Overview

overview

8

Static

static

7

18aa7bde10...18.exe

windows7-x64

8

18aa7bde10...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    18aa7bde1042c7d72ae2bd8d1c1032ac_JaffaCakes118

  • Size

    13KB

  • Sample

    240628-ebw8nazbmd

  • MD5

    18aa7bde1042c7d72ae2bd8d1c1032ac

  • SHA1

    de3282cc538efaba95bfdb4aa99ed339e1bb4a9e

  • SHA256

    f0696e21db14e2568950abbd2959b64ec577a78bcee4d0aa7e1e029fc950d876

  • SHA512

    cc6c286a55f500e4e9280a0be969b16f9b54bc378fa4e0cdd2b436d0ad3d4394bdee8ad4b39cf466b316b0b860b920767abdc29b59d306b03bda02f2fdc81290

  • SSDEEP

    192:NEfcoW8r4BI/zjvJHkndHmDA9y3HlSPHqKfFoKJ77wc5lthUdgg5s9Dqzal:NEEGeI/zjv5Sw89j/97w+hUdLL0

Score
8/10
persistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      18aa7bde1042c7d72ae2bd8d1c1032ac_JaffaCakes118

    • Size

      13KB

    • MD5

      18aa7bde1042c7d72ae2bd8d1c1032ac

    • SHA1

      de3282cc538efaba95bfdb4aa99ed339e1bb4a9e

    • SHA256

      f0696e21db14e2568950abbd2959b64ec577a78bcee4d0aa7e1e029fc950d876

    • SHA512

      cc6c286a55f500e4e9280a0be969b16f9b54bc378fa4e0cdd2b436d0ad3d4394bdee8ad4b39cf466b316b0b860b920767abdc29b59d306b03bda02f2fdc81290

    • SSDEEP

      192:NEfcoW8r4BI/zjvJHkndHmDA9y3HlSPHqKfFoKJ77wc5lthUdgg5s9Dqzal:NEEGeI/zjv5Sw89j/97w+hUdLL0

    Score
    8/10
    persistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks