Overview

overview

10

Static

static

7

1b4d39edd5...18.exe

windows7-x64

10

1b4d39edd5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1b4d39edd5a219a34c5931dd45503af6_JaffaCakes118

  • Size

    38KB

  • Sample

    240701-pnc1navenj

  • MD5

    1b4d39edd5a219a34c5931dd45503af6

  • SHA1

    b52188ade34de59cc8e95e970b54612ae4db40df

  • SHA256

    36dbb5e353ba47a7398ea10ecec0e4ece6f2427177f6b65c5f91540e3305df7c

  • SHA512

    9a4fdbfc18a5e3d0c286372409594f695de729533640926158ce281f8fc7e87e652fc2373c97c4d9a7c1865d992e9d43cc81eac76bb13d179f87e3d5e180a086

  • SSDEEP

    768:pwVrZO8K0vagHUX/nyL6pgbCn84yuRxzaUE9cK1IkQYp:pwtZOaHHE0Cn84yiJLEuqIkQYp

Score
10/10
evasionexecutionpersistencetrojanupx

Malware Config

Targets

    • Target

      1b4d39edd5a219a34c5931dd45503af6_JaffaCakes118

    • Size

      38KB

    • MD5

      1b4d39edd5a219a34c5931dd45503af6

    • SHA1

      b52188ade34de59cc8e95e970b54612ae4db40df

    • SHA256

      36dbb5e353ba47a7398ea10ecec0e4ece6f2427177f6b65c5f91540e3305df7c

    • SHA512

      9a4fdbfc18a5e3d0c286372409594f695de729533640926158ce281f8fc7e87e652fc2373c97c4d9a7c1865d992e9d43cc81eac76bb13d179f87e3d5e180a086

    • SSDEEP

      768:pwVrZO8K0vagHUX/nyL6pgbCn84yuRxzaUE9cK1IkQYp:pwtZOaHHE0Cn84yiJLEuqIkQYp

    Score
    10/10
    evasionexecutionpersistencetrojanupx

    • Disables service(s)

      evasionexecution

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks