f4c0c97ea9d34e36ad60c6622fc3a1851bbe2501299a0d61d54b27ccb25016178a49e1

  • SSDEEP

    6144:hTLDMECVknxHa7makJKj6LarNmOPAMNGnfBVLvowsB3Ihqp:hTf7lakJOmOPAPrFh

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      14c5ea595046b0648f5fbf6aa764ce6f_JaffaCakes118

    • Size

      418KB

    • MD5

      14c5ea595046b0648f5fbf6aa764ce6f

    • SHA1

      950224dc58e0e404f5487d289d1f72e268fbda60

    • SHA256

      51f04e203aec2bdf5661c8667f9ea2218ea0165b5f27f610acd386f2f78eb15f

    • SHA512

      53a3b5667b845b35c5ca4504be5bb6e8bf63d7b9eca5037133779055d4f4c0c97ea9d34e36ad60c6622fc3a1851bbe2501299a0d61d54b27ccb25016178a49e1

    • SSDEEP

      6144:hTLDMECVknxHa7makJKj6LarNmOPAMNGnfBVLvowsB3Ihqp:hTf7lakJOmOPAPrFh

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks