Overview

overview

10

Static

static

7

174fc0fa81...18.exe

windows7-x64

10

174fc0fa81...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    174fc0fa81c3eceda98ae53889deadf0_JaffaCakes118

  • Size

    3.3MB

  • Sample

    240627-yk5e6sxeme

  • MD5

    174fc0fa81c3eceda98ae53889deadf0

  • SHA1

    47d0a9c39afa08c711b8d8d0141c7f48e0f6b4f4

  • SHA256

    c2159677583454b6db35cfc1d27a34d6e021a02caa3a95a920e187c7703a6c90

  • SHA512

    b91c2a9c2912c622033bff2e9c4ba603b363b0b43e91b8de6ec3f2b68316e2f402da0d6c38300cb76858bed07174e533c0e4342982bc3b8942feca892ec22c0e

  • SSDEEP

    24576:3uhaSOA2eZJ8NI8NahrOWrTx23PlQqmThzFHDUT+aAOwJqsaS2ROv:YD8NKT/sflQqChzVsCOQlqROv

Score
10/10
evasionexecutionpersistenceupx

Malware Config

Targets

    • Target

      174fc0fa81c3eceda98ae53889deadf0_JaffaCakes118

    • Size

      3.3MB

    • MD5

      174fc0fa81c3eceda98ae53889deadf0

    • SHA1

      47d0a9c39afa08c711b8d8d0141c7f48e0f6b4f4

    • SHA256

      c2159677583454b6db35cfc1d27a34d6e021a02caa3a95a920e187c7703a6c90

    • SHA512

      b91c2a9c2912c622033bff2e9c4ba603b363b0b43e91b8de6ec3f2b68316e2f402da0d6c38300cb76858bed07174e533c0e4342982bc3b8942feca892ec22c0e

    • SSDEEP

      24576:3uhaSOA2eZJ8NI8NahrOWrTx23PlQqmThzFHDUT+aAOwJqsaS2ROv:YD8NKT/sflQqChzVsCOQlqROv

    Score
    10/10
    evasionexecutionpersistenceupx

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Event Triggered Execution: Image File Execution Options Injection

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks